last executing test programs: 1.552637834s ago: executing program 2 (id=1373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.482876474s ago: executing program 2 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000c00000000000000e3780000850000007d00000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 1.377808164s ago: executing program 2 (id=1378): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000854) 1.377419554s ago: executing program 2 (id=1379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvfrom$inet(r1, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x300) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.277735503s ago: executing program 4 (id=1381): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.214881023s ago: executing program 4 (id=1384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 1.191961263s ago: executing program 4 (id=1385): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.105672863s ago: executing program 3 (id=1386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 1.039672503s ago: executing program 1 (id=1388): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111480000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 972.492483ms ago: executing program 3 (id=1389): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 920.443282ms ago: executing program 3 (id=1390): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r0, 0x0, 0x1, 0x0) fcntl$setstatus(r0, 0x407, 0x100000) close_range(r0, 0xffffffffffffffff, 0x0) 919.689883ms ago: executing program 1 (id=1391): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setreuid(0x0, 0xee01) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 816.455562ms ago: executing program 3 (id=1393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd5000fddbdf2505000e000800010008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20004) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100001004000000e27f00000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES64=r1], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$9p_rdma(&(0x7f0000004800), &(0x7f0000004840)='./control\x00', 0x0, 0x2808, 0x0) 749.849782ms ago: executing program 3 (id=1394): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r1, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 645.075422ms ago: executing program 3 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 615.114742ms ago: executing program 1 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) geteuid() getgroups(0x1, &(0x7f0000000200)=[0xee01]) 577.646422ms ago: executing program 1 (id=1397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x4000) 490.924191ms ago: executing program 2 (id=1398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000001a3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 462.592021ms ago: executing program 2 (id=1399): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/18, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005"], 0x50}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0004001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 379.288501ms ago: executing program 1 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 359.484631ms ago: executing program 1 (id=1401): listen(0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 293.813381ms ago: executing program 4 (id=1402): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 182.05209ms ago: executing program 0 (id=1403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r0}, 0x38) 151.85613ms ago: executing program 0 (id=1404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 118.14279ms ago: executing program 0 (id=1405): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4000000000000000, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 111.97146ms ago: executing program 4 (id=1406): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc3a01, 0x0) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000100)=0x8, 0x4) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc148, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0xc4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 96.25272ms ago: executing program 0 (id=1407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 16.0464ms ago: executing program 0 (id=1408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14}}, 0x50}}, 0x0) 15.19519ms ago: executing program 4 (id=1409): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fec, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1a7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2042, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x80220, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x50040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x4000000000000004, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 0 (id=1410): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_free\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl$Q_QUOTAON(0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): .327727][ T3517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.365717][ T3521] loop2: detected capacity change from 0 to 164 [ 35.380936][ T3521] process 'syz.2.37' launched '/dev/fd/4' with NULL argv: empty string added [ 35.392380][ T3521] syz.2.37: attempt to access beyond end of device [ 35.392380][ T3521] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 35.406581][ T3521] syz.2.37: attempt to access beyond end of device [ 35.406581][ T3521] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 35.519239][ T3531] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 35.830643][ T3517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.967323][ T3517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.042621][ T3517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.058660][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.066275][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.073680][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.082689][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.090186][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.097678][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.105211][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.112641][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.120060][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.127547][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.134982][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.142457][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.150003][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.157424][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.164864][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.172367][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.179830][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.187254][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.197286][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.204709][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.212169][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.219611][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.227043][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.234459][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.241983][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.249455][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.256981][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.264458][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.271935][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.279368][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.286805][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.294225][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.301694][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.309290][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.319374][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.364826][ T3517] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.382073][ T3517] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.397702][ T3517] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.410686][ T3517] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.603599][ T3597] ebtables: ebtables: counters copy to user failed while replacing table [ 36.669011][ T3606] loop1: detected capacity change from 0 to 1024 [ 36.677279][ T3606] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 36.688253][ T3606] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 36.698109][ T3606] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 36.708087][ T3606] EXT4-fs (loop1): invalid journal inode [ 36.903647][ C0] vcan0: j1939_tp_rxtimer: 0xffff888117899600: rx timeout, send abort [ 36.911960][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888117899600: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 37.091341][ T3628] loop1: detected capacity change from 0 to 512 [ 37.097985][ T3628] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 37.114113][ T3630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.253492][ T3648] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.283848][ T3651] netlink: 'syz.1.91': attribute type 13 has an invalid length. [ 37.342634][ T3659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'. [ 37.359511][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.366755][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.409602][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.419663][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.447260][ T3651] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.455840][ T3651] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.464214][ T3651] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.472607][ T3651] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.529374][ T3667] serio: Serial port ptm0 [ 37.553933][ T3651] syz.1.91 (3651) used greatest stack depth: 10680 bytes left [ 37.597046][ T3674] mmap: syz.1.100 (3674) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.804238][ T3692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.108'. [ 38.029023][ T3709] Process accounting resumed [ 38.175174][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.260045][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.344624][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.428772][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.538480][ T50] bridge_slave_1: left allmulticast mode [ 38.538501][ T50] bridge_slave_1: left promiscuous mode [ 38.538716][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.546404][ T50] bridge_slave_0: left allmulticast mode [ 38.546426][ T50] bridge_slave_0: left promiscuous mode [ 38.546565][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.788441][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.808928][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.818958][ T50] bond0 (unregistering): Released all slaves [ 38.879716][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 38.879732][ T29] audit: type=1400 audit(1737480084.777:370): avc: denied { create } for pid=3775 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.888348][ T29] audit: type=1400 audit(1737480084.777:371): avc: denied { write } for pid=3775 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.910392][ T3777] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 38.935975][ T29] audit: type=1400 audit(1737480084.807:372): avc: denied { nlmsg_write } for pid=3775 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.939111][ T3777] netlink: 224 bytes leftover after parsing attributes in process `syz.2.134'. [ 38.981003][ T50] hsr_slave_0: left promiscuous mode [ 38.990778][ T50] hsr_slave_1: left promiscuous mode [ 38.997525][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.004951][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.007563][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.007651][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.017579][ T50] veth1_macvtap: left promiscuous mode [ 39.017605][ T50] veth0_macvtap: left promiscuous mode [ 39.017717][ T50] veth1_vlan: left promiscuous mode [ 39.017751][ T50] veth0_vlan: left promiscuous mode [ 39.190786][ T50] team0 (unregistering): Port device team_slave_1 removed [ 39.198186][ T50] team0 (unregistering): Port device team_slave_0 removed [ 39.293124][ T3728] chnl_net:caif_netlink_parms(): no params data found [ 39.468833][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.476134][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.498737][ T3728] bridge_slave_0: entered allmulticast mode [ 39.505317][ T3728] bridge_slave_0: entered promiscuous mode [ 39.532743][ T3796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 39.558557][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.565704][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.573317][ T3728] bridge_slave_1: entered allmulticast mode [ 39.580238][ T3728] bridge_slave_1: entered promiscuous mode [ 39.593762][ T29] audit: type=1400 audit(1737480085.487:373): avc: denied { write } for pid=3802 comm="syz.4.138" name="file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.616043][ T29] audit: type=1400 audit(1737480085.487:374): avc: denied { ioctl } for pid=3802 comm="syz.4.138" path="/19/file0" dev="tmpfs" ino=116 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.667268][ T3728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.696989][ T3728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.751526][ T3728] team0: Port device team_slave_0 added [ 39.758448][ T29] audit: type=1400 audit(1737480085.657:375): avc: denied { cpu } for pid=3810 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.758947][ T3810] uprobe: syz.0.141:3810 failed to unregister, leaking uprobe [ 39.786459][ T3728] team0: Port device team_slave_1 added [ 39.849141][ T3816] xt_hashlimit: max too large, truncated to 1048576 [ 39.864126][ T3816] Cannot find set identified by id 0 to match [ 39.872339][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.879372][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.905630][ T3728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.116706][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.123740][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.149697][ T3728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.222814][ T3728] hsr_slave_0: entered promiscuous mode [ 40.236706][ T3728] hsr_slave_1: entered promiscuous mode [ 40.242676][ T3728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.255511][ T3728] Cannot create hsr debugfs directory [ 40.446556][ T29] audit: type=1400 audit(1737480086.257:376): avc: denied { block_suspend } for pid=3839 comm="syz.2.150" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.636072][ T29] audit: type=1326 audit(1737480086.537:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 40.680005][ T29] audit: type=1326 audit(1737480086.557:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 40.703407][ T29] audit: type=1326 audit(1737480086.557:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 40.748393][ T3874] loop1: detected capacity change from 0 to 128 [ 40.878958][ T3728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.893219][ T3894] syz.0.160[3894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.893348][ T3894] syz.0.160[3894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.906851][ T3893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 40.928945][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 40.935813][ T3894] syz.0.160[3894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.936468][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.955311][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.962819][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.970255][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.977716][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.985220][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.992699][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.000226][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.007813][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.015288][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.022748][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.030201][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.037686][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.045097][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.052508][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.059984][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.067497][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.074939][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.082374][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.089837][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.097351][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.104758][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.112280][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.119724][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.127148][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.134575][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.142004][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.149443][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.156861][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.164359][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.171769][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.179233][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.186666][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.194086][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.201567][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.208983][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.216389][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.223905][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.231420][ T2962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.239224][ T3728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.253258][ T2962] hid-generic 0000:0000:0000.0002: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 41.263848][ T3894] team0: Device gtp0 is of different type [ 41.290111][ T3728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.299202][ T3728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.411680][ T3912] loop4: detected capacity change from 0 to 512 [ 41.421751][ T3912] EXT4-fs: Ignoring removed i_version option [ 41.427882][ T3912] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.445388][ T3912] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.458641][ T3912] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.483731][ T3912] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.499841][ T3728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.507953][ T3915] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.511330][ T3728] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.526964][ T3912] EXT4-fs (loop4): 1 truncate cleaned up [ 41.534597][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.541767][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.551419][ T3912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.559964][ T3915] syz.2.170 (3915) used greatest stack depth: 10296 bytes left [ 41.577717][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.584849][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.593209][ T3912] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 41.605641][ T3921] macvlan0: entered promiscuous mode [ 41.611090][ T3921] bridge0: entered promiscuous mode [ 41.627403][ T3921] bridge0: port 3(macvlan0) entered blocking state [ 41.634037][ T3921] bridge0: port 3(macvlan0) entered disabled state [ 41.657365][ T3931] netlink: 3 bytes leftover after parsing attributes in process `syz.2.173'. [ 41.667763][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.678558][ T3921] macvlan0: entered allmulticast mode [ 41.684327][ T3921] bridge0: entered allmulticast mode [ 41.714206][ T3921] macvlan0: left allmulticast mode [ 41.719396][ T3921] bridge0: left allmulticast mode [ 41.765709][ T3921] bridge0: left promiscuous mode [ 41.801724][ T3949] pim6reg: entered allmulticast mode [ 41.814544][ T3949] pim6reg: left allmulticast mode [ 41.949201][ T3728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.017508][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 42.103694][ T24] IPVS: starting estimator thread 0... [ 42.170369][ T3728] veth0_vlan: entered promiscuous mode [ 42.189042][ T3999] loop4: detected capacity change from 0 to 764 [ 42.207845][ T3991] IPVS: using max 2400 ests per chain, 120000 per kthread [ 42.229675][ T3728] veth1_vlan: entered promiscuous mode [ 42.243903][ T4003] smc: net device bond0 applied user defined pnetid SYZ1 [ 42.269639][ T3728] veth0_macvtap: entered promiscuous mode [ 42.289467][ T4007] smc: net device bond0 erased user defined pnetid SYZ1 [ 42.298658][ T3728] veth1_macvtap: entered promiscuous mode [ 42.337217][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.347787][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.357735][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.368273][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.378285][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.388951][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.409499][ T3728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.419982][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.430552][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.440510][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.451107][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.461008][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.471509][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.538175][ T3728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.548969][ T4029] loop1: detected capacity change from 0 to 512 [ 42.574740][ T3728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.583599][ T3728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.592426][ T3728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.601261][ T3728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.618291][ T4029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.631513][ T4029] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.730970][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.849531][ T4056] loop1: detected capacity change from 0 to 512 [ 42.896806][ T4056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.934720][ T4062] syz.0.202[4062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.934787][ T4062] syz.0.202[4062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.946453][ T4056] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.971620][ T4062] syz.0.202[4062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.000406][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.024982][ T4064] syz.4.203[4064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.025058][ T4064] syz.4.203[4064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.047385][ T4064] syz.4.203[4064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.195049][ T4085] loop1: detected capacity change from 0 to 512 [ 43.220320][ T4084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4084 comm=syz.3.211 [ 43.244325][ T3376] kernel write not supported for file /118/attr/exec (pid: 3376 comm: kworker/1:5) [ 43.257575][ T4085] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.320249][ T4085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.372790][ T4085] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.213: corrupted inode contents [ 43.387092][ T4085] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.213: mark_inode_dirty error [ 43.411212][ T4085] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.213: corrupted inode contents [ 43.494527][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.611638][ T4119] ebtables: ebtables: counters copy to user failed while replacing table [ 43.804545][ T4136] loop2: detected capacity change from 0 to 256 [ 43.819176][ T4136] ======================================================= [ 43.819176][ T4136] WARNING: The mand mount option has been deprecated and [ 43.819176][ T4136] and is ignored by this kernel. Remove the mand [ 43.819176][ T4136] option from the mount to silence this warning. [ 43.819176][ T4136] ======================================================= [ 43.864809][ T4136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.233'. [ 43.910440][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 43.910456][ T29] audit: type=1400 audit(1737480089.807:478): avc: denied { read } for pid=4142 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.936559][ T4144] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.234'. [ 43.945743][ T4144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 43.964710][ T29] audit: type=1400 audit(1737480089.857:479): avc: denied { sqpoll } for pid=4145 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.985297][ T4147] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 43.996171][ T4147] syz_tun: entered promiscuous mode [ 44.042126][ T29] audit: type=1326 audit(1737480089.937:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 44.054382][ T4147] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 44.065545][ T29] audit: type=1326 audit(1737480089.937:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 44.099445][ T29] audit: type=1326 audit(1737480089.967:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 44.122818][ T29] audit: type=1326 audit(1737480089.967:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 44.146145][ T29] audit: type=1326 audit(1737480089.967:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 44.169476][ T29] audit: type=1326 audit(1737480089.967:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 44.192789][ T29] audit: type=1326 audit(1737480089.967:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 44.216118][ T29] audit: type=1326 audit(1737480089.967:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 44.311303][ T4158] bond_slave_1: entered promiscuous mode [ 44.317748][ T4158] bond_slave_1: left promiscuous mode [ 44.479194][ T4173] loop2: detected capacity change from 0 to 1024 [ 44.486078][ T4173] EXT4-fs: Ignoring removed orlov option [ 44.491775][ T4173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.540713][ T4173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.648406][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.735796][ T4185] loop2: detected capacity change from 0 to 2048 [ 44.780374][ T4185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.807762][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.886367][ T4209] bridge0: entered promiscuous mode [ 44.903651][ T4209] macvlan2: entered promiscuous mode [ 44.917109][ T4211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.931934][ T4209] bridge0: port 3(macvlan2) entered blocking state [ 44.938532][ T4209] bridge0: port 3(macvlan2) entered disabled state [ 44.964884][ T4209] macvlan2: entered allmulticast mode [ 44.970359][ T4209] bridge0: entered allmulticast mode [ 44.976448][ T4209] macvlan2: left allmulticast mode [ 44.981683][ T4209] bridge0: left allmulticast mode [ 44.987485][ T4209] bridge0: left promiscuous mode [ 45.144856][ T4221] loop1: detected capacity change from 0 to 2048 [ 45.182458][ T4221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.193842][ T4227] netlink: 'syz.0.269': attribute type 62 has an invalid length. [ 45.198431][ T4230] loop2: detected capacity change from 0 to 512 [ 45.216420][ T4230] EXT4-fs: Ignoring removed orlov option [ 45.222165][ T4230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.248132][ T4230] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 45.256179][ T4230] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 45.264595][ T4230] System zones: 0-1, 15-15, 18-18, 34-34 [ 45.271428][ T4230] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.288098][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.299649][ T4230] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 45.314244][ T4230] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 45.317980][ T4238] sctp: [Deprecated]: syz.0.275 (pid 4238) Use of int in max_burst socket option. [ 45.317980][ T4238] Use struct sctp_assoc_value instead [ 45.337455][ T4230] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.271: bg 0: block 40: padding at end of block bitmap is not set [ 45.361667][ T4230] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 45.372568][ T4230] EXT4-fs (loop2): 1 truncate cleaned up [ 45.378934][ T4230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.392995][ T4238] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.411309][ T4238] vhci_hcd: invalid port number 23 [ 45.440303][ T4244] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 45.529558][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.540324][ T4244] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 45.550430][ T4250] dvmrp0: entered allmulticast mode [ 45.567963][ T4250] dvmrp0: left allmulticast mode [ 45.634319][ T4257] Zero length message leads to an empty skb [ 46.248982][ T4260] IPVS: You probably need to specify IP address on multicast interface. [ 46.274952][ T4247] syz.4.276 (4247) used greatest stack depth: 10208 bytes left [ 46.278662][ T4260] IPVS: Error connecting to the multicast addr [ 46.870413][ T4352] loop4: detected capacity change from 0 to 1024 [ 46.894434][ T4351] bond_slave_1: entered promiscuous mode [ 46.908946][ T4351] bond_slave_1: left promiscuous mode [ 46.914757][ T4352] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.953953][ T4352] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.965697][ T4352] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.972796][ T4352] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 47.006948][ T4352] EXT4-fs (loop4): Remounting filesystem read-only [ 47.014924][ T4352] EXT4-fs (loop4): 1 orphan inode deleted [ 47.032808][ T4352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.046361][ T4352] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 47.053429][ T4352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.152492][ T4352] syz.4.310 (4352) used greatest stack depth: 9032 bytes left [ 47.705063][ T4393] loop3: detected capacity change from 0 to 256 [ 47.805175][ T4396] loop3: detected capacity change from 0 to 128 [ 47.838210][ T4386] Set syz1 is full, maxelem 65536 reached [ 47.884743][ T4396] syz.3.328: attempt to access beyond end of device [ 47.884743][ T4396] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 47.940753][ T4396] syz.3.328: attempt to access beyond end of device [ 47.940753][ T4396] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 47.971666][ T4396] syz.3.328: attempt to access beyond end of device [ 47.971666][ T4396] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.122899][ T4417] : renamed from bond0 [ 48.181760][ T4424] syz.3.340[4424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.181916][ T4424] syz.3.340[4424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.195065][ T4424] syz.3.340[4424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.245630][ T4427] loop3: detected capacity change from 0 to 2048 [ 48.295857][ T4427] loop3: p1 < > p4 [ 48.301416][ T4427] loop3: p4 size 8388608 extends beyond EOD, truncated [ 48.317613][ T4427] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 48.357043][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 48.365093][ T3742] udevd[3742]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 48.761997][ T4453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 48.789752][ T4455] loop3: detected capacity change from 0 to 128 [ 48.819605][ T4455] syz.3.351: attempt to access beyond end of device [ 48.819605][ T4455] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 48.840991][ T4455] syz.3.351: attempt to access beyond end of device [ 48.840991][ T4455] loop3: rw=524288, sector=657, nr_sectors = 256 limit=128 [ 48.854941][ T4455] syz.3.351: attempt to access beyond end of device [ 48.854941][ T4455] loop3: rw=0, sector=657, nr_sectors = 8 limit=128 [ 48.868175][ T4455] syz.3.351: attempt to access beyond end of device [ 48.868175][ T4455] loop3: rw=0, sector=657, nr_sectors = 8 limit=128 [ 48.925215][ T4459] loop2: detected capacity change from 0 to 256 [ 48.973991][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 48.974007][ T29] audit: type=1400 audit(1737480094.867:647): avc: denied { setopt } for pid=4461 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.014860][ T29] audit: type=1326 audit(1737480094.907:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 49.038229][ T29] audit: type=1326 audit(1737480094.907:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 49.061775][ T29] audit: type=1326 audit(1737480094.907:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 49.085052][ T29] audit: type=1326 audit(1737480094.907:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 49.108458][ T29] audit: type=1326 audit(1737480094.907:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d415347df code=0x7ffc0000 [ 49.131714][ T29] audit: type=1326 audit(1737480094.907:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 49.159165][ T29] audit: type=1400 audit(1737480094.937:654): avc: denied { bind } for pid=4463 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.178831][ T29] audit: type=1400 audit(1737480094.937:655): avc: denied { node_bind } for pid=4463 comm="syz.0.355" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 49.200641][ T29] audit: type=1400 audit(1737480094.937:656): avc: denied { name_bind } for pid=4463 comm="syz.0.355" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 49.326868][ T2999] udevd[2999]: worker [3742] terminated by signal 33 (Unknown signal 33) [ 49.331775][ T4482] block device autoloading is deprecated and will be removed. [ 49.354547][ T4480] syz.2.362 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.360391][ T2999] udevd[2999]: worker [3742] failed while handling '/devices/virtual/block/loop4' [ 49.617332][ T4508] netlink: 'syz.4.374': attribute type 13 has an invalid length. [ 49.724581][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.731919][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.813142][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 49.846152][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.874649][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.936021][ T4508] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.944953][ T4508] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.954102][ T4508] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.963297][ T4508] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.978267][ T4522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 49.987281][ T4522] tipc: Invalid UDP bearer configuration [ 49.987299][ T4522] tipc: Enabling of bearer rejected, failed to enable media [ 50.444454][ T4564] loop2: detected capacity change from 0 to 8192 [ 50.456851][ T4564] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.506251][ T4568] 9pnet_fd: Insufficient options for proto=fd [ 50.820735][ T4603] batadv_slave_1: entered promiscuous mode [ 50.843210][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 50.870843][ T4603] batadv_slave_1 (unregistering): left promiscuous mode [ 50.880543][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.993946][ T4617] loop1: detected capacity change from 0 to 128 [ 51.091139][ T4617] syz.1.407: attempt to access beyond end of device [ 51.091139][ T4617] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 51.175107][ T4617] syz.1.407: attempt to access beyond end of device [ 51.175107][ T4617] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 51.201442][ T4617] syz.1.407: attempt to access beyond end of device [ 51.201442][ T4617] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.356884][ T4638] loop2: detected capacity change from 0 to 2048 [ 51.390726][ T4638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.416433][ T4638] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 51.428852][ T4638] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.428852][ T4638] [ 51.438553][ T4638] EXT4-fs (loop2): Total free blocks count 0 [ 51.444551][ T4638] EXT4-fs (loop2): Free/Dirty block details [ 51.450517][ T4638] EXT4-fs (loop2): free_blocks=0 [ 51.455496][ T4638] EXT4-fs (loop2): dirty_blocks=0 [ 51.460554][ T4638] EXT4-fs (loop2): Block reservation details [ 51.466574][ T4638] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 51.490557][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.649234][ T4667] batadv_slave_1: entered promiscuous mode [ 51.655839][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 51.667366][ T4667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.668758][ T4669] loop3: detected capacity change from 0 to 512 [ 51.691384][ T4669] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.430: corrupted in-inode xattr: e_value size too large [ 51.707226][ T4669] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.430: couldn't read orphan inode 15 (err -117) [ 51.709187][ T4667] batadv_slave_1 (unregistering): left promiscuous mode [ 51.719797][ T4669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.755974][ T4667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.779777][ T4669] EXT4-fs (loop3): shut down requested (2) [ 51.786464][ T4669] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.795317][ T4669] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.805146][ T4669] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.807043][ T4675] IPVS: Error joining to the multicast group [ 51.814499][ T4669] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.834199][ T4669] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.847613][ T4669] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 51.868173][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.084622][ T4701] ref_ctr increment failed for inode: 0x24c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888107cf0540 [ 52.107958][ T4700] uprobe: syz.2.444:4700 failed to unregister, leaking uprobe [ 52.118213][ T4705] loop4: detected capacity change from 0 to 128 [ 52.239105][ T4718] devtmpfs: Too few inodes for current use [ 52.427942][ T4741] loop4: detected capacity change from 0 to 512 [ 52.439219][ T4741] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.460: corrupted in-inode xattr: e_value size too large [ 52.457714][ T4741] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.460: couldn't read orphan inode 15 (err -117) [ 52.470613][ T4741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.510692][ T4741] EXT4-fs (loop4): shut down requested (2) [ 52.517230][ T4741] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.526339][ T4741] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.551794][ T4741] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.562721][ T4756] xt_hashlimit: max too large, truncated to 1048576 [ 52.573173][ T4755] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 52.592905][ T4741] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.603549][ T4755] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 52.635691][ T4741] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 52.657428][ T4764] batadv_slave_1: entered promiscuous mode [ 52.670603][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 52.684131][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.684407][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.714947][ T4764] batadv_slave_1 (unregistering): left promiscuous mode [ 52.738182][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.850627][ T4785] loop3: detected capacity change from 0 to 512 [ 52.904685][ T4785] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.968303][ T4785] EXT4-fs (loop3): 1 truncate cleaned up [ 52.974936][ T4785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.021372][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 53.030374][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 53.095497][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.182276][ T4828] sd 0:0:1:0: device reset [ 53.235800][ T4834] ref_ctr increment failed for inode: 0x215 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811644af40 [ 53.258111][ T4832] uprobe: syz.0.488:4832 failed to unregister, leaking uprobe [ 53.273247][ T4839] pim6reg1: entered promiscuous mode [ 53.278613][ T4839] pim6reg1: entered allmulticast mode [ 54.199116][ T4916] syz.0.513[4916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.199217][ T4916] syz.0.513[4916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.212016][ T4916] syz.0.513[4916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.512143][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 54.512158][ T29] audit: type=1400 audit(1737480100.407:1136): avc: denied { relabelfrom } for pid=4936 comm="syz.4.522" name="NETLINK" dev="sockfs" ino=9282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.577609][ T29] audit: type=1400 audit(1737480100.457:1137): avc: denied { relabelto } for pid=4936 comm="syz.4.522" name="NETLINK" dev="sockfs" ino=9282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 54.717836][ T29] audit: type=1326 audit(1737480100.577:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 54.741322][ T29] audit: type=1326 audit(1737480100.577:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 54.764802][ T29] audit: type=1326 audit(1737480100.597:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 54.788534][ T29] audit: type=1326 audit(1737480100.597:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 54.812049][ T29] audit: type=1326 audit(1737480100.597:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 54.835480][ T29] audit: type=1326 audit(1737480100.597:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 54.844502][ T4970] loop2: detected capacity change from 0 to 2048 [ 54.858826][ T29] audit: type=1326 audit(1737480100.597:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 54.888630][ T29] audit: type=1326 audit(1737480100.597:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 54.983791][ T4970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.031229][ T4956] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.110194][ T4999] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 55.110194][ T4999] program syz.0.537 not setting count and/or reply_len properly [ 55.325923][ T5023] loop1: detected capacity change from 0 to 8192 [ 55.335578][ T5023] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.686357][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.809590][ T5048] bridge0: port 3(vlan2) entered blocking state [ 55.815947][ T5048] bridge0: port 3(vlan2) entered disabled state [ 55.825386][ T5052] loop2: detected capacity change from 0 to 512 [ 55.845737][ T5048] vlan2: entered allmulticast mode [ 55.852953][ T5048] vlan2: left allmulticast mode [ 55.880943][ T5052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.898963][ T5052] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.943680][ T5060] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.986989][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.002972][ T5064] vlan2: entered allmulticast mode [ 56.152289][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.159822][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.167327][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.185678][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.193128][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.200641][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.208097][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.215552][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.222955][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.230532][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.237969][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.245381][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.252964][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.260401][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.268124][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.275609][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.282998][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.290655][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.298109][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.305637][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.313136][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.320555][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.327964][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.335425][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.342920][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.350444][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.357916][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.365387][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.372929][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.380438][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.397896][ T3376] hid-generic 0000:0000:0000.0003: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 56.465143][ T5086] ip6gre1: entered allmulticast mode [ 56.534346][ T5088] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 56.613522][ T5100] loop1: detected capacity change from 0 to 256 [ 56.630914][ T5100] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.779410][ T5106] ebtables: ebtables: counters copy to user failed while replacing table [ 57.176882][ T5129] loop4: detected capacity change from 0 to 512 [ 57.209772][ T5129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.237876][ T5129] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.276208][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.302609][ T5141] loop2: detected capacity change from 0 to 2048 [ 57.309445][ T5141] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.341876][ T5141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.361030][ T5143] ebtables: ebtables: counters copy to user failed while replacing table [ 57.547616][ T5157] loop1: detected capacity change from 0 to 512 [ 57.579073][ T5157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.595779][ T5157] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.610980][ T5157] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 57.658500][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.675958][ T5173] loop3: detected capacity change from 0 to 512 [ 57.709000][ T5173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.729313][ T5173] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.756222][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.766789][ T5175] netlink: 'syz.0.602': attribute type 3 has an invalid length. [ 57.882952][ T5194] syz.1.608[5194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.883049][ T5194] syz.1.608[5194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.895194][ T5194] syz.1.608[5194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.948578][ T5199] loop3: detected capacity change from 0 to 256 [ 57.978909][ T5199] FAT-fs (loop3): Directory bread(block 64) failed [ 57.987035][ T5199] FAT-fs (loop3): Directory bread(block 65) failed [ 57.993678][ T5199] FAT-fs (loop3): Directory bread(block 66) failed [ 58.001168][ T5199] FAT-fs (loop3): Directory bread(block 67) failed [ 58.008860][ T5199] FAT-fs (loop3): Directory bread(block 68) failed [ 58.016302][ T5199] FAT-fs (loop3): Directory bread(block 69) failed [ 58.023075][ T5199] FAT-fs (loop3): Directory bread(block 70) failed [ 58.031248][ T5199] FAT-fs (loop3): Directory bread(block 71) failed [ 58.046533][ T5199] FAT-fs (loop3): Directory bread(block 72) failed [ 58.063325][ T5199] FAT-fs (loop3): Directory bread(block 73) failed [ 58.090621][ T5199] bio_check_eod: 482 callbacks suppressed [ 58.090636][ T5199] syz.3.611: attempt to access beyond end of device [ 58.090636][ T5199] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 58.237745][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.250384][ T5209] syz.1.615[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.250450][ T5209] syz.1.615[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.262719][ T5207] bridge0: port 3(vlan2) entered blocking state [ 58.280412][ T5207] bridge0: port 3(vlan2) entered disabled state [ 58.287129][ T5209] syz.1.615[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.288205][ T5207] vlan2: entered allmulticast mode [ 58.349192][ T5207] vlan2: left allmulticast mode [ 58.376424][ T5216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.618'. [ 58.399801][ T5216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.618'. [ 58.568368][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 58.582872][ T5234] vlan2: entered promiscuous mode [ 58.588515][ T5234] bond0: entered promiscuous mode [ 58.593560][ T5234] bond_slave_0: entered promiscuous mode [ 58.596093][ T5237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 58.599368][ T5234] bond_slave_1: entered promiscuous mode [ 58.635511][ T5220] loop2: detected capacity change from 0 to 8192 [ 58.638150][ T5239] loop4: detected capacity change from 0 to 512 [ 58.647860][ T5220] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000006' [ 58.663642][ T5234] bond0: left promiscuous mode [ 58.665985][ T5239] EXT4-fs: Ignoring removed i_version option [ 58.668502][ T5234] bond_slave_0: left promiscuous mode [ 58.674439][ T5239] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.686672][ T5234] bond_slave_1: left promiscuous mode [ 58.698718][ T5239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.712178][ T5241] loop1: detected capacity change from 0 to 512 [ 58.729456][ T5241] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.746642][ T5239] EXT4-fs (loop4): 1 truncate cleaned up [ 58.757250][ T5241] EXT4-fs (loop1): 1 truncate cleaned up [ 58.764722][ T5239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.794121][ T5241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.836694][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.914100][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.916111][ T5252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 58.953638][ T5255] netlink: 'syz.0.634': attribute type 10 has an invalid length. [ 58.961513][ T5255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.634'. [ 58.994437][ T5255] team0: Port device geneve1 added [ 59.120691][ T804] IPVS: starting estimator thread 0... [ 59.215784][ T5272] IPVS: using max 2160 ests per chain, 108000 per kthread [ 59.315001][ T5288] loop1: detected capacity change from 0 to 128 [ 59.356772][ T5288] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.377016][ T5288] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.480587][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.506835][ T5301] netlink: 'syz.1.650': attribute type 10 has an invalid length. [ 59.514638][ T5301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.650'. [ 59.523849][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 59.523940][ T29] audit: type=1326 audit(1737480105.427:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d4152cce7 code=0x7ffc0000 [ 59.553552][ T29] audit: type=1326 audit(1737480105.427:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d414d1f29 code=0x7ffc0000 [ 59.576907][ T29] audit: type=1326 audit(1737480105.427:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 59.601648][ T5301] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.609926][ T5301] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.618179][ T5301] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.626456][ T5301] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.651994][ T5301] team0: Port device geneve1 added [ 59.657707][ T29] audit: type=1326 audit(1737480105.507:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d4152cce7 code=0x7ffc0000 [ 59.681073][ T29] audit: type=1326 audit(1737480105.507:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d414d1f29 code=0x7ffc0000 [ 59.704558][ T29] audit: type=1326 audit(1737480105.507:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 59.728019][ T29] audit: type=1326 audit(1737480105.537:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d4152cce7 code=0x7ffc0000 [ 59.751344][ T29] audit: type=1326 audit(1737480105.547:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d414d1f29 code=0x7ffc0000 [ 59.774724][ T29] audit: type=1326 audit(1737480105.547:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9d41535d29 code=0x7ffc0000 [ 59.798085][ T29] audit: type=1326 audit(1737480105.547:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d4152cce7 code=0x7ffc0000 [ 59.899272][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 59.908307][ T5316] netlink: 'syz.0.655': attribute type 15 has an invalid length. [ 59.921548][ T5316] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 59.930299][ T5316] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 59.939172][ T5316] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 59.947872][ T5316] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 59.960316][ T5316] vxlan0: entered promiscuous mode [ 60.114731][ T5322] loop4: detected capacity change from 0 to 128 [ 60.129038][ T5322] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 60.142080][ T5322] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 60.150024][ T5322] FAT-fs (loop4): Filesystem has been set read-only [ 60.176785][ T5324] loop3: detected capacity change from 0 to 512 [ 60.210174][ T5324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.228473][ T3308] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 60.238014][ T5324] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.271977][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 60.303237][ T5328] IPVS: Error joining to the multicast group [ 60.355004][ T5333] ALSA: seq fatal error: cannot create timer (-19) [ 60.388965][ T5338] bridge0: port 3(vlan2) entered blocking state [ 60.395294][ T5338] bridge0: port 3(vlan2) entered disabled state [ 60.401796][ T5338] vlan2: entered allmulticast mode [ 60.407553][ T5338] vlan2: left allmulticast mode [ 61.017182][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.091257][ T5386] random: crng reseeded on system resumption [ 61.115764][ T5388] pimreg: entered allmulticast mode [ 61.123193][ T5388] pimreg: left allmulticast mode [ 61.400171][ T5413] loop3: detected capacity change from 0 to 512 [ 61.415917][ T5411] loop4: detected capacity change from 0 to 512 [ 61.423930][ T5413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.437103][ T5413] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.473338][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.500369][ T5411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.513667][ T5411] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.539312][ T5411] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 61.587031][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.709943][ T5433] loop4: detected capacity change from 0 to 8192 [ 61.756892][ T5433] loop4: p1 p2 p3 p4 [ 61.762380][ T5433] loop4: p1 start 51379968 is beyond EOD, truncated [ 61.778297][ T5433] loop4: p3 size 100663552 extends beyond EOD, truncated [ 61.786564][ T5433] loop4: p4 size 81920 extends beyond EOD, truncated [ 61.795286][ T5441] netem: change failed [ 61.827674][ T5433] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.015642][ T5456] Falling back ldisc for ttyS3. [ 62.162575][ T5470] loop1: detected capacity change from 0 to 8192 [ 62.169602][ T5475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5475 comm=syz.3.718 [ 62.182261][ T5475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5475 comm=syz.3.718 [ 62.245818][ T5482] Invalid ELF header magic: != ELF [ 62.299324][ T5487] vlan0: entered promiscuous mode [ 62.305198][ T5487] : (slave vlan0): Opening slave failed [ 62.312092][ T5489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.725'. [ 62.323344][ T5489] bond0: invalid ARP target 0.0.0.0 specified for addition [ 62.330688][ T5489] bond0: option arp_ip_target: invalid value (0) [ 62.409473][ T5499] loop1: detected capacity change from 0 to 512 [ 62.416667][ T5499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.427897][ T5499] EXT4-fs (loop1): 1 truncate cleaned up [ 62.434008][ T5499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.483925][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.608196][ T5519] syz.3.737[5519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.608264][ T5519] syz.3.737[5519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.626966][ T5519] syz.3.737[5519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.751058][ T5531] Set syz1 is full, maxelem 65536 reached [ 62.756918][ T5527] vlan2: entered promiscuous mode [ 62.773759][ T5527] bond0: (slave vlan2): Opening slave failed [ 62.797383][ T5530] syzkaller0: entered promiscuous mode [ 62.802966][ T5530] syzkaller0: entered allmulticast mode [ 62.883395][ T5537] : renamed from bond0 [ 62.922672][ T5541] loop3: detected capacity change from 0 to 764 [ 62.942149][ T5541] Symlink component flag not implemented [ 62.992452][ T5546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.002630][ T5546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.080363][ T5554] syz.3.755[5554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.080424][ T5554] syz.3.755[5554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.100595][ T5554] syz.3.755[5554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.131359][ T5558] loop4: detected capacity change from 0 to 1024 [ 63.150467][ T5558] EXT4-fs: Ignoring removed orlov option [ 63.156277][ T5558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.188956][ T5558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.251460][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.280210][ T5574] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 63.285639][ T5572] loop4: detected capacity change from 0 to 2048 [ 63.553012][ T5602] @ÿ: renamed from bond_slave_0 (while UP) [ 63.631995][ T5609] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.693058][ T5613] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 63.760594][ T5618] syzkaller0: entered promiscuous mode [ 63.766319][ T5618] syzkaller0: entered allmulticast mode [ 63.959986][ T5641] __nla_validate_parse: 1 callbacks suppressed [ 63.960003][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 64.035538][ T5644] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5644 comm=syz.0.793 [ 64.048192][ T5644] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5644 comm=syz.0.793 [ 64.232692][ T5668] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.802'. [ 64.243450][ T5665] ebtables: ebtables: counters copy to user failed while replacing table [ 64.329370][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.806'. [ 64.338664][ T5677] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 64.363164][ T5679] loop2: detected capacity change from 0 to 2048 [ 64.821620][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 64.821637][ T29] audit: type=1326 audit(1737480110.717:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 64.823310][ T5686] loop2: detected capacity change from 0 to 512 [ 64.827901][ T29] audit: type=1326 audit(1737480110.717:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 64.889790][ T5686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.891133][ T29] audit: type=1326 audit(1737480110.757:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 64.911865][ T5686] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.925592][ T29] audit: type=1326 audit(1737480110.757:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 64.959484][ T29] audit: type=1326 audit(1737480110.757:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 64.983006][ T29] audit: type=1326 audit(1737480110.757:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 65.006310][ T29] audit: type=1326 audit(1737480110.757:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 65.029695][ T29] audit: type=1326 audit(1737480110.757:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 65.053537][ T29] audit: type=1326 audit(1737480110.757:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd5cea95d29 code=0x7ffc0000 [ 65.076885][ T29] audit: type=1326 audit(1737480110.787:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5cea8cce7 code=0x7ffc0000 [ 65.131596][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.322449][ T5706] syzkaller0: entered promiscuous mode [ 65.328192][ T5706] syzkaller0: entered allmulticast mode [ 65.337261][ T5707] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.816'. [ 65.346416][ T5707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.816'. [ 65.559907][ T5717] netlink: 240 bytes leftover after parsing attributes in process `syz.2.819'. [ 65.696155][ T5729] loop1: detected capacity change from 0 to 1024 [ 65.717879][ T5729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.791310][ T5735] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 623: comm syz.1.829: Attempting to read directory block (623) that is past i_size (638464) [ 65.808870][ T5735] EXT4-fs (loop1): Remounting filesystem read-only [ 65.828168][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.929030][ T5747] syz.2.835[5747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.929081][ T5747] syz.2.835[5747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.941187][ T5747] syz.2.835[5747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.140591][ T5766] loop2: detected capacity change from 0 to 512 [ 66.164949][ T5770] syz.3.846[5770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.179456][ T5766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.203643][ T5766] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.279860][ T5784] loop1: detected capacity change from 0 to 512 [ 66.292154][ T5784] EXT4-fs: Ignoring removed nobh option [ 66.292925][ T5782] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 66.316112][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.345377][ T5784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.360058][ T5784] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.378571][ T5784] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.851: bg 0: block 224: padding at end of block bitmap is not set [ 66.396332][ T5784] EXT4-fs (loop1): Remounting filesystem read-only [ 66.457174][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.482134][ T5801] loop2: detected capacity change from 0 to 512 [ 66.525208][ T5801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.558184][ T5801] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.572543][ T5809] loop3: detected capacity change from 0 to 2048 [ 66.579521][ T5809] EXT4-fs: Ignoring removed bh option [ 66.598062][ T5809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.734069][ T9] kernel write not supported for file /391/attr/sockcreate (pid: 9 comm: kworker/0:1) [ 66.961142][ T28] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.975995][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 66.988515][ T28] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.988515][ T28] [ 66.998214][ T28] EXT4-fs (loop3): Total free blocks count 0 [ 67.004210][ T28] EXT4-fs (loop3): Free/Dirty block details [ 67.010175][ T28] EXT4-fs (loop3): free_blocks=2415919104 [ 67.015932][ T28] EXT4-fs (loop3): dirty_blocks=8208 [ 67.021210][ T28] EXT4-fs (loop3): Block reservation details [ 67.027214][ T28] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 67.044020][ T54] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 67.327623][ T5839] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 67.337404][ T5839] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 67.729007][ T5865] loop4: detected capacity change from 0 to 512 [ 67.749385][ T5865] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.156523][ T5883] bpf_get_probe_write_proto: 2 callbacks suppressed [ 68.156633][ T5883] syz.0.889[5883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.164392][ T5883] syz.0.889[5883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.177026][ T5883] syz.0.889[5883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.282122][ T5893] smc: net device bond0 applied user defined pnetid SYZ0 [ 68.302270][ T5893] netlink: 116 bytes leftover after parsing attributes in process `syz.0.894'. [ 68.311647][ T5893] smc: net device bond0 erased user defined pnetid SYZ0 [ 68.439056][ T5911] Invalid ELF header magic: != ELF [ 68.516808][ T5921] loop1: detected capacity change from 0 to 128 [ 68.524369][ T5921] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 68.542190][ T5921] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 68.543964][ T5916] loop3: detected capacity change from 0 to 512 [ 68.550148][ T5921] FAT-fs (loop1): Filesystem has been set read-only [ 68.601504][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 68.604140][ T5916] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.611160][ T5927] IPVS: Error joining to the multicast group [ 68.635186][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 68.646489][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 68.684809][ T5916] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 68.739721][ T5941] loop4: detected capacity change from 0 to 512 [ 68.754213][ T3297] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 68.774237][ T5946] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 68.790635][ T5946] bond1: entered promiscuous mode [ 68.796148][ T5946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.820616][ T5946] loop3: detected capacity change from 0 to 1024 [ 68.827587][ T5946] EXT4-fs: Ignoring removed i_version option [ 68.833749][ T5946] EXT4-fs: Ignoring removed oldalloc option [ 68.841557][ T5946] ext3: Unknown parameter 'obj_user' [ 68.847934][ T5941] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.897432][ T5946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.916438][ T5946] bond1: (slave bond2): making interface the new active one [ 68.923947][ T5946] bond2: entered promiscuous mode [ 68.941626][ T5946] bond1: (slave bond2): Enslaving as an active interface with an up link [ 68.973068][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 69.138057][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 69.149640][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 69.191848][ T5996] capability: warning: `syz.0.937' uses deprecated v2 capabilities in a way that may be insecure [ 69.955387][ T29] kauditd_printk_skb: 1239 callbacks suppressed [ 69.955402][ T29] audit: type=1400 audit(1737480115.847:3518): avc: denied { create } for pid=6025 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.985698][ T29] audit: type=1326 audit(1737480115.887:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.009448][ T29] audit: type=1326 audit(1737480115.887:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.032815][ T29] audit: type=1326 audit(1737480115.887:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.056394][ T29] audit: type=1326 audit(1737480115.887:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.079945][ T29] audit: type=1326 audit(1737480115.887:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.097964][ T6032] netlink: 'syz.1.951': attribute type 10 has an invalid length. [ 70.125256][ T29] audit: type=1326 audit(1737480115.887:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.148676][ T29] audit: type=1326 audit(1737480115.887:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.157438][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.172229][ T29] audit: type=1326 audit(1737480115.887:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.202346][ T29] audit: type=1326 audit(1737480115.957:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.3.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 70.230639][ T6032] : (slave batadv0): Enslaving as an active interface with an up link [ 70.313996][ T6045] loop3: detected capacity change from 0 to 1024 [ 70.337649][ T6045] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 70.398375][ T6045] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.956: corrupted in-inode xattr: bad magic number in in-inode xattr [ 70.487523][ C0] hrtimer: interrupt took 36525 ns [ 70.636902][ T6077] netem: unknown loss type 0 [ 70.641562][ T6077] netem: change failed [ 71.072315][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.079555][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.111203][ T6121] bridge0: entered allmulticast mode [ 71.130495][ T6127] bridge_slave_1: left allmulticast mode [ 71.136193][ T6127] bridge_slave_1: left promiscuous mode [ 71.141890][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.195413][ T6127] bridge_slave_0: left allmulticast mode [ 71.201235][ T6127] bridge_slave_0: left promiscuous mode [ 71.207065][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.587581][ T6144] ip6_vti0: entered promiscuous mode [ 71.593103][ T6144] vlan2: entered promiscuous mode [ 71.614441][ T6144] ip6_vti0: left promiscuous mode [ 71.753641][ T6157] loop4: detected capacity change from 0 to 164 [ 71.783619][ T6157] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.806488][ T6157] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.821456][ T6157] rock: directory entry would overflow storage [ 71.827760][ T6157] rock: sig=0x4f50, size=4, remaining=3 [ 71.833341][ T6157] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.911650][ T6168] syzkaller0: entered allmulticast mode [ 71.937600][ T6168] syzkaller0 (unregistering): left allmulticast mode [ 71.957458][ T6174] uprobe: syz.0.1007:6174 failed to unregister, leaking uprobe [ 72.038259][ T6173] uprobe: syz.0.1007:6173 failed to unregister, leaking uprobe [ 72.186529][ T6196] Falling back ldisc for ttyS3. [ 72.685914][ T6254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1019'. [ 72.725084][ T6254] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 72.752618][ T6254] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.058582][ T6345] loop2: detected capacity change from 0 to 512 [ 73.076879][ T6345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.097834][ T6345] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 73.102823][ T6350] vlan2: entered promiscuous mode [ 73.105863][ T6345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 73.118108][ T6350] bond0: entered promiscuous mode [ 73.123916][ T6350] @ÿ: entered promiscuous mode [ 73.129104][ T6350] bond_slave_1: entered promiscuous mode [ 73.135407][ T6345] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 73.145043][ T6345] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 73.154123][ T6350] bond0: left promiscuous mode [ 73.154374][ T6345] EXT4-fs mount: 10 callbacks suppressed [ 73.154389][ T6345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.158990][ T6350] @ÿ: left promiscuous mode [ 73.181332][ T6350] bond_slave_1: left promiscuous mode [ 73.189885][ T6345] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 73.230251][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.349592][ T6367] loop2: detected capacity change from 0 to 512 [ 73.380851][ T6367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.394440][ T6367] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.468935][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.519967][ T6398] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1049'. [ 73.605038][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1054'. [ 73.715851][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.734953][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.912196][ T6455] loop4: detected capacity change from 0 to 1024 [ 73.919757][ T6455] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.943031][ T6455] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 73.953767][ T6455] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.961476][ T6455] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 73.972476][ T6455] EXT4-fs (loop4): Remounting filesystem read-only [ 73.983638][ T6455] EXT4-fs (loop4): 1 orphan inode deleted [ 73.994536][ T6455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.006815][ T6455] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 74.014722][ T6455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.560795][ T6559] loop2: detected capacity change from 0 to 164 [ 74.577531][ T6559] syz.2.1075: attempt to access beyond end of device [ 74.577531][ T6559] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.596228][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.604672][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.605714][ T6559] syz.2.1075: attempt to access beyond end of device [ 74.605714][ T6559] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.770563][ T6594] geneve0: entered allmulticast mode [ 74.823117][ T6602] openvswitch: netlink: Message has 12 unknown bytes. [ 74.860631][ T6608] loop1: detected capacity change from 0 to 512 [ 74.868464][ T6609] loop4: detected capacity change from 0 to 128 [ 74.907492][ T6609] syz.4.1086: attempt to access beyond end of device [ 74.907492][ T6609] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 74.948977][ T6608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.962026][ T6608] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.029689][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.239782][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 75.239818][ T29] audit: type=1400 audit(1737480121.137:3680): avc: denied { bind } for pid=6648 comm="syz.0.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.265671][ T29] audit: type=1400 audit(1737480121.137:3681): avc: denied { write } for pid=6648 comm="syz.0.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.306536][ T6654] bond0: (slave syz_tun): Releasing backup interface [ 75.425311][ T29] audit: type=1326 audit(1737480121.317:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 75.450925][ T29] audit: type=1326 audit(1737480121.327:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 75.474429][ T29] audit: type=1326 audit(1737480121.327:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 75.497935][ T29] audit: type=1326 audit(1737480121.327:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 75.521423][ T29] audit: type=1326 audit(1737480121.327:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 75.544911][ T29] audit: type=1326 audit(1737480121.327:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 75.568561][ T29] audit: type=1326 audit(1737480121.327:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 75.591984][ T29] audit: type=1326 audit(1737480121.327:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.4.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 75.664050][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.671335][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.678596][ T6666] bridge0: entered allmulticast mode [ 75.694500][ T6666] bridge_slave_1: left allmulticast mode [ 75.700248][ T6666] bridge_slave_1: left promiscuous mode [ 75.706051][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.713990][ T6666] bridge_slave_0: left allmulticast mode [ 75.719658][ T6666] bridge_slave_0: left promiscuous mode [ 75.725371][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.807851][ T6671] bond_slave_1: entered promiscuous mode [ 75.813992][ T6671] bond_slave_1: left promiscuous mode [ 75.847922][ T6673] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1109'. [ 75.877860][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1110'. [ 76.067154][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'. [ 76.261252][ T6701] bridge0: entered allmulticast mode [ 76.277267][ T6701] bridge_slave_1: left allmulticast mode [ 76.282943][ T6701] bridge_slave_1: left promiscuous mode [ 76.288667][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.368415][ T6701] bridge_slave_0: left allmulticast mode [ 76.374357][ T6701] bridge_slave_0: left promiscuous mode [ 76.380066][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.528640][ T6704] vhci_hcd: invalid port number 255 [ 76.533885][ T6704] vhci_hcd: default hub control req: 0400 v0000 i00ff l0 [ 76.541869][ T6706] pim6reg1: entered promiscuous mode [ 76.547224][ T6706] pim6reg1: entered allmulticast mode [ 76.573071][ T6708] loop4: detected capacity change from 0 to 512 [ 76.592013][ T6708] EXT4-fs: Ignoring removed i_version option [ 76.636529][ T6708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.660550][ T6708] ext4 filesystem being mounted at /195/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.695988][ T6708] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #4: comm syz.4.1123: corrupted inode contents [ 76.715979][ T6708] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #4: comm syz.4.1123: mark_inode_dirty error [ 76.748795][ T6708] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #4: comm syz.4.1123: corrupted inode contents [ 76.785059][ T6708] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.1123: mark_inode_dirty error [ 76.806979][ T6708] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1123: Failed to acquire dquot type 1 [ 76.863505][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.921633][ T6730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 76.932036][ T6730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.977339][ T6730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 76.987686][ T6730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.066085][ T6730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 77.076397][ T6730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.146813][ T6730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 77.157165][ T6730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.192540][ T6758] loop1: detected capacity change from 0 to 512 [ 77.200274][ T6758] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.207271][ T6758] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 77.224127][ T6758] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 77.234731][ T6758] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.1145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 77.240106][ T6730] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 77.254439][ T6758] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1145: couldn't read orphan inode 13 (err -117) [ 77.260748][ T6730] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.274980][ T6758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.284055][ T6730] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 77.301329][ T6730] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.311540][ T6758] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 77.312939][ T6730] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 77.322983][ T6758] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2 [ 77.328986][ T6730] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.350491][ T6730] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 77.358845][ T6730] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.417524][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.485131][ T6772] syz.0.1151[6772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.485207][ T6772] syz.0.1151[6772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.497134][ T6772] syz.0.1151[6772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.646712][ T6788] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.698908][ T6794] syz.1.1161: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 77.713534][ T6794] CPU: 0 UID: 0 PID: 6794 Comm: syz.1.1161 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 77.723889][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 77.733963][ T6794] Call Trace: [ 77.737332][ T6794] [ 77.740272][ T6794] dump_stack_lvl+0xf2/0x150 [ 77.744890][ T6794] dump_stack+0x15/0x1a [ 77.749089][ T6794] warn_alloc+0x145/0x1b0 [ 77.753432][ T6794] ? __schedule+0x6fa/0x930 [ 77.758015][ T6794] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 77.763936][ T6794] __vmalloc_node_range_noprof+0xaa/0xe80 [ 77.769681][ T6794] ? __pfx_futex_wake_mark+0x10/0x10 [ 77.775117][ T6794] ? __rcu_read_unlock+0x4e/0x70 [ 77.780159][ T6794] ? avc_has_perm_noaudit+0x1cc/0x210 [ 77.785553][ T6794] ? should_fail_ex+0x31/0x230 [ 77.790345][ T6794] ? xskq_create+0x36/0xd0 [ 77.794770][ T6794] ? should_failslab+0x8f/0xb0 [ 77.799558][ T6794] vmalloc_user_noprof+0x59/0x70 [ 77.804512][ T6794] ? xskq_create+0x79/0xd0 [ 77.808944][ T6794] xskq_create+0x79/0xd0 [ 77.813271][ T6794] xsk_init_queue+0x82/0xd0 [ 77.817787][ T6794] xsk_setsockopt+0x409/0x520 [ 77.822477][ T6794] ? __pfx_xsk_setsockopt+0x10/0x10 [ 77.827689][ T6794] __sys_setsockopt+0x187/0x200 [ 77.832558][ T6794] __x64_sys_setsockopt+0x66/0x80 [ 77.837597][ T6794] x64_sys_call+0x282e/0x2dc0 [ 77.842291][ T6794] do_syscall_64+0xc9/0x1c0 [ 77.846828][ T6794] ? clear_bhb_loop+0x55/0xb0 [ 77.851572][ T6794] ? clear_bhb_loop+0x55/0xb0 [ 77.856262][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.862213][ T6794] RIP: 0033:0x7fd5cea95d29 [ 77.866643][ T6794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.886263][ T6794] RSP: 002b:00007fd5cd107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 77.894791][ T6794] RAX: ffffffffffffffda RBX: 00007fd5cec85fa0 RCX: 00007fd5cea95d29 [ 77.902800][ T6794] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 77.910775][ T6794] RBP: 00007fd5ceb11b08 R08: 0000000000000004 R09: 0000000000000000 [ 77.918759][ T6794] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 77.926734][ T6794] R13: 0000000000000000 R14: 00007fd5cec85fa0 R15: 00007ffef4e38608 [ 77.934722][ T6794] [ 77.937913][ T6794] Mem-Info: [ 77.941066][ T6794] active_anon:3324 inactive_anon:4 isolated_anon:0 [ 77.941066][ T6794] active_file:4490 inactive_file:2005 isolated_file:0 [ 77.941066][ T6794] unevictable:0 dirty:292 writeback:0 [ 77.941066][ T6794] slab_reclaimable:2721 slab_unreclaimable:51633 [ 77.941066][ T6794] mapped:28179 shmem:259 pagetables:754 [ 77.941066][ T6794] sec_pagetables:0 bounce:0 [ 77.941066][ T6794] kernel_misc_reclaimable:0 [ 77.941066][ T6794] free:1859901 free_pcp:18517 free_cma:0 [ 77.985924][ T6794] Node 0 active_anon:13296kB inactive_anon:16kB active_file:17960kB inactive_file:8020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112716kB dirty:1168kB writeback:0kB shmem:1036kB writeback_tmp:0kB kernel_stack:3008kB pagetables:3016kB sec_pagetables:0kB all_unreclaimable? no [ 78.013878][ T6794] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 78.040845][ T6794] lowmem_reserve[]: 0 2884 7863 0 [ 78.045948][ T6794] Node 0 DMA32 free:2950364kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953896kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 78.074723][ T6794] lowmem_reserve[]: 0 0 4978 0 [ 78.079556][ T6794] Node 0 Normal free:4473880kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:13296kB inactive_anon:16kB active_file:17960kB inactive_file:8020kB unevictable:0kB writepending:1168kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:70396kB local_pcp:4856kB free_cma:0kB [ 78.109779][ T6794] lowmem_reserve[]: 0 0 0 0 [ 78.114373][ T6794] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 78.127382][ T6794] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 2*16kB (M) 5*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950364kB [ 78.143592][ T6794] Node 0 Normal: 622*4kB (UME) 330*8kB (UME) 233*16kB (ME) 216*32kB (UME) 114*64kB (UME) 56*128kB (UME) 36*256kB (U) 27*512kB (U) 27*1024kB (UM) 23*2048kB (UM) 1061*4096kB (UM) = 4473880kB [ 78.162325][ T6794] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 78.171685][ T6794] 6758 total pagecache pages [ 78.176295][ T6794] 4 pages in swap cache [ 78.180527][ T6794] Free swap = 124456kB [ 78.184683][ T6794] Total swap = 124996kB [ 78.188856][ T6794] 2097051 pages RAM [ 78.192665][ T6794] 0 pages HighMem/MovableOnly [ 78.197340][ T6794] 80185 pages reserved [ 78.247798][ T6809] netlink: 'syz.1.1167': attribute type 10 has an invalid length. [ 78.255746][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1167'. [ 78.264983][ T6809] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.273490][ T6809] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.281923][ T6809] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.290322][ T6809] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.300394][ T6811] ref_ctr increment failed for inode: 0x438 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888116448000 [ 78.312300][ T6810] uprobe: syz.4.1168:6810 failed to unregister, leaking uprobe [ 78.339105][ T3375] kernel write not supported for file /447/projid_map (pid: 3375 comm: kworker/0:4) [ 78.427400][ T6827] serio: Serial port ptm0 [ 78.466996][ T6833] pim6reg1: entered promiscuous mode [ 78.472425][ T6833] pim6reg1: entered allmulticast mode [ 78.615882][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 78.625202][ T6847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.625374][ T6850] syz.4.1185[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.632856][ T6850] syz.4.1185[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.632959][ T6847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.644406][ T6850] syz.4.1185[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.698506][ T6852] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 78.805183][ T6856] loop3: detected capacity change from 0 to 2048 [ 78.811912][ T6856] EXT4-fs: Ignoring removed bh option [ 78.838051][ T6856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.908629][ T6865] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.923833][ T6865] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1408 with error 28 [ 78.936433][ T6865] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.936433][ T6865] [ 78.946203][ T6865] EXT4-fs (loop3): Total free blocks count 0 [ 78.952206][ T6865] EXT4-fs (loop3): Free/Dirty block details [ 78.958237][ T6865] EXT4-fs (loop3): free_blocks=2415919104 [ 78.964030][ T6865] EXT4-fs (loop3): dirty_blocks=1424 [ 78.969541][ T6865] EXT4-fs (loop3): Block reservation details [ 78.975595][ T6865] EXT4-fs (loop3): i_reserved_data_blocks=89 [ 79.037069][ T6871] loop4: detected capacity change from 0 to 1024 [ 79.062881][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 79.078505][ T6873] pim6reg1: entered promiscuous mode [ 79.083834][ T6873] pim6reg1: entered allmulticast mode [ 79.089933][ T6871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.141813][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.324926][ T6908] loop4: detected capacity change from 0 to 2048 [ 79.354711][ T6911] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 79.381342][ T6915] ALSA: seq fatal error: cannot create timer (-19) [ 79.388207][ T6908] loop4: p1 < > p4 [ 79.402251][ T6908] loop4: p4 size 8388608 extends beyond EOD, truncated [ 79.481360][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1220'. [ 79.496667][ T6932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.516659][ T6932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.528094][ T6932] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 79.540186][ T6932] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 79.700685][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 79.807320][ T6966] loop3: detected capacity change from 0 to 4096 [ 79.817095][ T6966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.934350][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.028844][ T6979] loop3: detected capacity change from 0 to 512 [ 80.035956][ T6979] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.047549][ T6979] EXT4-fs (loop3): 1 truncate cleaned up [ 80.053608][ T6979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.087415][ T6979] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 80.101974][ T6979] EXT4-fs (loop3): Remounting filesystem read-only [ 80.108546][ T6979] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 80.129381][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.329147][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 80.383720][ T7002] pim6reg1: entered promiscuous mode [ 80.389074][ T7002] pim6reg1: entered allmulticast mode [ 80.583896][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 80.639873][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.669200][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.679321][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'. [ 80.679763][ T7015] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 80.700953][ T7015] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 80.845725][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 80.845744][ T29] audit: type=1326 audit(1737480126.747:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 80.876033][ T7029] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.1258'. [ 80.876606][ T29] audit: type=1326 audit(1737480126.747:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 80.885143][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1258'. [ 80.917676][ T29] audit: type=1326 audit(1737480126.747:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 80.941113][ T29] audit: type=1326 audit(1737480126.747:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 80.964656][ T29] audit: type=1326 audit(1737480126.747:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 80.988138][ T29] audit: type=1326 audit(1737480126.747:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9b0e64690 code=0x7ffc0000 [ 81.011590][ T29] audit: type=1326 audit(1737480126.747:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 81.035001][ T29] audit: type=1326 audit(1737480126.747:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd9b0e6498a code=0x7ffc0000 [ 81.058618][ T29] audit: type=1326 audit(1737480126.777:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9b0e985e5 code=0x7ffc0000 [ 81.083190][ T29] audit: type=1326 audit(1737480126.977:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.4.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b0e65d29 code=0x7ffc0000 [ 81.113515][ T7031] loop3: detected capacity change from 0 to 512 [ 81.120403][ T7031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.131552][ T7031] EXT4-fs (loop3): 1 truncate cleaned up [ 81.137938][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.199021][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.215281][ T7034] syz.1.1263[7034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.215383][ T7034] syz.1.1263[7034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.227979][ T7034] syz.1.1263[7034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.244401][ T7034] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 81.264545][ T7034] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 81.273124][ T7034] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 81.281432][ T7034] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 81.290615][ T7038] smc: net device bond0 applied user defined pnetid SYZ2 [ 81.299134][ T7038] smc: net device bond0 erased user defined pnetid SYZ2 [ 81.319366][ T7040] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 81.328261][ T7042] netlink: 'syz.3.1266': attribute type 10 has an invalid length. [ 81.336138][ T7042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1266'. [ 81.349856][ T7042] team0: Port device geneve1 added [ 81.433888][ T7052] sctp: [Deprecated]: syz.3.1271 (pid 7052) Use of int in max_burst socket option. [ 81.433888][ T7052] Use struct sctp_assoc_value instead [ 81.447181][ T7050] syzkaller0: entered promiscuous mode [ 81.453940][ T7050] syzkaller0: entered allmulticast mode [ 81.549734][ T7063] pim6reg1: entered promiscuous mode [ 81.555082][ T7063] pim6reg1: entered allmulticast mode [ 81.561860][ T7062] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 81.636715][ T7073] loop4: detected capacity change from 0 to 128 [ 81.682920][ T7073] syz.4.1280: attempt to access beyond end of device [ 81.682920][ T7073] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 81.700153][ T7077] block device autoloading is deprecated and will be removed. [ 81.717202][ T7072] netlink: 'syz.2.1279': attribute type 10 has an invalid length. [ 81.725206][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1279'. [ 81.750109][ T7072] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.759072][ T7072] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.768009][ T7072] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.777039][ T7072] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.786517][ T7083] loop4: detected capacity change from 0 to 512 [ 81.803666][ T7083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.814299][ T7072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.823083][ T7072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.831835][ T7072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.840610][ T7072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.857241][ T7072] team0: Port device geneve1 added [ 81.882495][ T7083] EXT4-fs (loop4): 1 truncate cleaned up [ 81.895228][ T7083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.984705][ T7083] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 82.058729][ T7083] EXT4-fs (loop4): Remounting filesystem read-only [ 82.070180][ T7083] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 82.096116][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.116517][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 82.132045][ T7104] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 56586 - 0 [ 82.140888][ T7104] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 56586 - 0 [ 82.149776][ T7104] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 56586 - 0 [ 82.158595][ T7104] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 56586 - 0 [ 82.167541][ T7104] geneve2: entered promiscuous mode [ 82.172776][ T7104] geneve2: entered allmulticast mode [ 82.201249][ T7106] netlink: 'syz.4.1294': attribute type 10 has an invalid length. [ 82.212332][ T7106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.223066][ T7106] : (slave batadv0): Enslaving as an active interface with an up link [ 82.454486][ T7124] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 82.454486][ T7124] n'º|$@OOݱµ’-®+·el' [ 83.063562][ T7159] xt_hashlimit: size too large, truncated to 1048576 [ 83.673090][ T7169] pim6reg1: entered promiscuous mode [ 83.678457][ T7169] pim6reg1: entered allmulticast mode [ 83.919862][ T7194] loop3: detected capacity change from 0 to 2048 [ 83.958310][ T7194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.234091][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.405473][ T804] IPVS: starting estimator thread 0... [ 84.416019][ T7215] netlink: 'syz.3.1339': attribute type 13 has an invalid length. [ 84.468856][ T7219] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.495926][ T7214] IPVS: using max 2160 ests per chain, 108000 per kthread [ 84.619466][ T7215] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.628664][ T7215] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.637785][ T7215] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.646794][ T7215] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.654834][ T7227] Process accounting resumed [ 84.668978][ T7215] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 56586 - 0 [ 84.678164][ T7215] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 56586 - 0 [ 84.687364][ T7215] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 56586 - 0 [ 84.696513][ T7215] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 56586 - 0 [ 84.800918][ T7240] netlink: 'syz.3.1350': attribute type 21 has an invalid length. [ 85.462304][ T7284] netlink: 'syz.2.1369': attribute type 5 has an invalid length. [ 85.490734][ T7289] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1371'. [ 85.644263][ T7300] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 85.677655][ T7300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.692552][ T7300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.699793][ T7300] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 85.711095][ T7300] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 85.808427][ T7313] netlink: 'syz.4.1381': attribute type 13 has an invalid length. [ 85.861730][ T7317] program syz.3.1383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.886815][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 85.886831][ T29] audit: type=1400 audit(1737480131.787:4387): avc: denied { bind } for pid=7320 comm="syz.4.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.927402][ T29] audit: type=1400 audit(1737480131.787:4388): avc: denied { name_bind } for pid=7320 comm="syz.4.1385" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.949217][ T29] audit: type=1400 audit(1737480131.787:4389): avc: denied { node_bind } for pid=7320 comm="syz.4.1385" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 86.055937][ T7328] netlink: 'syz.1.1388': attribute type 4 has an invalid length. [ 86.065623][ T29] audit: type=1400 audit(1737480131.947:4390): avc: denied { write } for pid=7327 comm="syz.1.1388" name="ip6_tables_matches" dev="proc" ino=4026532478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 86.101249][ T7328] netlink: 'syz.1.1388': attribute type 4 has an invalid length. [ 86.160435][ T7334] loop1: detected capacity change from 0 to 2048 [ 86.177590][ T7334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.242456][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.251095][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.258962][ T29] audit: type=1326 audit(1737480132.157:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 86.282430][ T29] audit: type=1326 audit(1737480132.157:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 86.305993][ T29] audit: type=1326 audit(1737480132.157:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 86.316368][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 86.329408][ T29] audit: type=1326 audit(1737480132.157:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 86.361819][ T29] audit: type=1326 audit(1737480132.157:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 86.385280][ T29] audit: type=1326 audit(1737480132.157:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.3.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386735d29 code=0x7ffc0000 [ 86.455369][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.493647][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1397'. [ 86.508869][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.536021][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.543312][ T7356] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 86.555888][ T7356] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 86.658878][ T7363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7363 comm=syz.2.1399 [ 86.671551][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'. [ 86.680550][ T7363] netlink: 'syz.2.1399': attribute type 5 has an invalid length. [ 87.072988][ T7388] ================================================================== [ 87.081116][ T7388] BUG: KCSAN: data-race in print_cpu / tick_nohz_idle_enter [ 87.088431][ T7388] [ 87.090769][ T7388] read-write to 0xffff888237c204b0 of 8 bytes by task 0 on cpu 0: [ 87.098588][ T7388] tick_nohz_idle_enter+0x59/0xe0 [ 87.103626][ T7388] do_idle+0x3d/0x230 [ 87.107632][ T7388] cpu_startup_entry+0x25/0x30 [ 87.112402][ T7388] rest_init+0xef/0xf0 [ 87.116468][ T7388] start_kernel+0x586/0x5e0 [ 87.121060][ T7388] x86_64_start_reservations+0x2a/0x30 [ 87.126535][ T7388] x86_64_start_kernel+0x9a/0xa0 [ 87.131509][ T7388] common_startup_64+0x12c/0x137 [ 87.136472][ T7388] [ 87.138791][ T7388] read to 0xffff888237c204b0 of 8 bytes by task 7388 on cpu 1: [ 87.146328][ T7388] print_cpu+0x3dd/0x670 [ 87.150577][ T7388] timer_list_show+0x115/0x180 [ 87.155385][ T7388] seq_read_iter+0x655/0x930 [ 87.159993][ T7388] proc_reg_read_iter+0x118/0x190 [ 87.165022][ T7388] copy_splice_read+0x3a0/0x5d0 [ 87.169891][ T7388] splice_direct_to_actor+0x269/0x670 [ 87.175280][ T7388] do_splice_direct+0xd7/0x150 [ 87.180047][ T7388] do_sendfile+0x398/0x660 [ 87.184458][ T7388] __x64_sys_sendfile64+0x110/0x150 [ 87.189653][ T7388] x64_sys_call+0xfbd/0x2dc0 [ 87.194247][ T7388] do_syscall_64+0xc9/0x1c0 [ 87.198759][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.204651][ T7388] [ 87.206968][ T7388] value changed: 0x0000000000000030 -> 0x0000000000000035 [ 87.214068][ T7388] [ 87.216393][ T7388] Reported by Kernel Concurrency Sanitizer on: [ 87.222532][ T7388] CPU: 1 UID: 0 PID: 7388 Comm: syz.0.1410 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 87.232858][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 87.242938][ T7388] ==================================================================