last executing test programs: 5.734264608s ago: executing program 4 (id=932): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @remote}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000300)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={0x0, @phonet={0x23, 0x9, 0x6}, @hci={0x1f, 0x1, 0x3}, @vsock, 0x3, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x4, 0x0, 0xe}) preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x38, 0xfffffffe) ioctl$TIOCNOTTY(r9, 0x5422) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) getdents64(r0, &(0x7f00000000c0)=""/196, 0xc4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) 5.603971429s ago: executing program 4 (id=934): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) ptrace$setregs(0xd, 0x0, 0xffffffffffffff01, &(0x7f00000001c0)="66d9d8982c4b43372e862b689636b1ca18ec29b65528a2878be74c91449ca1563f84facd4eadda2ff8001b8a6975ff3b2cbc0bb15d1e1c9a3caca4f7ae346224d596c5f6") syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 3.055856037s ago: executing program 0 (id=973): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x40401) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'veth1_to_batadv\x00', @broadcast}) write$tun(r3, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x4, 0x8}, @eth={@multicast, @local, @void, {@llc={0x4, {@snap={0x154, 0x1, '(', "79f58d", 0x884c, "a48d0cbc784c7010852d2a75221dd7c3197aabf095a84e51bdc96065c18d0b0b72c6146e937e05b0bb1e2daefaa71ace6b011c144597de3d2e5dd7ac125a053c457e12ad5f46a4d74c70121649ca79c644306048fa5d5945506eb08850fc8a655ddbc45e34e2fb9adc8bd22ffc5cb51dbbff2867fcd366ddf73fd29d1196da62548f2685fc18ccb6c18f46b77dc79111456ae8f04dc45b7b5cbbf38981a92da8d855c2473857d9c31e9ebe57c3029a1b15829820ff2fde89c26cd5a65bff014f971209b8d7e9d415433c7f44dbc5a6306576f03f80b54e8f53ba41db91542e7399ae7d7a1becb1db"}}}}}}, 0x10c) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000980)="ee", 0x1}], 0x1) shutdown(r1, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0x3f, &(0x7f0000000280)={&(0x7f0000000100)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c120201313410f6f15040000008000e1f563df", 0xcc000006, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f00000001c0)) 3.055267628s ago: executing program 4 (id=974): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250301f2800c001c000bac0f00000300001400050000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c808004500ac1414bb008ff6c7ceb20989cf7012879d834d615c00270767239d067b197678c60ec0bbf9b5ea23c51fe2e06d657cb535325ebaecae2f435734d53e43af5234199a718bcc0b75cb5205db65bc4907a3a45abd6c5348e15545c24e24fa1475570e72fe61b6abb82c9b0ea64e526ca2c38b1b88ce7726aac7f5a8611f51869e00059e3bc734692b2bd2aa2fea80ff865ef41e21729e192cdb793c9295cb8bbde418524334b6d611b73ec02e2ad303eb4d81c4c524d2f60586af33ec6294d9045b90ce4052b763b80fd2a2424b"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.036340348s ago: executing program 4 (id=975): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.018446338s ago: executing program 4 (id=977): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000414, &(0x7f0000000040)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x520, &(0x7f0000000a80)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.76817032s ago: executing program 3 (id=980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.76745421s ago: executing program 3 (id=981): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_free\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.71473589s ago: executing program 3 (id=982): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000240)=""/18, 0x12) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8844}, 0x404c8c4) socket$kcm(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x240400d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0xa000200) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) unshare(0x20060400) 2.70312201s ago: executing program 4 (id=983): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000700)) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, 0xee01, r3) keyctl$describe(0x6, r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x1a4243c, &(0x7f0000003f40)=ANY=[@ANYRES16=r6, @ANYRES64=r7, @ANYRES16=r2, @ANYRESOCT=r7, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000540)={0xae, {{0x2, 0x4e22, @loopback}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) unshare(0x2c020400) copy_file_range(r13, 0x0, r13, 0x0, 0x518, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r14 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r14, 0x0, 0x7ffff000) r15 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r15, 0xc0105512, &(0x7f0000000080)) 2.68383005s ago: executing program 3 (id=984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x72) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x0, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) read(r3, &(0x7f0000000580)=""/170, 0xaa) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x6d) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x1008, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x1, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) 2.596028011s ago: executing program 3 (id=985): syz_open_dev$sg(0x0, 0x0, 0x5) r0 = open$dir(0x0, 0x2, 0x180) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x30000009}) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) 2.132765604s ago: executing program 1 (id=989): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 2.060608265s ago: executing program 1 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="ba43f15f00000000000a0000000c0002006e6c38870b6ce4e2cdac7e3032313100"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.003297795s ago: executing program 1 (id=994): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 1.826996576s ago: executing program 2 (id=995): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000240)=""/18, 0x12) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8844}, 0x404c8c4) socket$kcm(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x240400d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0xa000200) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) unshare(0x20060400) 1.767088967s ago: executing program 2 (id=996): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX], 0x18}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074"], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800a00010071756575"], 0x7c}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xa) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r3 = syz_open_procfs(0x0, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0xff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xff0c, 0x0, 0x0, 0xd5a6, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvmmsg(r6, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0}, 0x6c0b}], 0x1, 0x2022, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) 973.405472ms ago: executing program 1 (id=997): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56}, 0x20) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) listen(r1, 0x5) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000500)="2b39ff5899bae53419b7926542c7dbe279606a77e5932b132efe0ecd9f6eecb54e09f65373878df2cf6234b6902ecf737eab08fec7cf", &(0x7f0000000540)=@udp6=r6, 0x4}, 0x20) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80000, 0x40) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x200002, 0x1) move_mount(r7, &(0x7f0000000380)='./file0\x00', r8, &(0x7f00000004c0)='./file0\x00', 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x200000000}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101180, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000002280)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8400", 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4000}}}}}}}, 0x0) 861.885403ms ago: executing program 1 (id=998): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) readv(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) r1 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000000c0)=""/177) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000100"/28], 0x48) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000200)=0x8, 0x4) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x81, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0xffffffffffffff94, &(0x7f0000003dc0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000c0bd6ad073680122a2cadd231ffc30252c68ba6935a0af21709076006575558ba4ee", @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 817.313693ms ago: executing program 2 (id=999): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = syz_clone(0xb73ea72be0fd9533, &(0x7f0000000300)="10d3e5f707f13ce7a12008a43b962eb919a3f554b651c537f8b14af6b8bb9e84090678477ba0bf657f81358ea74d36139a227fe88381e21347cc706b4eb14df20d4b1a36137581362f1a1af476af44c8bc460c6fa1b08274fbf6f7270e8d49034b08787dcd33b0977087ebe74c3947177894367a853be786789bfd903dface3e20b4cb558c", 0x85, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000400)="5eaf05c54f441aaa0ca82b60120ae3b010b4112bc72f1dbc95497fdd54b449c9885e69e96f9bd17f699943971baf90c6412d6634404744ce38af186c0824edda95c8c60df25ac5beb634e56666dfc235fd197ce1afb1eececc42ac81650fbae5e3de4e909ab038e4911ed1ee2b54621a0fb132590f94603b2936b6299b9f624246c29b093ac99f53e56893f6cc562e0e77f3d7f8f2aede9e107bad0d") (async) r5 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r5) (async) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@RTM_NEWNSID={0x4c, 0x58, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000816}, 0x4040000) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r3, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x12) 750.386154ms ago: executing program 2 (id=1000): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000011cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff0100000000000000bdae0000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000bdaec76f7d1e0bd500000200130003"], 0x98}, 0x1, 0x7}, 0x0) 749.870854ms ago: executing program 2 (id=1001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="442266eb5396", 'erspan0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) 742.183904ms ago: executing program 0 (id=1002): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$rds(0x15, 0x5, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 708.046494ms ago: executing program 2 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x690, 0x480, 0x210, 0x300, 0x210, 0x0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, &(0x7f0000000000), {[{{@ipv6={@private0, @local, [0x0, 0x0, 0x0, 0xff000000], [0xff000000, 0xff, 0xff, 0xffffffff], 'nr0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2, 0xd, 0x4, 0x2c}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@private=0xa010100, 0x36, 0x3e}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xff], 'bridge_slave_0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x73, 0x6, 0x4, 0x28}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@broadcast, 0x27, 0x10, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffffff, 0xff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffff00], 'dvmrp1\x00', 'vxcan1\x00', {}, {0xff}, 0x3b, 0x4, 0x1}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip6gretap0\x00', {}, 'veth1_vlan\x00', {0xff}, 0x10, 0x10}}, @common=@mh={{0x28}, {"95a8"}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x9e}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x39, 0x7, 0x519}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xffffff00], 'wg0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x88, 0xc, 0x0, 0x24}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@loopback, 0x5, 0x38, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'veth0_vlan\x00', &(0x7f0000000380)=@ethtool_sset_info={0x37, 0x9, 0x3, [0x6e, 0xff, 0x567, 0x5, 0x80000001]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) (async) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 645.563815ms ago: executing program 0 (id=1004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x10, 0x80800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r5, r8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000140)={r7, 0x2}, 0x8) 551.577066ms ago: executing program 0 (id=1005): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000080), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x40880) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000cc0)="94a179ae92049f2b25a3c4cc29b99a58c276ca60b863b4d4faef328242bc2f6c6a7e38c6914e286a9f8ccb979c7cbb098c51061a3a341c1329e80ff71c4f8800c3620b25af52ae5b90108ddf3ff89f4cb908b29f45b7aa8d067b7e93b9c7180cdc309373bc41a211177edf2ab6aeb73945e76594fa6a4811cba03bb1b4e41f", 0x7f, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000f46b10040000000000100800010001"], 0x1c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) inotify_init() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="810000000000547100000100000008000100000000000400048008000c808efc0b800800020001000000a00008809c"], 0xd0}}, 0x20044800) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2c000019458d00", @ANYRES16=r6, @ANYBLOB="02002abd7000fddbdf2502000000080002000200000008000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700d900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000640)={0x0, 0x6}, &(0x7f0000000680)=0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe={'stripe', 0x3d, 0x9}}, {@grpid}, {@minixdf}, {@data_writeback}, {@noblock_validity}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x0, 0x609, &(0x7f0000000600)="$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") 390.618047ms ago: executing program 0 (id=1006): unshare(0x2c020400) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x42400, 0x0) futimesat(r0, 0x0, 0x0) 387.604377ms ago: executing program 3 (id=1007): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000240)=""/18, 0x12) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8844}, 0x404c8c4) socket$kcm(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x240400d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0xa000200) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) personality(0x400000b) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x129a82, 0x0) sendfile(r4, r4, 0x0, 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1d2) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 120.719849ms ago: executing program 0 (id=1008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x3}, 0x94) fchdir(r3) mkdir(&(0x7f0000000140)='./control\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000680)='./cgroup/file0\x00', 0x13c, 0x400440}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 0s ago: executing program 1 (id=1009): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000004c0)={'sit0\x00', 0x0}) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e3"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000100)="1100cbe4ab6a281c39f731ff56f71f1e40f9cf358bfd3845a7228d5c59640309fbe4aebec51287f188f7b86894b03ac3cc37d0cae03917cb5132c32c5c904ef2404dc80b69fefeef5be0a96531259924e938dba21b02c5e4b78fdec9", &(0x7f0000000200)=""/48, &(0x7f0000000240)="f7caa3e743ef1d41b80c8edf406207f57941e2f9bf1bf9008e2fcadace6f8cc808e5991106a879c57844e1d1318be641fbef12cd3195584d37e3d621e9082f5bed891f57284c188a9abe1aa000b2bd6afb080d85ae70a151fa57566feac2b19e9576c379ef33072ae27fe250778f", &(0x7f0000000440)="f5e0c17c795469880a3fcf67db21007b004686c47dbc1b9d82105b5742bada3b693f09bc7d4287c22e6fcb0233df7b06817179351467bc96ad22d74965ee9c1febd664fc4016bb699acd9c174fa56f5b30d7e095d3810c535c7a9c4c10e44ed9ab7b5589105915ffee1a3905ea8eb53d2c7a05c6a4d97d10971e32634e769426d3de016b3c1dace2e41b7f26e1389fd2fed29eac7ea4e8446d46134b476e", 0xffffffff, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000ff"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000180)="86dd00"/14, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r1, 0xda90) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4ff3913d, 0xca0, 0x9}, 0x10) bind$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r6) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x1183ef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='kfree\x00', r8, 0x0, 0x5}, 0x9f4d4e2c4e085686) close(r0) kernel console output (not intermixed with test programs): :83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.CB1OLt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.647414][ T29] audit: type=1400 audit(1762078709.023:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.669179][ T29] audit: type=1400 audit(1762078709.023:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.CB1OLt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.695762][ T29] audit: type=1400 audit(1762078709.023:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.CB1OLt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.723065][ T29] audit: type=1400 audit(1762078709.023:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.743955][ T29] audit: type=1400 audit(1762078709.063:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.744950][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.766663][ T29] audit: type=1400 audit(1762078709.063:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.796503][ T3322] veth0_macvtap: entered promiscuous mode [ 29.803658][ T3322] veth1_macvtap: entered promiscuous mode [ 29.804296][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.814446][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.831364][ T1006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.846403][ T1006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.856446][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.863147][ T29] audit: type=1400 audit(1762078709.323:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.891007][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.908770][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.918156][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.933404][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.949940][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.965330][ C0] hrtimer: interrupt took 27716 ns [ 29.983801][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.995374][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.012476][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.022904][ T3482] sd 0:0:1:0: device reset [ 30.079383][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.111110][ T271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.122836][ T271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.132945][ T271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.141879][ T271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.151789][ T271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.160738][ T271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.172486][ T3496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.207788][ T3497] loop3: detected capacity change from 0 to 128 [ 30.219797][ T3496] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 30.227417][ T3496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.237119][ T3496] batman_adv: batadv0: Adding interface: veth1_vlan [ 30.243767][ T3496] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.270124][ T3496] batman_adv: batadv0: Interface activated: veth1_vlan [ 30.853576][ T3511] syzkaller0: entered allmulticast mode [ 31.164849][ T3510] syzkaller0: left allmulticast mode [ 31.315786][ T3519] sd 0:0:1:0: device reset [ 31.427933][ T3523] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 31.557098][ T3533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 31.565975][ T3533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 31.574806][ T3533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 31.603581][ T3531] syz.3.15 (3531) used greatest stack depth: 9376 bytes left [ 31.743810][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 32.016250][ T3551] kernel profiling enabled (shift: 17) [ 32.697782][ T3577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 32.735288][ T3577] loop4: detected capacity change from 0 to 512 [ 32.758240][ T3583] loop3: detected capacity change from 0 to 164 [ 32.772211][ T3577] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.927476][ T3577] EXT4-fs (loop4): 1 orphan inode deleted [ 32.940444][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.002993][ T3577] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.039424][ T3596] serio: Serial port ttyS3 [ 33.090496][ T3598] hsr0 speed is unknown, defaulting to 1000 [ 33.096457][ T3598] hsr0 speed is unknown, defaulting to 1000 [ 33.110738][ T3598] hsr0 speed is unknown, defaulting to 1000 [ 33.131376][ T3598] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.186969][ T3598] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 33.260918][ T3598] hsr0 speed is unknown, defaulting to 1000 [ 33.290099][ T3598] hsr0 speed is unknown, defaulting to 1000 [ 33.310115][ T3598] hsr0 speed is unknown, defaulting to 1000 [ 33.326406][ T3598] hsr0 speed is unknown, defaulting to 1000 [ 33.353064][ T3598] hsr0 speed is unknown, defaulting to 1000 [ 33.353542][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.390073][ T3603] netlink: 'syz.4.33': attribute type 4 has an invalid length. [ 33.412754][ T3603] netlink: 'syz.4.33': attribute type 4 has an invalid length. [ 33.499108][ T3606] sd 0:0:1:0: device reset [ 33.568157][ T3611] macvlan1: entered promiscuous mode [ 33.581398][ T3611] ipvlan0: entered promiscuous mode [ 33.587966][ T3611] ipvlan0: left promiscuous mode [ 33.593472][ T3611] macvlan1: left promiscuous mode [ 33.631605][ T3615] ======================================================= [ 33.631605][ T3615] WARNING: The mand mount option has been deprecated and [ 33.631605][ T3615] and is ignored by this kernel. Remove the mand [ 33.631605][ T3615] option from the mount to silence this warning. [ 33.631605][ T3615] ======================================================= [ 33.670050][ T3615] 9pnet_fd: Insufficient options for proto=fd [ 33.749910][ T3625] smc: net device bond0 applied user defined pnetid SYZ0 [ 33.770698][ T3627] netlink: 13516 bytes leftover after parsing attributes in process `syz.4.42'. [ 33.786907][ T3625] smc: net device bond0 erased user defined pnetid SYZ0 [ 33.812554][ T3625] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.887717][ T3634] loop1: detected capacity change from 0 to 164 [ 33.933968][ T3638] loop1: detected capacity change from 0 to 256 [ 33.991063][ T3641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.44'. [ 34.055311][ T3638] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.128993][ T3645] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 34.470225][ T3662] netlink: 96 bytes leftover after parsing attributes in process `syz.3.54'. [ 34.533149][ T3666] loop3: detected capacity change from 0 to 512 [ 34.551698][ T3666] EXT4-fs: dax option not supported [ 34.613842][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 34.613856][ T29] audit: type=1400 audit(1762078714.073:767): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.693893][ T3668] loop1: detected capacity change from 0 to 512 [ 34.726216][ T3671] loop3: detected capacity change from 0 to 164 [ 34.771229][ T3668] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 34.805204][ T29] audit: type=1400 audit(1762078714.263:768): avc: denied { write } for pid=3667 comm="syz.1.56" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.825276][ T29] audit: type=1400 audit(1762078714.263:769): avc: denied { read } for pid=3667 comm="syz.1.56" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 34.849585][ T29] audit: type=1400 audit(1762078714.263:770): avc: denied { open } for pid=3667 comm="syz.1.56" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 34.873934][ T29] audit: type=1400 audit(1762078714.263:771): avc: denied { ioctl } for pid=3667 comm="syz.1.56" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 34.941400][ T3686] loop3: detected capacity change from 0 to 512 [ 34.948317][ T3686] EXT4-fs: Ignoring removed nobh option [ 34.958232][ T29] audit: type=1400 audit(1762078714.283:772): avc: denied { create } for pid=3677 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.977809][ T29] audit: type=1400 audit(1762078714.363:773): avc: denied { write } for pid=3667 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.997891][ T29] audit: type=1400 audit(1762078714.363:774): avc: denied { nlmsg_write } for pid=3667 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.018291][ T29] audit: type=1400 audit(1762078714.373:775): avc: denied { watch watch_reads } for pid=3680 comm="syz.3.60" path="/17" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.049698][ T3686] EXT4-fs (loop3): #clusters per group too big: 360448 [ 35.073778][ T29] audit: type=1400 audit(1762078714.433:776): avc: denied { create } for pid=3687 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.082545][ T3699] loop2: detected capacity change from 0 to 1024 [ 35.116116][ T3686] unsupported nla_type 52263 [ 35.139109][ T3699] EXT4-fs: Ignoring removed orlov option [ 35.173452][ T3705] smc: net device bond0 applied user defined pnetid SYZ0 [ 35.191566][ T3699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.210499][ T3705] smc: net device bond0 erased user defined pnetid SYZ0 [ 35.434813][ T3724] loop4: detected capacity change from 0 to 256 [ 35.442636][ T3724] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.463013][ T3715] __nla_validate_parse: 2 callbacks suppressed [ 35.463027][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 35.515891][ T3727] can: request_module (can-proto-4) failed. [ 35.522016][ T3727] gretap0: entered promiscuous mode [ 35.522031][ T3727] gretap0: entered allmulticast mode [ 35.880807][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 35.889524][ T3741] netlink: 'syz.3.82': attribute type 5 has an invalid length. [ 35.897080][ T3741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 35.911136][ T3741] geneve2: entered promiscuous mode [ 35.916371][ T3741] geneve2: entered allmulticast mode [ 35.922509][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.931666][ T52] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 35.955863][ T3004] udevd[3004]: worker [3679] terminated by signal 33 (Unknown signal 33) [ 35.968845][ T52] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 35.990651][ T3004] udevd[3004]: worker [3679] failed while handling '/devices/virtual/block/loop2' [ 35.999897][ T52] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 36.008552][ T52] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 36.034198][ T3758] batadv_slave_1: entered promiscuous mode [ 36.040788][ T3756] capability: warning: `syz.4.88' uses deprecated v2 capabilities in a way that may be insecure [ 36.071679][ T3749] batadv_slave_1: left promiscuous mode [ 36.417378][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 36.485820][ T3778] loop1: detected capacity change from 0 to 1024 [ 36.596882][ T3778] EXT4-fs: Ignoring removed orlov option [ 36.636142][ T3781] loop4: detected capacity change from 0 to 512 [ 36.661643][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.739158][ T3781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.756537][ T3781] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.169979][ T3781] Set syz1 is full, maxelem 65536 reached [ 37.203988][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.249586][ T3795] bond0: (slave bond_slave_1): Releasing backup interface [ 37.328124][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.339310][ T3800] smc: net device bond0 applied user defined pnetid SYZ0 [ 37.370058][ T3801] smc: net device bond0 erased user defined pnetid SYZ0 [ 37.439669][ T3811] loop1: detected capacity change from 0 to 164 [ 37.446375][ T3811] iso9660: Unknown parameter '' [ 37.457285][ T3811] ip6tnl1: entered promiscuous mode [ 37.462596][ T3811] ip6tnl1: entered allmulticast mode [ 37.486785][ T3817] loop2: detected capacity change from 0 to 1024 [ 37.506532][ T3817] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.611209][ T3817] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.107: Invalid block bitmap block 0 in block_group 0 [ 37.631506][ T3817] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.107: Failed to acquire dquot type 0 [ 37.683578][ T3817] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.107: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.714649][ T3824] hsr0 speed is unknown, defaulting to 1000 [ 37.730469][ T3826] program syz.4.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.745300][ T3817] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.107: Invalid inode bitmap blk 0 in block_group 0 [ 37.772150][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 37.790367][ T3817] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 37.805739][ T3817] EXT4-fs (loop2): 1 orphan inode deleted [ 37.812030][ T3817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.830772][ T3830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.111'. [ 37.854920][ T3817] syz.2.107 (3817) used greatest stack depth: 9232 bytes left [ 37.867581][ T3830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3830 comm=syz.0.111 [ 37.895729][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.905942][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 37.939451][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 37.948346][ T3835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.113'. [ 37.957243][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 37.966698][ T3835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.113'. [ 37.975632][ T3835] netlink: 'syz.2.113': attribute type 6 has an invalid length. [ 37.986705][ T3837] loop1: detected capacity change from 0 to 128 [ 38.135096][ T3847] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.142326][ T3847] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.170064][ T3849] netlink: 'syz.0.117': attribute type 4 has an invalid length. [ 38.182547][ T3849] netlink: 'syz.0.117': attribute type 4 has an invalid length. [ 39.066951][ T3866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 39.257703][ T3874] loop3: detected capacity change from 0 to 512 [ 39.267376][ T3876] netlink: 'syz.2.125': attribute type 3 has an invalid length. [ 39.282804][ T3874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.314084][ T3874] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.357444][ T3881] FAULT_INJECTION: forcing a failure. [ 39.357444][ T3881] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.370589][ T3881] CPU: 1 UID: 0 PID: 3881 Comm: syz.0.126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.370618][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.370632][ T3881] Call Trace: [ 39.370639][ T3881] [ 39.370645][ T3881] __dump_stack+0x1d/0x30 [ 39.370670][ T3881] dump_stack_lvl+0xe8/0x140 [ 39.370690][ T3881] dump_stack+0x15/0x1b [ 39.370706][ T3881] should_fail_ex+0x265/0x280 [ 39.370776][ T3881] should_fail+0xb/0x20 [ 39.370794][ T3881] should_fail_usercopy+0x1a/0x20 [ 39.370817][ T3881] _copy_from_user+0x1c/0xb0 [ 39.370845][ T3881] lo_ioctl+0x383/0x12b0 [ 39.370901][ T3881] ? avc_has_extended_perms+0x73d/0x940 [ 39.370937][ T3881] ? blkdev_common_ioctl+0xad6/0x1ad0 [ 39.370960][ T3881] ? do_vfs_ioctl+0x866/0xe10 [ 39.370982][ T3881] ? selinux_file_ioctl+0x308/0x3a0 [ 39.371135][ T3881] ? __pfx_lo_ioctl+0x10/0x10 [ 39.371219][ T3881] ? __pfx_blkdev_ioctl+0x10/0x10 [ 39.371235][ T3881] blkdev_ioctl+0x356/0x440 [ 39.371252][ T3881] ? __pfx_blkdev_ioctl+0x10/0x10 [ 39.371268][ T3881] __se_sys_ioctl+0xce/0x140 [ 39.371360][ T3881] __x64_sys_ioctl+0x43/0x50 [ 39.371383][ T3881] x64_sys_call+0x1816/0x3000 [ 39.371409][ T3881] do_syscall_64+0xd2/0x200 [ 39.371430][ T3881] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.371576][ T3881] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.371608][ T3881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.371632][ T3881] RIP: 0033:0x7f7a85d0efc9 [ 39.371647][ T3881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.371666][ T3881] RSP: 002b:00007f7a8476f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.371770][ T3881] RAX: ffffffffffffffda RBX: 00007f7a85f65fa0 RCX: 00007f7a85d0efc9 [ 39.371785][ T3881] RDX: 0000200000001600 RSI: 0000000000004c0a RDI: 0000000000000007 [ 39.371799][ T3881] RBP: 00007f7a8476f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.371866][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.371877][ T3881] R13: 00007f7a85f66038 R14: 00007f7a85f65fa0 R15: 00007ffcbd5c4278 [ 39.371894][ T3881] [ 39.372233][ T3876] Zero length message leads to an empty skb [ 39.568702][ T3885] loop1: detected capacity change from 0 to 2048 [ 39.599647][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.672442][ T3892] smc: net device bond0 applied user defined pnetid SYZ0 [ 39.679578][ T3892] smc: net device bond0 erased user defined pnetid SYZ0 [ 39.712619][ T3876] loop2: detected capacity change from 0 to 512 [ 39.722440][ T3885] Alternate GPT is invalid, using primary GPT. [ 39.728759][ T3885] loop1: p1 p2 p3 [ 39.736035][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 39.736047][ T29] audit: type=1400 audit(1762078975.198:1005): avc: denied { read } for pid=3884 comm="syz.1.127" name="loop1p1" dev="devtmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.764823][ T29] audit: type=1400 audit(1762078975.198:1006): avc: denied { open } for pid=3884 comm="syz.1.127" path="/dev/loop1p1" dev="devtmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.766160][ T29] audit: type=1400 audit(1762078975.228:1007): avc: denied { write } for pid=3884 comm="syz.1.127" name="loop1p1" dev="devtmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.766253][ T29] audit: type=1400 audit(1762078975.228:1008): avc: denied { setopt } for pid=3884 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.766459][ T29] audit: type=1400 audit(1762078975.228:1009): avc: denied { bind } for pid=3884 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.766506][ T29] audit: type=1400 audit(1762078975.228:1010): avc: denied { listen } for pid=3884 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.766994][ T29] audit: type=1400 audit(1762078975.228:1011): avc: denied { write } for pid=3884 comm="syz.1.127" path="socket:[5731]" dev="sockfs" ino=5731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.767713][ T3876] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.125: bad orphan inode 11862016 [ 39.768172][ T3876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.768226][ T3876] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.786436][ T29] audit: type=1400 audit(1762078975.248:1012): avc: denied { read } for pid=3875 comm="syz.2.125" path="/20/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.881120][ T3907] program syz.4.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.929402][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.134759][ T29] audit: type=1400 audit(1762078975.598:1013): avc: denied { append } for pid=3913 comm="syz.0.138" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 40.178614][ T3917] loop3: detected capacity change from 0 to 128 [ 40.205241][ T3917] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.247758][ T3919] loop2: detected capacity change from 0 to 512 [ 40.254466][ T3919] ext4: Unknown parameter 'euid>00000000000000000000' [ 40.293094][ T29] audit: type=1400 audit(1762078975.738:1014): avc: denied { read write } for pid=3913 comm="syz.0.138" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.329385][ T3917] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.433326][ T3929] syz.2.141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.492101][ T3930] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 40.504641][ T3930] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 40.837867][ T3938] loop4: detected capacity change from 0 to 512 [ 40.845595][ T3938] EXT4-fs: dax option not supported [ 40.912566][ T3944] loop4: detected capacity change from 0 to 164 [ 40.920571][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.943112][ T3944] __nla_validate_parse: 1 callbacks suppressed [ 40.943127][ T3944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 40.985138][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 40.994231][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 41.021776][ T3958] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.030887][ T3958] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.201392][ T3975] syzkaller0: entered allmulticast mode [ 41.207186][ T3975] syzkaller0: entered promiscuous mode [ 41.223326][ T3974] syzkaller0: left promiscuous mode [ 41.228619][ T3974] syzkaller0: left allmulticast mode [ 41.583379][ T3992] vhci_hcd: invalid port number 255 [ 41.588620][ T3992] vhci_hcd: default hub control req: 800f v0313 i00ff l0 [ 41.592530][ T3988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.623830][ T3992] loop3: detected capacity change from 0 to 164 [ 41.687998][ T3992] rock: directory entry would overflow storage [ 41.694194][ T3992] rock: sig=0x5252, size=5, remaining=3 [ 41.699785][ T3992] isofs_fill_super: root inode is not a directory. Corrupted media? [ 41.904208][ T4006] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 41.920125][ T3997] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 41.928352][ T3997] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 41.937770][ T4008] loop4: detected capacity change from 0 to 512 [ 41.952060][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.964717][ T4008] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.991779][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.129701][ T4023] FAULT_INJECTION: forcing a failure. [ 42.129701][ T4023] name failslab, interval 1, probability 0, space 0, times 1 [ 42.142469][ T4023] CPU: 0 UID: 0 PID: 4023 Comm: syz.3.174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.142494][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.142505][ T4023] Call Trace: [ 42.142510][ T4023] [ 42.142517][ T4023] __dump_stack+0x1d/0x30 [ 42.142538][ T4023] dump_stack_lvl+0xe8/0x140 [ 42.142640][ T4023] dump_stack+0x15/0x1b [ 42.142657][ T4023] should_fail_ex+0x265/0x280 [ 42.142678][ T4023] should_failslab+0x8c/0xb0 [ 42.142710][ T4023] kmem_cache_alloc_noprof+0x50/0x480 [ 42.142747][ T4023] ? skb_clone+0x151/0x1f0 [ 42.142765][ T4023] skb_clone+0x151/0x1f0 [ 42.142833][ T4023] __netlink_deliver_tap+0x2c9/0x500 [ 42.142870][ T4023] netlink_unicast+0x66b/0x690 [ 42.142905][ T4023] netlink_sendmsg+0x58b/0x6b0 [ 42.142928][ T4023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.142968][ T4023] __sock_sendmsg+0x145/0x180 [ 42.142991][ T4023] ____sys_sendmsg+0x31e/0x4e0 [ 42.143032][ T4023] ___sys_sendmsg+0x17b/0x1d0 [ 42.143096][ T4023] __x64_sys_sendmsg+0xd4/0x160 [ 42.143116][ T4023] x64_sys_call+0x191e/0x3000 [ 42.143203][ T4023] do_syscall_64+0xd2/0x200 [ 42.143221][ T4023] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.143323][ T4023] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.143369][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.143388][ T4023] RIP: 0033:0x7f2bcb55efc9 [ 42.143401][ T4023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.143475][ T4023] RSP: 002b:00007f2bc9fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.143492][ T4023] RAX: ffffffffffffffda RBX: 00007f2bcb7b5fa0 RCX: 00007f2bcb55efc9 [ 42.143504][ T4023] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000003 [ 42.143518][ T4023] RBP: 00007f2bc9fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.143532][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.143545][ T4023] R13: 00007f2bcb7b6038 R14: 00007f2bcb7b5fa0 R15: 00007ffe1bf58ed8 [ 42.143563][ T4023] [ 42.364420][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 42.373272][ T4025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.175'. [ 42.382618][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 42.391539][ T4025] netlink: 2 bytes leftover after parsing attributes in process `syz.2.175'. [ 42.406234][ T4025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.175'. [ 42.421766][ T4027] smc: net device bond0 applied user defined pnetid SYZ0 [ 42.429077][ T4027] smc: net device bond0 erased user defined pnetid SYZ0 [ 42.592160][ T4042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.752080][ T4046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=4046 comm=syz.1.183 [ 42.794166][ T4048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.184'. [ 42.806047][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 42.831969][ T4051] netlink: 'syz.1.185': attribute type 4 has an invalid length. [ 42.843307][ T4051] netlink: 'syz.1.185': attribute type 4 has an invalid length. [ 42.992308][ T4071] netlink: 'syz.2.194': attribute type 6 has an invalid length. [ 43.042578][ T4073] infiniband syz!: set active [ 43.047355][ T4073] infiniband syz!: added team_slave_0 [ 43.060110][ T4073] RDS/IB: syz!: added [ 43.064399][ T4073] smc: adding ib device syz! with port count 1 [ 43.070668][ T4073] smc: ib device syz! port 1 has no pnetid [ 43.120085][ T4085] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 43.191039][ T4085] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 43.309111][ T4104] lo speed is unknown, defaulting to 1000 [ 43.315655][ T4104] lo speed is unknown, defaulting to 1000 [ 43.321582][ T4104] lo speed is unknown, defaulting to 1000 [ 43.358017][ T4114] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 43.373526][ T4112] hsr0 speed is unknown, defaulting to 1000 [ 43.405608][ T4114] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 43.448914][ T4104] infiniband sz1: set active [ 43.453845][ T4104] infiniband sz1: added lo [ 43.461760][ T1037] lo speed is unknown, defaulting to 1000 [ 43.467733][ T4121] smc: net device bond0 applied user defined pnetid SYZ0 [ 43.472901][ T4104] RDS/IB: sz1: added [ 43.475216][ T4121] smc: net device bond0 erased user defined pnetid SYZ0 [ 43.486770][ T4104] smc: adding ib device sz1 with port count 1 [ 43.494114][ T4104] smc: ib device sz1 port 1 has no pnetid [ 43.517697][ T3368] lo speed is unknown, defaulting to 1000 [ 43.523604][ T4104] lo speed is unknown, defaulting to 1000 [ 43.545679][ T4129] loop3: detected capacity change from 0 to 164 [ 43.573000][ T4104] lo speed is unknown, defaulting to 1000 [ 43.607972][ T4104] lo speed is unknown, defaulting to 1000 [ 43.633123][ T4136] loop3: detected capacity change from 0 to 1024 [ 43.633437][ T4136] EXT4-fs: Ignoring removed orlov option [ 43.641719][ T4104] lo speed is unknown, defaulting to 1000 [ 43.664947][ T4136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.689167][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.689287][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.734615][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.743876][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.774009][ T4104] lo speed is unknown, defaulting to 1000 [ 43.784556][ T52] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.793464][ T52] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.802461][ T52] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.812148][ T52] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.843846][ T4104] lo speed is unknown, defaulting to 1000 [ 44.178896][ T4164] smc: net device bond0 applied user defined pnetid SYZ0 [ 44.186422][ T4164] smc: net device bond0 erased user defined pnetid SYZ0 [ 44.221339][ T4166] netlink: 'syz.1.229': attribute type 4 has an invalid length. [ 44.232734][ T3389] lo speed is unknown, defaulting to 1000 [ 44.238470][ T3389] sz1: Port: 1 Link DOWN [ 44.248990][ T4166] netlink: 'syz.1.229': attribute type 4 has an invalid length. [ 44.259047][ T3389] lo speed is unknown, defaulting to 1000 [ 44.269055][ T3409] lo speed is unknown, defaulting to 1000 [ 44.274800][ T3409] sz1: Port: 1 Link ACTIVE [ 44.292729][ T3389] lo speed is unknown, defaulting to 1000 [ 44.470364][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.584779][ T4191] smc: net device bond0 applied user defined pnetid SYZ0 [ 44.593984][ T4191] smc: net device bond0 erased user defined pnetid SYZ0 [ 44.653986][ T4195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4195 comm=syz.2.238 [ 44.751699][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 44.751769][ T29] audit: type=1400 audit(1762078980.218:1620): avc: denied { write } for pid=4193 comm="syz.1.241" name="udp6" dev="proc" ino=4026532635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.050474][ T4211] loop4: detected capacity change from 0 to 1024 [ 45.057270][ T4211] EXT4-fs: Ignoring removed orlov option [ 45.074586][ T4211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.108283][ T29] audit: type=1400 audit(1762078980.568:1621): avc: denied { read write } for pid=4207 comm="syz.1.244" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.132045][ T29] audit: type=1400 audit(1762078980.568:1622): avc: denied { open } for pid=4207 comm="syz.1.244" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.169206][ T4216] hsr0 speed is unknown, defaulting to 1000 [ 45.203848][ T4216] lo speed is unknown, defaulting to 1000 [ 45.409633][ T4223] No such timeout policy "syz1" [ 45.421775][ T29] audit: type=1326 audit(1762078980.888:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 45.460207][ T29] audit: type=1326 audit(1762078980.888:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 45.483624][ T29] audit: type=1326 audit(1762078980.888:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 45.506919][ T29] audit: type=1326 audit(1762078980.888:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 45.530224][ T29] audit: type=1326 audit(1762078980.888:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 45.553629][ T29] audit: type=1326 audit(1762078980.888:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 45.576902][ T29] audit: type=1326 audit(1762078980.888:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 45.602940][ T4229] loop3: detected capacity change from 0 to 164 [ 45.655847][ T4240] FAULT_INJECTION: forcing a failure. [ 45.655847][ T4240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.668983][ T4240] CPU: 1 UID: 0 PID: 4240 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.669009][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 45.669023][ T4240] Call Trace: [ 45.669029][ T4240] [ 45.669037][ T4240] __dump_stack+0x1d/0x30 [ 45.669064][ T4240] dump_stack_lvl+0xe8/0x140 [ 45.669082][ T4240] dump_stack+0x15/0x1b [ 45.669098][ T4240] should_fail_ex+0x265/0x280 [ 45.669130][ T4240] should_fail+0xb/0x20 [ 45.669148][ T4240] should_fail_usercopy+0x1a/0x20 [ 45.669203][ T4240] _copy_to_user+0x20/0xa0 [ 45.669232][ T4240] simple_read_from_buffer+0xb5/0x130 [ 45.669258][ T4240] proc_fail_nth_read+0x10e/0x150 [ 45.669316][ T4240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 45.669355][ T4240] vfs_read+0x1a8/0x770 [ 45.669381][ T4240] ? __rcu_read_unlock+0x4f/0x70 [ 45.669405][ T4240] ? __fget_files+0x184/0x1c0 [ 45.669510][ T4240] ksys_read+0xda/0x1a0 [ 45.669539][ T4240] __x64_sys_read+0x40/0x50 [ 45.669633][ T4240] x64_sys_call+0x27c0/0x3000 [ 45.669695][ T4240] do_syscall_64+0xd2/0x200 [ 45.669706][ T4240] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.669721][ T4240] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 45.669807][ T4240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.669819][ T4240] RIP: 0033:0x7f2bcb55d9dc [ 45.669835][ T4240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.669910][ T4240] RSP: 002b:00007f2bc9fc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.669922][ T4240] RAX: ffffffffffffffda RBX: 00007f2bcb7b5fa0 RCX: 00007f2bcb55d9dc [ 45.669930][ T4240] RDX: 000000000000000f RSI: 00007f2bc9fc70a0 RDI: 0000000000000007 [ 45.669936][ T4240] RBP: 00007f2bc9fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.669943][ T4240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.669950][ T4240] R13: 00007f2bcb7b6038 R14: 00007f2bcb7b5fa0 R15: 00007ffe1bf58ed8 [ 45.669961][ T4240] [ 45.924510][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.969114][ T4249] loop4: detected capacity change from 0 to 512 [ 45.991425][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.005611][ T4249] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.036349][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.101059][ T4261] loop3: detected capacity change from 0 to 512 [ 46.108232][ T4261] EXT4-fs: Ignoring removed i_version option [ 46.114565][ T4261] ext4: Unknown parameter 'euid>00000000000000000000' [ 46.178078][ T4273] loop3: detected capacity change from 0 to 512 [ 46.192731][ T4273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.205574][ T4273] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.217412][ T4273] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.229051][ T4273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.237916][ T4273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.499360][ T4293] sd 0:0:1:0: device reset [ 46.513007][ T4295] __nla_validate_parse: 10 callbacks suppressed [ 46.513021][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 46.528199][ T4295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'. [ 46.537201][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 46.553871][ T4295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'. [ 46.799749][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.239806][ T4337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.286'. [ 47.281800][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 47.290694][ T4342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'. [ 47.299558][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 47.308967][ T4342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'. [ 47.317986][ T4342] validate_nla: 6 callbacks suppressed [ 47.317999][ T4342] netlink: 'syz.2.288': attribute type 6 has an invalid length. [ 47.324610][ T4337] loop3: detected capacity change from 0 to 1764 [ 47.531525][ T4360] hsr0 speed is unknown, defaulting to 1000 [ 47.976325][ T4360] lo speed is unknown, defaulting to 1000 [ 48.304753][ T4373] sd 0:0:1:0: device reset [ 48.341873][ T4376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 48.362569][ T4376] netlink: 'syz.4.300': attribute type 6 has an invalid length. [ 48.933831][ T4405] veth0_to_team: entered promiscuous mode [ 49.015580][ T4407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4407 comm=syz.2.310 [ 49.488999][ T4420] netlink: 'syz.4.315': attribute type 4 has an invalid length. [ 49.530159][ T4420] netlink: 'syz.4.315': attribute type 4 has an invalid length. [ 49.544604][ T4424] loop3: detected capacity change from 0 to 1024 [ 49.559898][ T4424] EXT4-fs (loop3): unsupported inode size: 143 [ 49.566075][ T4424] EXT4-fs (loop3): blocksize: 1024 [ 49.727642][ T4438] smc: net device bond0 applied user defined pnetid SYZ0 [ 49.748604][ T4438] smc: net device bond0 erased user defined pnetid SYZ0 [ 49.774207][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 49.774221][ T29] audit: type=1326 audit(1762078985.238:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ee67efc9 code=0x7ffc0000 [ 49.803978][ T29] audit: type=1326 audit(1762078985.238:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe2ee67efc9 code=0x7ffc0000 [ 49.827349][ T29] audit: type=1326 audit(1762078985.238:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ee67efc9 code=0x7ffc0000 [ 49.850642][ T29] audit: type=1326 audit(1762078985.238:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fe2ee67efc9 code=0x7ffc0000 [ 49.873824][ T29] audit: type=1326 audit(1762078985.238:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ee67efc9 code=0x7ffc0000 [ 49.897251][ T29] audit: type=1326 audit(1762078985.248:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ee67efc9 code=0x7ffc0000 [ 49.992577][ T29] audit: type=1326 audit(1762078985.458:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 50.015990][ T29] audit: type=1326 audit(1762078985.458:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 50.033306][ T4450] FAULT_INJECTION: forcing a failure. [ 50.033306][ T4450] name failslab, interval 1, probability 0, space 0, times 0 [ 50.039529][ T29] audit: type=1326 audit(1762078985.458:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 50.052098][ T4450] CPU: 0 UID: 0 PID: 4450 Comm: syz.4.327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.052124][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.052182][ T4450] Call Trace: [ 50.052188][ T4450] [ 50.052195][ T4450] __dump_stack+0x1d/0x30 [ 50.052219][ T4450] dump_stack_lvl+0xe8/0x140 [ 50.052240][ T4450] dump_stack+0x15/0x1b [ 50.052258][ T4450] should_fail_ex+0x265/0x280 [ 50.052358][ T4450] should_failslab+0x8c/0xb0 [ 50.052387][ T4450] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 50.052418][ T4450] ? dup_task_struct+0x70/0x6b0 [ 50.052487][ T4450] dup_task_struct+0x70/0x6b0 [ 50.052526][ T4450] ? _parse_integer+0x27/0x40 [ 50.052600][ T4450] copy_process+0x399/0x2000 [ 50.052696][ T4450] ? kstrtouint+0x76/0xc0 [ 50.052728][ T4450] ? kstrtouint_from_user+0x9f/0xf0 [ 50.052748][ T4450] ? __rcu_read_unlock+0x4f/0x70 [ 50.052777][ T4450] kernel_clone+0x16c/0x5c0 [ 50.052836][ T4450] ? vfs_write+0x7e8/0x960 [ 50.052862][ T4450] __x64_sys_clone+0xe6/0x120 [ 50.052900][ T4450] x64_sys_call+0x119c/0x3000 [ 50.052970][ T4450] do_syscall_64+0xd2/0x200 [ 50.052990][ T4450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.053019][ T4450] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.053056][ T4450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.053077][ T4450] RIP: 0033:0x7fe2ee67efc9 [ 50.053092][ T4450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.053110][ T4450] RSP: 002b:00007fe2ed0e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 50.053130][ T4450] RAX: ffffffffffffffda RBX: 00007fe2ee8d5fa0 RCX: 00007fe2ee67efc9 [ 50.053155][ T4450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.053166][ T4450] RBP: 00007fe2ed0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.053179][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.053210][ T4450] R13: 00007fe2ee8d6038 R14: 00007fe2ee8d5fa0 R15: 00007ffe807bcf98 [ 50.053228][ T4450] [ 50.059794][ T4457] audit: audit_backlog=65 > audit_backlog_limit=64 [ 50.421061][ T4483] loop4: detected capacity change from 0 to 164 [ 50.498268][ T4491] loop4: detected capacity change from 0 to 512 [ 50.660562][ T4491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.711363][ T4491] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.760997][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.942977][ T4538] loop4: detected capacity change from 0 to 128 [ 50.958889][ T4538] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.971465][ T4538] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.315321][ T4624] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 51.353363][ T4624] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 51.463861][ T4631] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 51.513582][ T4631] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 51.669003][ T4651] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 51.726895][ T4555] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.741121][ T4651] loop3: detected capacity change from 0 to 764 [ 51.754440][ T4651] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.910179][ T4700] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 51.920417][ T4692] loop3: detected capacity change from 0 to 512 [ 51.930400][ T3368] lo speed is unknown, defaulting to 1000 [ 51.936117][ T3368] sz1: Port: 1 Link DOWN [ 51.942386][ T3389] lo speed is unknown, defaulting to 1000 [ 51.952465][ T4700] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 51.970806][ T3389] lo speed is unknown, defaulting to 1000 [ 51.976513][ T3389] sz1: Port: 1 Link ACTIVE [ 51.994921][ T3409] lo speed is unknown, defaulting to 1000 [ 52.048327][ T4702] xt_hashlimit: max too large, truncated to 1048576 [ 52.100528][ T4702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.184768][ T4736] FAULT_INJECTION: forcing a failure. [ 52.184768][ T4736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.197853][ T4736] CPU: 0 UID: 0 PID: 4736 Comm: syz.3.358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.197880][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.197892][ T4736] Call Trace: [ 52.197898][ T4736] [ 52.197906][ T4736] __dump_stack+0x1d/0x30 [ 52.197998][ T4736] dump_stack_lvl+0xe8/0x140 [ 52.198019][ T4736] dump_stack+0x15/0x1b [ 52.198066][ T4736] should_fail_ex+0x265/0x280 [ 52.198120][ T4736] should_fail+0xb/0x20 [ 52.198137][ T4736] should_fail_usercopy+0x1a/0x20 [ 52.198155][ T4736] _copy_to_user+0x20/0xa0 [ 52.198180][ T4736] simple_read_from_buffer+0xb5/0x130 [ 52.198207][ T4736] proc_fail_nth_read+0x10e/0x150 [ 52.198262][ T4736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.198338][ T4736] vfs_read+0x1a8/0x770 [ 52.198364][ T4736] ? __rcu_read_unlock+0x4f/0x70 [ 52.198390][ T4736] ? __fget_files+0x184/0x1c0 [ 52.198441][ T4736] ksys_read+0xda/0x1a0 [ 52.198467][ T4736] __x64_sys_read+0x40/0x50 [ 52.198494][ T4736] x64_sys_call+0x27c0/0x3000 [ 52.198519][ T4736] do_syscall_64+0xd2/0x200 [ 52.198564][ T4736] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.198602][ T4736] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.198767][ T4736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.198786][ T4736] RIP: 0033:0x7f2bcb55d9dc [ 52.198800][ T4736] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.198831][ T4736] RSP: 002b:00007f2bc9fc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.198852][ T4736] RAX: ffffffffffffffda RBX: 00007f2bcb7b5fa0 RCX: 00007f2bcb55d9dc [ 52.198866][ T4736] RDX: 000000000000000f RSI: 00007f2bc9fc70a0 RDI: 0000000000000006 [ 52.198898][ T4736] RBP: 00007f2bc9fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.198919][ T4736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.198931][ T4736] R13: 00007f2bcb7b6038 R14: 00007f2bcb7b5fa0 R15: 00007ffe1bf58ed8 [ 52.198947][ T4736] [ 52.462313][ T4745] loop3: detected capacity change from 0 to 512 [ 52.468799][ T4745] EXT4-fs: dax option not supported [ 52.511913][ T4750] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 52.556513][ T4750] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 52.592719][ T4754] sd 0:0:1:0: device reset [ 52.704178][ T4762] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.711553][ T4762] smc: net device bond0 erased user defined pnetid SYZ0 [ 52.872403][ T4770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4770 comm=syz.2.371 [ 52.915685][ T4774] __nla_validate_parse: 8 callbacks suppressed [ 52.915697][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 52.930855][ T4774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'. [ 52.939879][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 52.948955][ T4774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'. [ 52.957928][ T4774] netlink: 'syz.2.372': attribute type 6 has an invalid length. [ 53.095589][ T3409] kernel write not supported for file [eventfd] (pid: 3409 comm: kworker/1:4) [ 53.179031][ T4805] smc: net device bond0 applied user defined pnetid SYZ0 [ 53.194002][ T4805] smc: net device bond0 erased user defined pnetid SYZ0 [ 53.207302][ T4804] loop4: detected capacity change from 0 to 512 [ 53.215229][ T4804] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.243117][ T4807] lo speed is unknown, defaulting to 1000 [ 53.257449][ T4812] netlink: 'syz.1.387': attribute type 29 has an invalid length. [ 53.267098][ T4811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 53.267086][ T4807] lo speed is unknown, defaulting to 1000 [ 53.281782][ T4811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.386'. [ 53.290636][ T4811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 53.299716][ T4811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.386'. [ 53.308616][ T4811] netlink: 'syz.0.386': attribute type 6 has an invalid length. [ 53.321020][ T4815] netlink: 500 bytes leftover after parsing attributes in process `syz.1.387'. [ 53.340042][ T4812] netlink: 'syz.1.387': attribute type 29 has an invalid length. [ 53.348092][ T4807] lo speed is unknown, defaulting to 1000 [ 53.376407][ T4820] sd 0:0:1:0: device reset [ 53.376908][ T4807] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.391263][ T4819] loop4: detected capacity change from 0 to 512 [ 53.403169][ T4807] lo speed is unknown, defaulting to 1000 [ 53.409246][ T4807] lo speed is unknown, defaulting to 1000 [ 53.416131][ T4807] lo speed is unknown, defaulting to 1000 [ 53.423527][ T4819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.431530][ T4807] lo speed is unknown, defaulting to 1000 [ 53.442230][ T4807] lo speed is unknown, defaulting to 1000 [ 53.464979][ T4819] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.480588][ T4832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'. [ 53.516034][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.696435][ T4842] loop4: detected capacity change from 0 to 2048 [ 53.733567][ T4842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.798559][ T4852] netlink: 'syz.3.399': attribute type 6 has an invalid length. [ 53.884329][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.891821][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.899271][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.906745][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.914145][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.921612][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.928982][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.936387][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.943794][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.951190][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 53.989780][ T10] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 54.001359][ T4854] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.016933][ T4854] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 642 with error 28 [ 54.029346][ T4854] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.029346][ T4854] [ 54.039013][ T4854] EXT4-fs (loop4): Total free blocks count 0 [ 54.045121][ T4854] EXT4-fs (loop4): Free/Dirty block details [ 54.051106][ T4854] EXT4-fs (loop4): free_blocks=2415919104 [ 54.056837][ T4854] EXT4-fs (loop4): dirty_blocks=752 [ 54.062136][ T4854] EXT4-fs (loop4): Block reservation details [ 54.068111][ T4854] EXT4-fs (loop4): i_reserved_data_blocks=47 [ 54.203443][ T4625] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 54.221670][ T4876] FAULT_INJECTION: forcing a failure. [ 54.221670][ T4876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.234734][ T4876] CPU: 1 UID: 0 PID: 4876 Comm: syz.1.406 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.234760][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.234772][ T4876] Call Trace: [ 54.234818][ T4876] [ 54.234825][ T4876] __dump_stack+0x1d/0x30 [ 54.234846][ T4876] dump_stack_lvl+0xe8/0x140 [ 54.234865][ T4876] dump_stack+0x15/0x1b [ 54.234883][ T4876] should_fail_ex+0x265/0x280 [ 54.234904][ T4876] should_fail+0xb/0x20 [ 54.234921][ T4876] should_fail_usercopy+0x1a/0x20 [ 54.235019][ T4876] _copy_from_user+0x1c/0xb0 [ 54.235048][ T4876] do_tcp_setsockopt+0x41c/0x1670 [ 54.235071][ T4876] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 54.235138][ T4876] tcp_setsockopt+0x51/0xb0 [ 54.235156][ T4876] sock_common_setsockopt+0x69/0x80 [ 54.235180][ T4876] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.235240][ T4876] smc_setsockopt+0x183/0x750 [ 54.235265][ T4876] ? __pfx_smc_setsockopt+0x10/0x10 [ 54.235289][ T4876] __sys_setsockopt+0x184/0x200 [ 54.235399][ T4876] __x64_sys_setsockopt+0x64/0x80 [ 54.235433][ T4876] x64_sys_call+0x20ec/0x3000 [ 54.235484][ T4876] do_syscall_64+0xd2/0x200 [ 54.235501][ T4876] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.235526][ T4876] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.235621][ T4876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.235642][ T4876] RIP: 0033:0x7f20627fefc9 [ 54.235657][ T4876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.235676][ T4876] RSP: 002b:00007f2061267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.235696][ T4876] RAX: ffffffffffffffda RBX: 00007f2062a55fa0 RCX: 00007f20627fefc9 [ 54.235709][ T4876] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000008 [ 54.235742][ T4876] RBP: 00007f2061267090 R08: 0000000000000004 R09: 0000000000000000 [ 54.235754][ T4876] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.235768][ T4876] R13: 00007f2062a56038 R14: 00007f2062a55fa0 R15: 00007fff288c7d58 [ 54.235804][ T4876] [ 54.237426][ T4876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4876 comm=syz.1.406 [ 54.483942][ T4887] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 54.523251][ T4897] siw: device registration error -23 [ 54.604550][ T4902] lo speed is unknown, defaulting to 1000 [ 54.664430][ T4902] lo speed is unknown, defaulting to 1000 [ 54.740293][ T4907] lo speed is unknown, defaulting to 1000 [ 54.803359][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 54.803374][ T29] audit: type=1400 audit(1762078990.268:2604): avc: denied { ioctl } for pid=4903 comm="syz.3.416" path="socket:[9352]" dev="sockfs" ino=9352 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.938688][ T4914] lo speed is unknown, defaulting to 1000 [ 54.970471][ T4914] lo speed is unknown, defaulting to 1000 [ 55.000141][ T4907] lo speed is unknown, defaulting to 1000 [ 55.038135][ T4916] loop3: detected capacity change from 0 to 512 [ 55.102752][ T4916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.127351][ T4916] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.192098][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.266060][ T4926] infiniband syû: set active [ 55.270695][ T4926] infiniband syû: added bond_slave_0 [ 55.282221][ T4926] RDS/IB: syû: added [ 55.286402][ T4926] smc: adding ib device syû with port count 1 [ 55.292727][ T4926] smc: ib device syû port 1 has no pnetid [ 55.337933][ T29] audit: type=1326 audit(1762078990.798:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 55.358453][ T4936] sd 0:0:1:0: device reset [ 55.385243][ T29] audit: type=1326 audit(1762078990.798:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 55.408586][ T29] audit: type=1326 audit(1762078990.798:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 55.431874][ T29] audit: type=1326 audit(1762078990.798:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 55.808702][ T4957] loop4: detected capacity change from 0 to 512 [ 55.862778][ T4957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.024786][ T4965] lo speed is unknown, defaulting to 1000 [ 56.114058][ T4965] lo speed is unknown, defaulting to 1000 [ 56.269051][ T4965] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 56.328172][ T29] audit: type=1326 audit(1762078991.788:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 56.380471][ T4957] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.513987][ T29] audit: type=1326 audit(1762078991.818:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 56.537456][ T29] audit: type=1326 audit(1762078991.818:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 56.560928][ T29] audit: type=1326 audit(1762078991.818:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 56.584703][ T29] audit: type=1326 audit(1762078991.818:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 56.760197][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.874140][ T3560] kernel write not supported for file bpf-prog (pid: 3560 comm: kworker/0:5) [ 56.894410][ T4981] loop4: detected capacity change from 0 to 1024 [ 56.951604][ T4981] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 56.971228][ T4981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.081954][ T4992] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.099525][ T4992] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.196426][ T5002] sd 0:0:1:0: device reset [ 57.289516][ T5006] wg2: entered promiscuous mode [ 57.294416][ T5006] wg2: entered allmulticast mode [ 57.502492][ T5017] netlink: 'syz.1.450': attribute type 6 has an invalid length. [ 57.535765][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.571049][ T5022] loop4: detected capacity change from 0 to 512 [ 57.577670][ T5022] EXT4-fs: dax option not supported [ 57.638504][ T5026] program syz.3.446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.984428][ T5040] netlink: 'syz.2.457': attribute type 21 has an invalid length. [ 57.992352][ T5040] __nla_validate_parse: 16 callbacks suppressed [ 57.992363][ T5040] netlink: 156 bytes leftover after parsing attributes in process `syz.2.457'. [ 59.033397][ T5063] sd 0:0:1:0: device reset [ 59.392400][ T5084] loop4: detected capacity change from 0 to 512 [ 59.452804][ T5084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.466323][ T5084] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.483935][ T5084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.473'. [ 59.512878][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.538104][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 59.547035][ T5089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.474'. [ 59.555920][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 59.566779][ T5089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.474'. [ 59.575733][ T5089] netlink: 'syz.4.474': attribute type 6 has an invalid length. [ 59.636493][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 59.645451][ T5091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.476'. [ 59.654376][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 59.663663][ T5091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.476'. [ 59.672661][ T5091] netlink: 'syz.4.476': attribute type 6 has an invalid length. [ 59.867474][ T5101] netlink: 'syz.4.479': attribute type 6 has an invalid length. [ 59.892629][ T5102] program syz.1.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.948308][ T5105] netlink: 'syz.2.480': attribute type 4 has an invalid length. [ 59.977935][ T5105] netlink: 'syz.2.480': attribute type 4 has an invalid length. [ 60.042171][ T1037] lo speed is unknown, defaulting to 1000 [ 60.047912][ T1037] syz2: Port: 1 Link ACTIVE [ 60.118134][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 60.118148][ T29] audit: type=1326 audit(1762078995.578:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.196857][ T5121] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 60.199345][ T29] audit: type=1326 audit(1762078995.618:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.227785][ T29] audit: type=1326 audit(1762078995.618:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.251093][ T29] audit: type=1326 audit(1762078995.618:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.251793][ T5124] netlink: 'syz.2.488': attribute type 6 has an invalid length. [ 60.274503][ T29] audit: type=1326 audit(1762078995.618:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.305461][ T29] audit: type=1326 audit(1762078995.618:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.305758][ T5125] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 60.328740][ T29] audit: type=1326 audit(1762078995.618:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.359662][ T29] audit: type=1326 audit(1762078995.618:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.383019][ T29] audit: type=1326 audit(1762078995.618:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.406510][ T29] audit: type=1326 audit(1762078995.618:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 60.944621][ T5152] netlink: 'syz.3.494': attribute type 4 has an invalid length. [ 61.444443][ T5174] loop3: detected capacity change from 0 to 512 [ 61.578001][ T5174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.619248][ T5174] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.678902][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.946763][ T1037] lo speed is unknown, defaulting to 1000 [ 61.952589][ T1037] syz2: Port: 1 Link DOWN [ 61.959546][ T3409] lo speed is unknown, defaulting to 1000 [ 61.965406][ T3409] syz2: Port: 1 Link ACTIVE [ 61.975449][ T5203] bridge1: entered promiscuous mode [ 62.092729][ T3368] lo speed is unknown, defaulting to 1000 [ 62.098470][ T3368] sz1: Port: 1 Link DOWN [ 62.106101][ T36] lo speed is unknown, defaulting to 1000 [ 62.111842][ T36] sz1: Port: 1 Link ACTIVE [ 62.151451][ T3368] lo speed is unknown, defaulting to 1000 [ 62.996205][ T5264] loop3: detected capacity change from 0 to 512 [ 63.012266][ T5264] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.018960][ T5264] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.536: bad orphan inode 13 [ 63.024005][ T5268] tipc: Enabling of bearer rejected, failed to enable media [ 63.029772][ T5264] ext4_test_bit(bit=12, block=18) = 1 [ 63.042455][ T5264] is_bad_inode(inode)=0 [ 63.046809][ T5264] NEXT_ORPHAN(inode)=2130706432 [ 63.051731][ T5264] max_ino=32 [ 63.054923][ T5264] i_nlink=1 [ 63.080422][ T5264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.093500][ T5274] __nla_validate_parse: 35 callbacks suppressed [ 63.093543][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 63.113100][ T5264] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.536: deleted inode referenced: 12 [ 63.158564][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.247973][ T5292] loop4: detected capacity change from 0 to 256 [ 63.504644][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 63.513620][ T5313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 63.522518][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 63.538437][ T5313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 63.547409][ T5313] validate_nla: 17 callbacks suppressed [ 63.547424][ T5313] netlink: 'syz.1.555': attribute type 6 has an invalid length. [ 63.565647][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.2.556 [ 63.667359][ T5322] netlink: 'syz.1.559': attribute type 11 has an invalid length. [ 63.675129][ T5322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.559'. [ 63.736816][ T5324] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 63.838771][ T5328] /dev/loop1: Can't lookup blockdev [ 63.946385][ T5335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.563'. [ 63.975936][ T5343] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.983316][ T5343] smc: net device bond0 erased user defined pnetid SYZ0 [ 64.022159][ T5349] netlink: 96 bytes leftover after parsing attributes in process `syz.0.567'. [ 64.094548][ T5351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.135138][ T5347] tipc: Can't bind to reserved service type 2 [ 64.176958][ T5351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.207136][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 64.254214][ T5351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.283183][ T5370] dummy0: entered promiscuous mode [ 64.396539][ T5351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.430319][ T5378] loop3: detected capacity change from 0 to 128 [ 64.451097][ T5378] EXT4-fs: Ignoring removed nobh option [ 64.576039][ T5381] lo speed is unknown, defaulting to 1000 [ 64.630365][ T5381] lo speed is unknown, defaulting to 1000 [ 64.744322][ T4567] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.773211][ T5378] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.786895][ T5386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.578'. [ 64.826407][ T5368] dummy0: left promiscuous mode [ 64.832897][ T4567] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.847541][ T5378] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.876274][ T4567] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975690][ T4567] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.007158][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.021536][ T5388] netlink: 'syz.1.579': attribute type 4 has an invalid length. [ 65.076908][ T5391] netlink: 'syz.1.579': attribute type 4 has an invalid length. [ 65.128812][ T3409] lo speed is unknown, defaulting to 1000 [ 65.134639][ T3409] sz1: Port: 1 Link DOWN [ 65.169225][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 65.169318][ T29] audit: type=1326 audit(1762079000.528:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.198775][ T29] audit: type=1326 audit(1762079000.528:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.222121][ T29] audit: type=1326 audit(1762079000.528:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.245365][ T29] audit: type=1326 audit(1762079000.528:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.268652][ T29] audit: type=1326 audit(1762079000.528:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.291990][ T29] audit: type=1326 audit(1762079000.538:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.315298][ T29] audit: type=1326 audit(1762079000.538:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.338692][ T29] audit: type=1326 audit(1762079000.548:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.362076][ T29] audit: type=1326 audit(1762079000.568:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.389077][ T29] audit: type=1326 audit(1762079000.568:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a85d0efc9 code=0x7ffc0000 [ 65.445483][ T3409] lo speed is unknown, defaulting to 1000 [ 65.451268][ T3409] sz1: Port: 1 Link ACTIVE [ 65.473678][ T3368] lo speed is unknown, defaulting to 1000 [ 65.487415][ T5393] loop3: detected capacity change from 0 to 512 [ 65.546174][ T5393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.894673][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.005079][ T5435] netlink: 'syz.0.596': attribute type 4 has an invalid length. [ 66.029902][ T5435] netlink: 'syz.0.596': attribute type 4 has an invalid length. [ 66.065114][ T5442] smc: net device bond0 applied user defined pnetid SYZ0 [ 66.065180][ T5442] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.532550][ T5452] loop3: detected capacity change from 0 to 128 [ 66.566731][ T5459] lo speed is unknown, defaulting to 1000 [ 66.606824][ T5459] lo speed is unknown, defaulting to 1000 [ 66.660897][ T5461] veth1_to_batadv: entered promiscuous mode [ 66.667345][ T5461] veth1_to_batadv: left promiscuous mode [ 66.772355][ T5457] loop3: detected capacity change from 0 to 1024 [ 66.778875][ T5457] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 67.031364][ T5472] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.049948][ T5472] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.099995][ T5479] futex_wake_op: syz.3.611 tries to shift op by -1; fix this program [ 67.207530][ T5480] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.225426][ T5502] netlink: 'syz.0.619': attribute type 6 has an invalid length. [ 67.336273][ T5515] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.347706][ T5515] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.480970][ T5530] loop4: detected capacity change from 0 to 128 [ 67.689663][ T5543] netlink: 'syz.2.634': attribute type 6 has an invalid length. [ 68.001184][ T5530] process 'syz.4.630' launched './file0' with NULL argv: empty string added [ 68.107717][ T4555] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.230994][ T5566] __nla_validate_parse: 13 callbacks suppressed [ 68.231004][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 68.246054][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.642'. [ 68.264262][ T5566] netlink: '+}[@': attribute type 8 has an invalid length. [ 68.298693][ T5571] macvtap0: refused to change device tx_queue_len [ 68.489038][ T5591] loop3: detected capacity change from 0 to 1024 [ 68.512290][ T5591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.688046][ T5596] lo speed is unknown, defaulting to 1000 [ 68.769489][ T5596] lo speed is unknown, defaulting to 1000 [ 68.941937][ T5601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.653'. [ 68.999683][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.316552][ T5633] tmpfs: Bad value for 'mpol' [ 69.350712][ T5635] mmap: syz.2.666 (5635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.487655][ T5665] loop3: detected capacity change from 0 to 512 [ 69.494723][ T5665] EXT4-fs: dax option not supported [ 69.574579][ T5676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5676 comm=syz.3.677 [ 70.190967][ T3567] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.200162][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 70.200252][ T29] audit: type=1326 audit(1762079005.668:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe2ee67d9dc code=0x7ffc0000 [ 70.319727][ T29] audit: type=1326 audit(1762079005.698:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2ee67da7f code=0x7ffc0000 [ 70.343052][ T29] audit: type=1326 audit(1762079005.698:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2ee67dc2a code=0x7ffc0000 [ 70.366338][ T29] audit: type=1326 audit(1762079005.698:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ee67efc9 code=0x7ffc0000 [ 70.389857][ T29] audit: type=1326 audit(1762079005.698:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ee67efc9 code=0x7ffc0000 [ 70.494705][ T29] audit: type=1400 audit(1762079005.778:3556): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.517424][ T29] audit: type=1400 audit(1762079005.888:3557): avc: denied { read } for pid=5691 comm="syz.1.682" dev="nsfs" ino=4026532512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.538471][ T29] audit: type=1400 audit(1762079005.888:3558): avc: denied { open } for pid=5691 comm="syz.1.682" path="net:[4026532512]" dev="nsfs" ino=4026532512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.596786][ T5692] netlink: 244 bytes leftover after parsing attributes in process `syz.1.682'. [ 70.632799][ T5699] loop3: detected capacity change from 0 to 128 [ 70.643309][ T29] audit: type=1400 audit(1762079006.058:3559): avc: denied { ioctl } for pid=5691 comm="syz.1.682" path="socket:[13659]" dev="sockfs" ino=13659 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.668933][ T29] audit: type=1400 audit(1762079006.058:3560): avc: denied { watch watch_reads } for pid=5691 comm="syz.1.682" path="/138" dev="tmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.700497][ T5699] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.780467][ T5699] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.938345][ T5724] loop4: detected capacity change from 0 to 2048 [ 70.945607][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.001479][ T5721] block device autoloading is deprecated and will be removed. [ 71.061015][ T5724] Alternate GPT is invalid, using primary GPT. [ 71.067255][ T5724] loop4: p1 p2 p3 [ 71.105328][ T5721] loop0: detected capacity change from 0 to 128 [ 71.111980][ T5721] /dev/loop0: Can't open blockdev [ 71.213826][ T5747] program syz.3.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.011988][ T5763] loop0: detected capacity change from 0 to 136 [ 72.062744][ T5763] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.708'. [ 72.075701][ T5763] rock: directory entry would overflow storage [ 72.082037][ T5763] rock: sig=0x4f50, size=4, remaining=3 [ 72.087599][ T5763] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 72.188217][ T5774] tipc: Started in network mode [ 72.193214][ T5774] tipc: Node identity ac14140f, cluster identity 4711 [ 72.249911][ T5774] tipc: New replicast peer: 255.255.255.255 [ 72.255903][ T5774] tipc: Enabled bearer , priority 10 [ 72.321123][ T5773] loop0: detected capacity change from 0 to 8192 [ 72.371103][ T5773] loop0: p1 p2 p3 p4 [ 72.398419][ T5773] loop0: p3 start 331777 is beyond EOD, truncated [ 72.404904][ T5773] loop0: p4 size 262144 extends beyond EOD, truncated [ 72.419314][ T5777] netlink: 96 bytes leftover after parsing attributes in process `syz.0.711'. [ 72.435050][ T5776] loop4: detected capacity change from 0 to 8192 [ 72.461257][ T5779] netlink: 'syz.0.714': attribute type 4 has an invalid length. [ 72.489945][ T5779] netlink: 'syz.0.714': attribute type 4 has an invalid length. [ 72.523321][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 72.532246][ T5781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 72.541164][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 72.559277][ T5781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 72.568190][ T5781] netlink: 'syz.1.715': attribute type 6 has an invalid length. [ 72.589151][ T5782] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 72.655237][ T5790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5790 comm=syz.0.718 [ 72.722038][ T5804] loop3: detected capacity change from 0 to 512 [ 72.728601][ T5804] EXT4-fs: dax option not supported [ 72.765118][ T5808] loop3: detected capacity change from 0 to 512 [ 72.772297][ T5808] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.798422][ T5808] EXT4-fs (loop3): 1 truncate cleaned up [ 72.806691][ T5808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.822304][ T5808] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 72.837527][ T5815] netlink: 'syz.0.726': attribute type 6 has an invalid length. [ 72.942724][ T5824] netlink: 'syz.4.729': attribute type 6 has an invalid length. [ 72.968842][ T5808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.198408][ T5837] loop3: detected capacity change from 0 to 512 [ 73.236072][ T5837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.273284][ T5837] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.313923][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.369884][ T36] tipc: Node number set to 2886997007 [ 73.688596][ T5859] __nla_validate_parse: 9 callbacks suppressed [ 73.688612][ T5859] netlink: 5 bytes leftover after parsing attributes in process `syz.2.740'. [ 73.743087][ T5859] 0ªî{X¹¦: renamed from gretap0 [ 73.757126][ T5859] 0ªî{X¹¦: entered allmulticast mode [ 73.772878][ T5859] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 73.790143][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 73.799006][ T5863] netlink: 28 bytes leftover after parsing attributes in process `syz.4.741'. [ 73.807872][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 73.819961][ T5863] netlink: 28 bytes leftover after parsing attributes in process `syz.4.741'. [ 73.828820][ T5863] netlink: 'syz.4.741': attribute type 6 has an invalid length. [ 74.110577][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 74.119483][ T5888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.751'. [ 74.128426][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 74.138013][ T5888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.751'. [ 74.146888][ T5888] netlink: 'syz.0.751': attribute type 6 has an invalid length. [ 74.316592][ T5905] loop3: detected capacity change from 0 to 512 [ 74.339278][ T5905] EXT4-fs: Ignoring removed nobh option [ 74.345889][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 74.355691][ T5908] bridge_slave_1: left allmulticast mode [ 74.361393][ T5908] bridge_slave_1: left promiscuous mode [ 74.367035][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.405679][ T5908] bridge_slave_0: left allmulticast mode [ 74.411355][ T5908] bridge_slave_0: left promiscuous mode [ 74.417008][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.428913][ T5905] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.756: corrupted inode contents [ 74.440897][ T5905] EXT4-fs (loop3): Remounting filesystem read-only [ 74.449067][ T5905] EXT4-fs (loop3): 1 truncate cleaned up [ 74.455183][ T5905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.467760][ T5905] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.478426][ T5905] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.560961][ T5926] netlink: 'syz.0.764': attribute type 6 has an invalid length. [ 74.610724][ T5918] lo speed is unknown, defaulting to 1000 [ 74.656735][ T5918] lo speed is unknown, defaulting to 1000 [ 74.727498][ T4555] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.769933][ T3422] syzkaller0: tun_net_xmit 76 [ 74.783547][ T5949] loop0: detected capacity change from 0 to 512 [ 74.801239][ T5949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.813795][ T5949] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.834814][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.884008][ T5958] loop0: detected capacity change from 0 to 136 [ 74.898597][ T5958] rock: directory entry would overflow storage [ 74.904809][ T5958] rock: sig=0x4f50, size=4, remaining=3 [ 74.910370][ T5958] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 74.944133][ T5965] loop0: detected capacity change from 0 to 512 [ 74.950722][ T5965] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.958361][ T5965] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 74.966977][ T5965] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.777: attempt to clear invalid blocks 2 len 1 [ 74.980679][ T5965] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 74.995204][ T5965] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.777: invalid indirect mapped block 1819239214 (level 0) [ 75.009219][ T5965] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.777: invalid indirect mapped block 1819239214 (level 1) [ 75.023548][ T5965] EXT4-fs (loop0): 1 truncate cleaned up [ 75.029710][ T5965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.044765][ T5965] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 75.061426][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.279545][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 75.279559][ T29] audit: type=1400 audit(1762079010.738:3802): avc: denied { create } for pid=5973 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.306533][ T29] audit: type=1400 audit(1762079010.748:3803): avc: denied { write } for pid=5973 comm="syz.0.781" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.352746][ T29] audit: type=1326 audit(1762079010.818:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 75.376150][ T29] audit: type=1326 audit(1762079010.818:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 75.400848][ T29] audit: type=1326 audit(1762079010.838:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 75.424221][ T29] audit: type=1326 audit(1762079010.838:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 75.447630][ T29] audit: type=1326 audit(1762079010.838:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 75.470970][ T29] audit: type=1326 audit(1762079010.838:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 75.470995][ T29] audit: type=1326 audit(1762079010.838:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 75.471019][ T29] audit: type=1326 audit(1762079010.838:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 75.676808][ T6001] netlink: 'syz.1.787': attribute type 9 has an invalid length. [ 75.746448][ T6010] smc: net device bond0 applied user defined pnetid SYZ0 [ 75.746684][ T6010] smc: net device bond0 erased user defined pnetid SYZ0 [ 75.796552][ T3422] syzkaller0: tun_net_xmit 76 [ 75.796687][ T3422] syzkaller0: tun_net_xmit 76 [ 76.139112][ T6031] batadv_slave_1: entered promiscuous mode [ 76.170953][ T6031] veth0: entered promiscuous mode [ 76.471634][ T6036] loop0: detected capacity change from 0 to 128 [ 76.499236][ T6036] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.567545][ T6036] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.663554][ T6041] lo speed is unknown, defaulting to 1000 [ 76.689073][ T6041] lo speed is unknown, defaulting to 1000 [ 76.726534][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.739911][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 76.745918][ T5558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.756431][ T6046] loop0: detected capacity change from 0 to 136 [ 76.771644][ T6046] rock: directory entry would overflow storage [ 76.777807][ T6046] rock: sig=0x4f50, size=4, remaining=3 [ 76.783477][ T6046] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 76.795617][ T6050] IPv6: Can't replace route, no match found [ 76.828500][ T6054] 9pnet_fd: Insufficient options for proto=fd [ 76.840576][ T1037] IPVS: starting estimator thread 0... [ 76.930522][ T6055] IPVS: using max 4416 ests per chain, 220800 per kthread [ 77.543667][ T6088] loop3: detected capacity change from 0 to 128 [ 77.665105][ T6104] validate_nla: 1 callbacks suppressed [ 77.665117][ T6104] netlink: 'syz.1.822': attribute type 6 has an invalid length. [ 77.977875][ T6116] loop4: detected capacity change from 0 to 512 [ 77.984506][ T6116] EXT4-fs: Ignoring removed oldalloc option [ 77.992142][ T6116] EXT4-fs (loop4): 1 truncate cleaned up [ 77.998232][ T6116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.011582][ T6116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.029595][ T6120] smc: net device bond0 applied user defined pnetid SYZ0 [ 78.036867][ T6120] smc: net device bond0 erased user defined pnetid SYZ0 [ 78.143853][ T6125] lo speed is unknown, defaulting to 1000 [ 78.171322][ T6125] lo speed is unknown, defaulting to 1000 [ 78.370616][ T6135] loop3: detected capacity change from 0 to 1024 [ 78.384891][ T6135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.418817][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.625707][ T6159] bridge1: entered promiscuous mode [ 78.633293][ T6159] netlink: 'syz.0.839': attribute type 5 has an invalid length. [ 78.652378][ T6162] netlink: 'syz.0.840': attribute type 5 has an invalid length. [ 78.873457][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.882083][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.883205][ T6171] loop4: detected capacity change from 0 to 1024 [ 78.912906][ T6030] veth0: left promiscuous mode [ 78.917708][ T6030] batadv_slave_1: left promiscuous mode [ 78.978795][ T6171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.012346][ T6184] loop0: detected capacity change from 0 to 1024 [ 79.019456][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.051330][ T6184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.074903][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.106960][ T6189] pim6reg1: entered promiscuous mode [ 79.112268][ T6189] pim6reg1: entered allmulticast mode [ 79.133460][ T6180] netlink: 'syz.2.846': attribute type 12 has an invalid length. [ 79.161896][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.206232][ T6195] 9pnet_fd: Insufficient options for proto=fd [ 79.218443][ T6194] loop0: detected capacity change from 0 to 2048 [ 79.260627][ T6194] loop0: p1 < > p4 [ 79.260900][ T6203] __nla_validate_parse: 38 callbacks suppressed [ 79.260912][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 79.265001][ T6194] loop0: p4 size 8388608 extends beyond EOD, truncated [ 79.312079][ T6206] loop4: detected capacity change from 0 to 512 [ 79.331814][ T6206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.344419][ T6206] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.357052][ T6206] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.856: corrupted inode contents [ 79.368923][ T6206] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.856: mark_inode_dirty error [ 79.381498][ T6206] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.856: corrupted inode contents [ 79.393736][ T6206] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.856: mark_inode_dirty error [ 79.427674][ T6206] netlink: 104 bytes leftover after parsing attributes in process `syz.4.856'. [ 79.440582][ T6217] loop0: detected capacity change from 0 to 128 [ 79.448294][ T6217] /dev/loop0: Can't open blockdev [ 79.449741][ T6222] program syz.1.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.473608][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.831354][ T6236] lo speed is unknown, defaulting to 1000 [ 79.859972][ T6236] lo speed is unknown, defaulting to 1000 [ 80.297732][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 80.297748][ T29] audit: type=1326 audit(1762079015.748:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.0.871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a85d0efc9 code=0x0 [ 80.387070][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 80.396050][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 80.404864][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 80.431467][ T29] audit: type=1400 audit(1762079015.878:4482): avc: denied { lock } for pid=6253 comm="syz.3.872" path="socket:[15123]" dev="sockfs" ino=15123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 80.454573][ T29] audit: type=1326 audit(1762079015.878:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 80.477942][ T29] audit: type=1326 audit(1762079015.878:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 80.501267][ T29] audit: type=1326 audit(1762079015.878:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 80.524626][ T29] audit: type=1326 audit(1762079015.878:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 80.547965][ T29] audit: type=1326 audit(1762079015.878:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 80.571261][ T29] audit: type=1326 audit(1762079015.878:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 80.594593][ T29] audit: type=1326 audit(1762079015.878:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 80.617898][ T29] audit: type=1326 audit(1762079015.888:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bcb55efc9 code=0x7ffc0000 [ 80.658721][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 80.667727][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 80.676561][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 80.702970][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 80.711851][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 80.785467][ T6266] xt_policy: output policy not valid in PREROUTING and INPUT [ 80.839455][ T6267] lo speed is unknown, defaulting to 1000 [ 80.886804][ T6270] netlink: 'syz.3.874': attribute type 6 has an invalid length. [ 80.927342][ T6267] lo speed is unknown, defaulting to 1000 [ 80.990389][ T6279] GUP no longer grows the stack in syz.1.880 (6279): 200000004000-20000000a000 (200000002000) [ 81.000705][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.1.880 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.000732][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.000745][ T6279] Call Trace: [ 81.000752][ T6279] [ 81.000760][ T6279] __dump_stack+0x1d/0x30 [ 81.000784][ T6279] dump_stack_lvl+0xe8/0x140 [ 81.000872][ T6279] dump_stack+0x15/0x1b [ 81.000888][ T6279] __get_user_pages+0x1968/0x1ed0 [ 81.000931][ T6279] get_user_pages_remote+0x1d5/0x6c0 [ 81.001012][ T6279] __access_remote_vm+0x15c/0x590 [ 81.001045][ T6279] access_remote_vm+0x32/0x40 [ 81.001098][ T6279] proc_pid_cmdline_read+0x32b/0x6c0 [ 81.001127][ T6279] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 81.001199][ T6279] vfs_readv+0x3fb/0x690 [ 81.001236][ T6279] __x64_sys_preadv+0xfd/0x1c0 [ 81.001264][ T6279] x64_sys_call+0x282e/0x3000 [ 81.001328][ T6279] do_syscall_64+0xd2/0x200 [ 81.001346][ T6279] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.001374][ T6279] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.001407][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.001434][ T6279] RIP: 0033:0x7f20627fefc9 [ 81.001448][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.001473][ T6279] RSP: 002b:00007f2061267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 81.001494][ T6279] RAX: ffffffffffffffda RBX: 00007f2062a55fa0 RCX: 00007f20627fefc9 [ 81.001509][ T6279] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 81.001523][ T6279] RBP: 00007f2062881f91 R08: 0000000002000000 R09: 0000000000000000 [ 81.001536][ T6279] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 81.001550][ T6279] R13: 00007f2062a56038 R14: 00007f2062a55fa0 R15: 00007fff288c7d58 [ 81.001589][ T6279] [ 81.203232][ T6282] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.320921][ T6282] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 81.525570][ T6296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.662374][ T6296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.784301][ T6296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.833303][ T6313] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 81.882571][ T6296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.014284][ T4575] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.022638][ T4575] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.088993][ T4575] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.142121][ T4575] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.881021][ T6344] SELinux: policydb version 0 does not match my version range 15-35 [ 82.898471][ T6344] SELinux: failed to load policy [ 83.173507][ T6354] syz!: rxe_newlink: already configured on team_slave_0 [ 83.426029][ T6358] netlink: 'syz.2.907': attribute type 12 has an invalid length. [ 83.519823][ T6373] netlink: 'syz.2.911': attribute type 4 has an invalid length. [ 83.539685][ T3514] lo speed is unknown, defaulting to 1000 [ 83.545471][ T3514] syz2: Port: 1 Link DOWN [ 83.553720][ T6373] netlink: 'syz.2.911': attribute type 4 has an invalid length. [ 83.563785][ T6374] loop0: detected capacity change from 0 to 512 [ 83.572584][ T3514] lo speed is unknown, defaulting to 1000 [ 83.578326][ T3514] syz2: Port: 1 Link ACTIVE [ 83.586995][ T6362] lo speed is unknown, defaulting to 1000 [ 83.599204][ T6374] ext4: Unknown parameter 'euid>00000000000000000000' [ 83.647970][ T6362] lo speed is unknown, defaulting to 1000 [ 83.970672][ T6405] tipc: Started in network mode [ 83.975563][ T6405] tipc: Node identity aa6d8b087027, cluster identity 4711 [ 83.982718][ T6405] tipc: Enabled bearer , priority 0 [ 84.523578][ T6411] syzkaller0: entered promiscuous mode [ 84.529115][ T6411] syzkaller0: entered allmulticast mode [ 84.575891][ T6416] tipc: Resetting bearer [ 84.584493][ T6408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.595462][ T6408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 84.672726][ T6408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.683653][ T6408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 84.730282][ T6408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.740750][ T6408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 84.761833][ T6419] __nla_validate_parse: 3 callbacks suppressed [ 84.761848][ T6419] netlink: 68 bytes leftover after parsing attributes in process `syz.0.925'. [ 84.802643][ T6408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.813018][ T6408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 84.895817][ T4575] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 84.904027][ T4575] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 84.940546][ T6423] loop0: detected capacity change from 0 to 2048 [ 84.961011][ T4575] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 84.969149][ T4575] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 84.997261][ T3514] tipc: Node number set to 3662318344 [ 85.028171][ T4575] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 85.036296][ T4575] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.074942][ T4575] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 85.083213][ T4575] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.099441][ T6423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.114567][ T6430] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.137859][ T6423] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.927: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 85.177064][ T6423] EXT4-fs (loop0): Remounting filesystem read-only [ 85.330292][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.437675][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 85.446557][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 85.455462][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 85.484980][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 85.484993][ T29] audit: type=1400 audit(1762079020.951:4825): avc: denied { create } for pid=6443 comm="syz.4.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.517305][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 85.526277][ T6449] netlink: 'syz.0.935': attribute type 6 has an invalid length. [ 85.529518][ T29] audit: type=1400 audit(1762079020.981:4826): avc: denied { connect } for pid=6443 comm="syz.4.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.671604][ T29] audit: type=1326 audit(1762079021.141:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 85.694934][ T29] audit: type=1326 audit(1762079021.141:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 85.718912][ T29] audit: type=1326 audit(1762079021.141:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 85.742208][ T29] audit: type=1326 audit(1762079021.141:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 85.775309][ T29] audit: type=1326 audit(1762079021.241:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 85.799259][ T29] audit: type=1326 audit(1762079021.241:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 85.824846][ T6464] netlink: 'syz.3.941': attribute type 10 has an invalid length. [ 85.833200][ T6464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.941'. [ 85.877513][ T6466] FAULT_INJECTION: forcing a failure. [ 85.877513][ T6466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.891166][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.1.943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.891268][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.891279][ T6466] Call Trace: [ 85.891285][ T6466] [ 85.891292][ T6466] __dump_stack+0x1d/0x30 [ 85.891348][ T6466] dump_stack_lvl+0xe8/0x140 [ 85.891371][ T6466] dump_stack+0x15/0x1b [ 85.891391][ T6466] should_fail_ex+0x265/0x280 [ 85.891450][ T6466] should_fail+0xb/0x20 [ 85.891465][ T6466] should_fail_usercopy+0x1a/0x20 [ 85.891484][ T6466] copy_folio_from_iter_atomic+0x278/0x11b0 [ 85.891559][ T6466] ? shmem_write_begin+0xa8/0x190 [ 85.891577][ T6466] ? shmem_write_begin+0xe1/0x190 [ 85.891596][ T6466] generic_perform_write+0x2c2/0x490 [ 85.891619][ T6466] shmem_file_write_iter+0xc5/0xf0 [ 85.891646][ T6466] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.891676][ T6466] vfs_write+0x52a/0x960 [ 85.891710][ T6466] ksys_write+0xda/0x1a0 [ 85.891740][ T6466] __x64_sys_write+0x40/0x50 [ 85.891766][ T6466] x64_sys_call+0x2802/0x3000 [ 85.891847][ T6466] do_syscall_64+0xd2/0x200 [ 85.891868][ T6466] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.891899][ T6466] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.891998][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.892021][ T6466] RIP: 0033:0x7f20627fefc9 [ 85.892038][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.892055][ T6466] RSP: 002b:00007f2061267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.892072][ T6466] RAX: ffffffffffffffda RBX: 00007f2062a55fa0 RCX: 00007f20627fefc9 [ 85.892089][ T6466] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 85.892100][ T6466] RBP: 00007f2061267090 R08: 0000000000000000 R09: 0000000000000000 [ 85.892111][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.892123][ T6466] R13: 00007f2062a56038 R14: 00007f2062a55fa0 R15: 00007fff288c7d58 [ 85.892143][ T6466] [ 86.097160][ T29] audit: type=1326 audit(1762079021.311:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 86.120503][ T29] audit: type=1326 audit(1762079021.311:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db646efc9 code=0x7ffc0000 [ 86.192824][ T6471] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.944'. [ 86.784341][ T6497] netlink: 68 bytes leftover after parsing attributes in process `syz.1.954'. [ 87.034393][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 87.043299][ T6507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.958'. [ 87.100422][ T6507] netlink: 'syz.2.958': attribute type 6 has an invalid length. [ 87.840251][ T6545] netlink: 'syz.3.972': attribute type 6 has an invalid length. [ 87.872127][ T6549] veth1_to_batadv: entered promiscuous mode [ 87.878147][ T6549] veth1_to_batadv: entered allmulticast mode [ 88.089478][ T6559] loop4: detected capacity change from 0 to 512 [ 88.139811][ T6559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.155671][ T6559] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.249095][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.526767][ T6593] program syz.3.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.570648][ T6594] loop4: detected capacity change from 0 to 1024 [ 88.587033][ T6596] netlink: 'syz.1.987': attribute type 6 has an invalid length. [ 88.629859][ T6594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.018702][ T6628] __nla_validate_parse: 28 callbacks suppressed [ 90.018751][ T6628] netlink: 68 bytes leftover after parsing attributes in process `syz.1.997'. [ 90.271699][ T6647] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1004'. [ 90.281649][ T6647] netlink: zone id is out of range [ 90.286936][ T6647] netlink: zone id is out of range [ 90.292630][ T6647] netlink: zone id is out of range [ 90.297960][ T6647] netlink: zone id is out of range [ 90.303334][ T6647] netlink: zone id is out of range [ 90.309126][ T6647] netlink: zone id is out of range [ 90.314722][ T6647] netlink: zone id is out of range [ 90.319825][ T6647] netlink: zone id is out of range [ 90.324961][ T6647] netlink: zone id is out of range [ 90.330054][ T6647] netlink: zone id is out of range [ 90.415273][ T6652] loop0: detected capacity change from 0 to 1024 [ 90.426012][ T6652] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 90.497374][ T29] kauditd_printk_skb: 3856 callbacks suppressed [ 90.497386][ T29] audit: type=1326 audit(1762079025.963:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ee61b099 code=0x7ffc0000 [ 90.539073][ T29] audit: type=1326 audit(1762079025.993:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2ee675e67 code=0x7ffc0000 [ 90.562391][ T29] audit: type=1326 audit(1762079025.993:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ee61b099 code=0x7ffc0000 [ 90.586328][ T29] audit: type=1326 audit(1762079025.993:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2ee675e67 code=0x7ffc0000 [ 90.609619][ T29] audit: type=1326 audit(1762079025.993:8696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ee61b099 code=0x7ffc0000 [ 90.633708][ T29] audit: type=1326 audit(1762079025.993:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2ee675e67 code=0x7ffc0000 [ 90.657294][ T29] audit: type=1326 audit(1762079025.993:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ee61b099 code=0x7ffc0000 [ 90.680489][ T29] audit: type=1326 audit(1762079025.993:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2ee675e67 code=0x7ffc0000 [ 90.704382][ T29] audit: type=1326 audit(1762079025.993:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ee61b099 code=0x7ffc0000 [ 90.705956][ T6657] loop3: detected capacity change from 0 to 2048 [ 90.727653][ T29] audit: type=1326 audit(1762079025.993:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6590 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2ee675e67 code=0x7ffc0000 [ 90.797695][ T6657] loop3: p1 < > p4 [ 90.814791][ T6660] loop0: detected capacity change from 0 to 512 [ 90.828489][ T6657] loop3: p4 size 8388608 extends beyond EOD, truncated [ 90.833723][ T6660] EXT4-fs: Ignoring removed nobh option [ 90.863718][ T6660] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1008: corrupted inode contents [ 90.884762][ T6660] EXT4-fs (loop0): Remounting filesystem read-only [ 90.892026][ T6660] EXT4-fs (loop0): 1 truncate cleaned up [ 90.903133][ T6660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.916357][ T6660] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.955507][ T6666] capability: warning: `syz.1.1009' uses 32-bit capabilities (legacy support in use) [ 90.965425][ T6660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. Connection to 10.128.1.219 closed by remote host. [ 91.244448][ T6594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.444598][ T3313] ================================================================== [ 91.452698][ T3313] BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes [ 91.459875][ T3313] [ 91.462178][ T3313] read-write to 0xffff8881094d0028 of 4 bytes by task 6659 on cpu 1: [ 91.470212][ T3313] free_pid+0x77/0x180 [ 91.474269][ T3313] free_pids+0x54/0xb0 [ 91.478311][ T3313] release_task+0x9a9/0xb60 [ 91.482881][ T3313] do_exit+0xd81/0x15c0 [ 91.487009][ T3313] do_group_exit+0xff/0x140 [ 91.491484][ T3313] get_signal+0xe58/0xf70 [ 91.495788][ T3313] arch_do_signal_or_restart+0x96/0x440 [ 91.501309][ T3313] exit_to_user_mode_loop+0x77/0x110 [ 91.506573][ T3313] do_syscall_64+0x1d6/0x200 [ 91.511148][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.517015][ T3313] [ 91.519313][ T3313] read to 0xffff8881094d0028 of 4 bytes by task 3313 on cpu 0: [ 91.526825][ T3313] zap_pid_ns_processes+0x1fe/0x2d0 [ 91.532003][ T3313] do_exit+0x1414/0x15c0 [ 91.536216][ T3313] do_group_exit+0xff/0x140 [ 91.540690][ T3313] get_signal+0xe58/0xf70 [ 91.544993][ T3313] arch_do_signal_or_restart+0x96/0x440 [ 91.550513][ T3313] exit_to_user_mode_loop+0x77/0x110 [ 91.555776][ T3313] do_syscall_64+0x1d6/0x200 [ 91.560338][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.566213][ T3313] [ 91.568512][ T3313] value changed: 0x00000002 -> 0x00000001 [ 91.574197][ T3313] [ 91.576492][ T3313] Reported by Kernel Concurrency Sanitizer on: [ 91.582613][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.592473][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.602501][ T3313] ================================================================== [ 91.612381][ T4549] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.665376][ T4549] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.715039][ T4549] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.765159][ T4549] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.835263][ T4549] bridge_slave_1: left allmulticast mode [ 91.840923][ T4549] bridge_slave_1: left promiscuous mode [ 91.846995][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.854564][ T4549] bridge_slave_0: left allmulticast mode [ 91.860373][ T4549] bridge_slave_0: left promiscuous mode [ 91.866026][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.874887][ T4549] tipc: Resetting bearer [ 91.954859][ T4549] tipc: Disabling bearer [ 92.035435][ T4549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.045132][ T4549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.054716][ T4549] bond0 (unregistering): Released all slaves [ 92.106991][ T4549] tipc: Left network mode [ 92.159763][ T4549] hsr_slave_0: left promiscuous mode [ 92.165652][ T4549] hsr_slave_1: left promiscuous mode [ 92.171232][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.178757][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.186392][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.193810][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.204057][ T4549] veth1_macvtap: left promiscuous mode [ 92.209722][ T4549] veth0_macvtap: left promiscuous mode [ 92.215247][ T4549] veth1_vlan: left promiscuous mode [ 92.220523][ T4549] veth0_vlan: left promiscuous mode [ 92.274440][ T4549] team0 (unregistering): Port device team_slave_1 removed [ 92.284814][ T4549] team0 (unregistering): Port device team_slave_0 removed [ 92.575639][ T4549] IPVS: stop unused estimator thread 0... [ 92.626629][ T4549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.675682][ T4549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.726371][ T4549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.776072][ T4549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.825774][ T4549] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 92.835458][ T4549] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 92.864403][ T4549] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 92.874052][ T4549] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 92.924258][ T4549] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 92.933926][ T4549] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 92.964304][ T4549] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 92.974028][ T4549] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 93.034898][ T4549] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.114055][ T4549] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.174413][ T4549] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.244135][ T4549] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.294901][ T4549] bridge_slave_1: left allmulticast mode [ 93.300598][ T4549] bridge_slave_1: left promiscuous mode [ 93.306242][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.313856][ T4549] bridge_slave_0: left allmulticast mode [ 93.319466][ T4549] bridge_slave_0: left promiscuous mode [ 93.325073][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.332776][ T4549] bridge_slave_1: left allmulticast mode [ 93.338442][ T4549] bridge_slave_1: left promiscuous mode [ 93.344081][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.351577][ T4549] bridge_slave_0: left allmulticast mode [ 93.357241][ T4549] bridge_slave_0: left promiscuous mode [ 93.363083][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.494586][ T4549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.504155][ T4549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.513649][ T4549] bond0 (unregistering): Released all slaves [ 93.585022][ T4549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.595095][ T4549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.604809][ T4549] bond0 (unregistering): Released all slaves [ 93.754534][ T4549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.764136][ T4549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.773471][ T4549] bond0 (unregistering): Released all slaves [ 93.785388][ T1037] syû: Port: 1 Link DOWN [ 93.825610][ T4549] tipc: Disabling bearer [ 93.830737][ T4549] tipc: Left network mode [ 93.946567][ T4549] hsr_slave_0: left promiscuous mode [ 93.952056][ T4549] hsr_slave_1: left promiscuous mode [ 93.957613][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.965037][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.972436][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.979920][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.987291][ T4549] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 93.994319][ T4549] batman_adv: batadv0: Removing interface: veth1_vlan [ 94.002308][ T4549] hsr_slave_0: left promiscuous mode [ 94.007822][ T4549] hsr_slave_1: left promiscuous mode [ 94.013404][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.020757][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.028095][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.035627][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.044253][ T4549] hsr_slave_0: left promiscuous mode [ 94.049795][ T4549] hsr_slave_1: left promiscuous mode [ 94.055400][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.062769][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.070066][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.077427][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.090365][ T4549] veth1_macvtap: left promiscuous mode [ 94.095901][ T4549] veth0_macvtap: left promiscuous mode [ 94.101413][ T4549] veth1_vlan: left promiscuous mode [ 94.106607][ T4549] veth0_vlan: left promiscuous mode [ 94.112244][ T4549] veth1_macvtap: left promiscuous mode [ 94.117752][ T4549] veth0_macvtap: left promiscuous mode [ 94.123821][ T4549] veth1_macvtap: left promiscuous mode [ 94.129306][ T4549] veth0_macvtap: left promiscuous mode [ 94.134814][ T4549] veth1_vlan: left promiscuous mode [ 94.140058][ T4549] veth0_vlan: left promiscuous mode [ 94.244132][ T4549] team0 (unregistering): Port device team_slave_1 removed [ 94.253563][ T4549] team0 (unregistering): Port device team_slave_0 removed [ 94.261070][ T4563] smc: removing ib device syz! [ 94.282079][ T4567] smc: removing ib device sz1 [ 94.308280][ T4549] team0 (unregistering): Port device team_slave_1 removed [ 94.318891][ T4549] team0 (unregistering): Port device team_slave_0 removed [ 94.331659][ T4575] smc: removing ib device syû [ 94.368924][ T4549] team0 (unregistering): Port device team_slave_1 removed [ 94.378749][ T4549] team0 (unregistering): Port device team_slave_0 removed [ 94.405844][ T1037] lo speed is unknown, defaulting to 1000 [ 94.411564][ T1037] sz1: Port: 1 Link DOWN [ 95.263649][ T4549] bridge_slave_1: left allmulticast mode [ 95.269281][ T4549] bridge_slave_1: left promiscuous mode [ 95.274889][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.282356][ T4549] bridge_slave_0: left allmulticast mode [ 95.287972][ T4549] bridge_slave_0: left promiscuous mode [ 95.293641][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.443435][ T4549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.452443][ T4549] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 95.460733][ T4549] bond0 (unregistering): Released all slaves [ 95.516151][ T4549] hsr_slave_0: left promiscuous mode [ 95.521660][ T4549] hsr_slave_1: left promiscuous mode [ 95.527176][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.534702][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.562834][ T4549] team0 (unregistering): Port device team_slave_1 removed [ 95.571672][ T4549] team0 (unregistering): Port device team_slave_0 removed [ 95.599214][ T1037] lo speed is unknown, defaulting to 1000 [ 95.604970][ T1037] infiniband syz2: ib_query_port failed (-19)