last executing test programs: 995.579055ms ago: executing program 2 (id=4854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x4, 0x8, 0x2, 0x600, 0x1, 0x4, '\x00', 0x0, r2, 0x4, 0x4, 0x1, 0xa}, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r6, 0x301, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a"], 0x64}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000f00)="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", 0x125}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832", 0xe4}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d4", 0x9f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef", 0xe}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd", 0x58}], 0x2}}], 0x2, 0xc0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x33, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r9}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000000000000000810000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={r11, 0x0, 0x0}, 0x20) write$selinux_access(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a69706d695f6465766963655f743a7330202f7362696e2f6468636c69656e7420303030303030303030303030303030303030363400ea841d7cb486c0f2abca538aa1a487093f"], 0x47) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 995.451975ms ago: executing program 0 (id=4855): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 991.251505ms ago: executing program 0 (id=4858): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 799.774338ms ago: executing program 0 (id=4860): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 799.562718ms ago: executing program 0 (id=4861): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 799.232768ms ago: executing program 0 (id=4862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x1, 0x7fe2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000100018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 798.922068ms ago: executing program 0 (id=4863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x4, 0x8, 0x2, 0x600, 0x1, 0x4, '\x00', 0x0, r2, 0x4, 0x4, 0x1, 0xa}, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r6, 0x301, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a"], 0x64}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000f00)="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", 0x125}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832", 0xe4}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d4", 0x9f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef", 0xe}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd", 0x58}], 0x2}}], 0x2, 0xc0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000000000000000810000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={r10, 0x0, 0x0}, 0x20) write$selinux_access(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a69706d695f6465766963655f743a7330202f7362696e2f6468636c69656e7420303030303030303030303030303030303030363400ea841d7cb486c0f2abca538aa1a487093f"], 0x47) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 643.00512ms ago: executing program 1 (id=4867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3fffff) 628.97081ms ago: executing program 1 (id=4868): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 598.585001ms ago: executing program 1 (id=4870): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x14, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@nombcache}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) write$tun(r0, 0x0, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x2000000, 0x100000001}) 548.091412ms ago: executing program 1 (id=4871): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 515.937442ms ago: executing program 1 (id=4874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000002020000000900010073797a310000000014000200626f6e641000"/46], 0x34}}, 0xc800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000940)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000000c000000200003801c000380180001800a0002007770616e30000000070001000400000018000180140002007665746830"], 0x4c}}, 0x880) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x9, 0x1, 0x8, 0x6, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a00000005000400020000000900020073797a32000000001400078008001340ffffffff0800060000000000050005000200000005000100060000000d000300686173683a6e6574"], 0x5c}}, 0x80) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x406, r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x10000002}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xab6f, 0xc77d}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r9, 0x2) io_setup(0x2004, &(0x7f0000000680)) 443.305794ms ago: executing program 4 (id=4879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000002020000000900010073797a310000000014000200626f6e641000"/46], 0x34}}, 0xc800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c000000200003801c000380180001800a0002007770616e30000000070001000400000018000180140002007665746830"], 0x4c}}, 0x880) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x9, 0x1, 0x8, 0x6, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a00000005000400020000000900020073797a32000000001400078008001340ffffffff0800060000000000050005000200000005000100060000000d000300686173683a6e6574"], 0x5c}}, 0x80) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x406, r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x10000002}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xab6f, 0xc77d}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r9, 0x2) io_setup(0x2004, &(0x7f0000000680)) 323.009115ms ago: executing program 3 (id=4882): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 222.969217ms ago: executing program 3 (id=4883): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd24", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 222.686007ms ago: executing program 4 (id=4884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x8020, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffffb9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 222.519077ms ago: executing program 3 (id=4885): socket(0x25, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 222.170217ms ago: executing program 1 (id=4886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 169.527768ms ago: executing program 3 (id=4887): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$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") r1 = creat(&(0x7f0000000240)='./file1\x00', 0xd) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setuid(r2) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2) 169.279418ms ago: executing program 3 (id=4888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xf27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x60, 0x101, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 169.076538ms ago: executing program 4 (id=4889): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) lseek(r0, 0x2000, 0x0) 168.608018ms ago: executing program 2 (id=4890): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 111.928988ms ago: executing program 2 (id=4891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x880, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0xa5, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x21, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 111.803368ms ago: executing program 4 (id=4892): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x44) close(r0) 111.468748ms ago: executing program 4 (id=4901): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 88.922439ms ago: executing program 2 (id=4893): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@rand_addr, @multicast1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x3, 0x0, 0x0, 0x3cd}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 88.790559ms ago: executing program 3 (id=4894): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x100000800000009) 78.608539ms ago: executing program 4 (id=4895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000002020000000900010073797a310000000014000200626f6e641000"/46], 0x34}}, 0xc800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c000000200003801c000380180001800a0002007770616e30000000070001000400000018000180140002007665746830"], 0x4c}}, 0x880) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x9, 0x1, 0x8, 0x6, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a00000005000400020000000900020073797a32000000001400078008001340ffffffff0800060000000000050005000200000005000100060000000d000300686173683a6e6574"], 0x5c}}, 0x80) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x406, r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x10000002}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xab6f, 0xc77d}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r9, 0x2) io_setup(0x2004, &(0x7f0000000680)) 58.23924ms ago: executing program 2 (id=4896): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) 0s ago: executing program 2 (id=4897): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@resgid}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) fallocate(r0, 0x0, 0xa20, 0x8000c64) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) kernel console output (not intermixed with test programs): T5026] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.660: corrupted inode contents [ 42.740889][ T5026] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.660: mark_inode_dirty error [ 42.753760][ T5026] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.660: corrupted inode contents [ 42.765797][ T5026] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.660: mark_inode_dirty error [ 42.777328][ T5026] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.660: corrupted inode contents [ 42.791762][ T5026] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 42.801354][ T5026] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.660: corrupted inode contents [ 42.816517][ T5026] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.660: mark_inode_dirty error [ 42.827859][ T5026] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 42.839342][ T5040] netlink: 80 bytes leftover after parsing attributes in process `syz.3.666'. [ 42.843184][ T5042] IPv6: Can't replace route, no match found [ 42.853120][ T5026] EXT4-fs (loop0): 1 truncate cleaned up [ 42.860002][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 42.882611][ T5026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.940477][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.961380][ T5051] loop3: detected capacity change from 0 to 512 [ 42.989728][ T5053] SELinux: syz.0.668 (5053) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 42.991977][ T5057] syzkaller1: entered promiscuous mode [ 43.008740][ T5057] syzkaller1: entered allmulticast mode [ 43.023746][ T5051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.050501][ T5051] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.069843][ T5061] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 43.100806][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.235967][ T5087] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 43.243722][ T5088] netlink: 'syz.2.687': attribute type 1 has an invalid length. [ 43.353750][ T5092] loop1: detected capacity change from 0 to 512 [ 43.363127][ T5094] netlink: 'syz.0.698': attribute type 3 has an invalid length. [ 43.379732][ T5092] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 43.387892][ T5092] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.396086][ T5092] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.688: corrupted inode contents [ 43.408303][ T5092] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.688: mark_inode_dirty error [ 43.420120][ T5092] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.688: corrupted inode contents [ 43.438988][ T5092] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.688: mark_inode_dirty error [ 43.450523][ T5092] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.688: corrupted inode contents [ 43.462698][ T5092] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 43.472371][ T5092] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.688: corrupted inode contents [ 43.484458][ T5092] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.688: mark_inode_dirty error [ 43.496714][ T5092] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 43.515671][ T5092] EXT4-fs (loop1): 1 truncate cleaned up [ 43.522861][ T1460] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 43.578842][ T5111] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 43.614084][ T5120] 9pnet: p9_errstr2errno: server reported unknown error @ [ 43.741336][ T5145] loop3: detected capacity change from 0 to 256 [ 43.750161][ T5141] xt_hashlimit: max too large, truncated to 1048576 [ 43.762067][ T5149] loop1: detected capacity change from 0 to 512 [ 43.795195][ T5149] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.849857][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 43.985926][ T5189] loop1: detected capacity change from 0 to 1024 [ 44.052617][ T3360] Process accounting resumed [ 44.154768][ T5209] gretap0: refused to change device tx_queue_len [ 44.162999][ T5209] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.164740][ T5211] loop3: detected capacity change from 0 to 1024 [ 44.227166][ T5211] EXT4-fs error (device loop3): ext4_xattr_block_list:762: inode #15: comm syz.3.743: corrupted xattr block 161: invalid header [ 44.245301][ T5211] EXT4-fs (loop3): Remounting filesystem read-only [ 44.337418][ T5235] loop2: detected capacity change from 0 to 1024 [ 44.366284][ T5246] 9pnet: p9_errstr2errno: server reported unknown error @ [ 44.368003][ T3360] Process accounting resumed [ 44.380005][ T5243] loop0: detected capacity change from 0 to 256 [ 44.489724][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 44.521829][ T5264] loop3: detected capacity change from 0 to 512 [ 44.542811][ T5264] EXT4-fs (loop3): can't read group descriptor 0 [ 44.606843][ T5275] loop2: detected capacity change from 0 to 1024 [ 44.629280][ T3360] Process accounting resumed [ 44.671503][ T5290] loop2: detected capacity change from 0 to 512 [ 44.680223][ T5290] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.776: casefold flag without casefold feature [ 44.693888][ T5290] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.776: couldn't read orphan inode 15 (err -117) [ 44.803660][ T5305] loop0: detected capacity change from 0 to 512 [ 44.831282][ T5305] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.781: bg 0: block 248: padding at end of block bitmap is not set [ 44.846848][ T5305] __quota_error: 353 callbacks suppressed [ 44.846864][ T5305] Quota error (device loop0): write_blk: dquota write failed [ 44.860285][ T5305] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 44.870289][ T5305] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.781: Failed to acquire dquot type 1 [ 44.882111][ T5305] EXT4-fs (loop0): 1 truncate cleaned up [ 44.888357][ T5305] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.908718][ T5314] loop3: detected capacity change from 0 to 1024 [ 44.941473][ T29] audit: type=1326 audit(1752438219.156:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 44.964983][ T29] audit: type=1326 audit(1752438219.156:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 44.988314][ T29] audit: type=1326 audit(1752438219.156:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 45.011808][ T29] audit: type=1326 audit(1752438219.156:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 45.033686][ T3400] Process accounting resumed [ 45.035184][ T29] audit: type=1326 audit(1752438219.156:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 45.063433][ T29] audit: type=1326 audit(1752438219.156:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 45.086798][ T29] audit: type=1326 audit(1752438219.156:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 45.110212][ T29] audit: type=1326 audit(1752438219.156:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 45.695015][ T5387] loop3: detected capacity change from 0 to 1024 [ 45.712855][ T5393] openvswitch: netlink: Message has 6 unknown bytes. [ 45.713547][ T5387] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.762872][ T5402] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 45.769479][ T5404] loop2: detected capacity change from 0 to 1024 [ 45.779616][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 45.824225][ T5404] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.850145][ T5404] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.829: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.864959][ T5404] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 45.877388][ T5404] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.877388][ T5404] [ 45.889482][ T5404] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.829: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.924009][ T5421] bridge0: entered allmulticast mode [ 45.937886][ T5423] loop1: detected capacity change from 0 to 1024 [ 45.946368][ T5421] pim6reg: entered allmulticast mode [ 45.960008][ T5425] validate_nla: 6 callbacks suppressed [ 45.960021][ T5425] netlink: 'syz.3.838': attribute type 13 has an invalid length. [ 45.984306][ T5425] gretap0: refused to change device tx_queue_len [ 45.991180][ T5425] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.995556][ T5423] EXT4-fs error (device loop1): ext4_xattr_block_list:762: inode #15: comm syz.1.837: corrupted xattr block 161: invalid header [ 46.021522][ T5423] EXT4-fs (loop1): Remounting filesystem read-only [ 46.041565][ T5431] netlink: 'syz.0.850': attribute type 3 has an invalid length. [ 46.094215][ T5443] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 46.156057][ T5447] hub 2-0:1.0: USB hub found [ 46.161045][ T5447] hub 2-0:1.0: 8 ports detected [ 46.346215][ T5457] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 46.462066][ T5476] netlink: 'syz.1.861': attribute type 1 has an invalid length. [ 46.463209][ T5473] loop2: detected capacity change from 0 to 2048 [ 46.608025][ T5473] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.859: bg 0: block 234: padding at end of block bitmap is not set [ 46.669194][ T5473] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1276 with error 117 [ 46.681766][ T5473] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.681766][ T5473] [ 46.699257][ T5500] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 46.745106][ T5502] loop4: detected capacity change from 0 to 256 [ 46.810943][ T5506] loop1: detected capacity change from 0 to 512 [ 46.818087][ T5506] EXT4-fs (loop1): can't read group descriptor 0 [ 46.862943][ T5512] loop1: detected capacity change from 0 to 512 [ 46.892090][ T5512] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.873: casefold flag without casefold feature [ 46.902137][ T5516] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 46.906319][ T5512] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.873: couldn't read orphan inode 15 (err -117) [ 46.912372][ T5516] netlink: 'syz.4.876': attribute type 3 has an invalid length. [ 46.931803][ T5516] __nla_validate_parse: 27 callbacks suppressed [ 46.931816][ T5516] netlink: 216 bytes leftover after parsing attributes in process `syz.4.876'. [ 46.961853][ T5518] netlink: 80 bytes leftover after parsing attributes in process `syz.3.877'. [ 46.996637][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 47.005502][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 47.030691][ T5520] bond1: entered promiscuous mode [ 47.035745][ T5520] bond1: entered allmulticast mode [ 47.049214][ T5520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.059950][ T5520] bond1 (unregistering): Released all slaves [ 47.229384][ T5549] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 47.261864][ T5553] netlink: 80 bytes leftover after parsing attributes in process `syz.1.892'. [ 47.275069][ T5555] netlink: 80 bytes leftover after parsing attributes in process `syz.3.894'. [ 47.356526][ T5568] netlink: 80 bytes leftover after parsing attributes in process `syz.3.910'. [ 47.893694][ T5579] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 47.924718][ T5582] loop2: detected capacity change from 0 to 1024 [ 47.926126][ T5584] netlink: 80 bytes leftover after parsing attributes in process `syz.3.907'. [ 47.932594][ T5580] hub 2-0:1.0: USB hub found [ 47.946419][ T5580] hub 2-0:1.0: 8 ports detected [ 47.973221][ T5582] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.184098][ T5614] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 48.222325][ T5618] netlink: 80 bytes leftover after parsing attributes in process `syz.2.934'. [ 48.945308][ T5624] loop0: detected capacity change from 0 to 512 [ 48.966057][ T5629] loop2: detected capacity change from 0 to 1024 [ 48.999115][ T5624] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.017246][ T5624] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.033685][ T5639] bridge0: entered allmulticast mode [ 49.034421][ T3400] Process accounting resumed [ 49.044169][ T5624] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.062309][ T5639] pim6reg: entered allmulticast mode [ 49.072383][ T5624] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 49.097852][ T5624] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.936: bg 0: block 40: padding at end of block bitmap is not set [ 49.112784][ T5641] netlink: 80 bytes leftover after parsing attributes in process `syz.4.932'. [ 49.119379][ T5624] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 49.134897][ T5624] EXT4-fs (loop0): 1 truncate cleaned up [ 49.171547][ T5649] loop1: detected capacity change from 0 to 1024 [ 49.207944][ T10] Process accounting resumed [ 49.210711][ T5653] loop0: detected capacity change from 0 to 128 [ 49.228522][ T5653] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.241924][ T5653] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.264872][ T5659] loop4: detected capacity change from 0 to 256 [ 49.274427][ T5659] FAT-fs (loop4): bogus number of FAT sectors [ 49.280563][ T5659] FAT-fs (loop4): Can't find a valid FAT filesystem [ 49.295876][ T5657] loop2: detected capacity change from 0 to 2048 [ 49.348314][ T5657] Alternate GPT is invalid, using primary GPT. [ 49.354696][ T5657] loop2: p1 p2 p3 [ 49.359589][ T5673] bridge0: entered allmulticast mode [ 49.367080][ T5668] hub 2-0:1.0: USB hub found [ 49.372111][ T5668] hub 2-0:1.0: 8 ports detected [ 49.381280][ T5673] pim6reg: entered allmulticast mode [ 49.529365][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 49.610288][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 49.785465][ T5739] loop2: detected capacity change from 0 to 2048 [ 49.807144][ T5743] loop1: detected capacity change from 0 to 256 [ 49.822524][ T5743] FAT-fs (loop1): bogus number of FAT sectors [ 49.828624][ T5743] FAT-fs (loop1): Can't find a valid FAT filesystem [ 49.902052][ T5749] loop0: detected capacity change from 0 to 512 [ 49.908807][ T5749] journal_path: Lookup failure for './file0/../file0' [ 49.915637][ T5749] EXT4-fs: error: could not find journal device path [ 49.985200][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 49.985270][ T29] audit: type=1326 audit(1752438224.206:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac49c1e929 code=0x7ffc0000 [ 50.024468][ T29] audit: type=1326 audit(1752438224.236:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fac49c1e929 code=0x7ffc0000 [ 50.047837][ T29] audit: type=1326 audit(1752438224.236:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.0.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac49c1e929 code=0x7ffc0000 [ 50.087500][ T5767] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.168698][ T5783] loop3: detected capacity change from 0 to 512 [ 50.176823][ T5783] journal_path: Lookup failure for './file0/../file0' [ 50.183653][ T5783] EXT4-fs: error: could not find journal device path [ 50.250509][ T5793] loop0: detected capacity change from 0 to 2048 [ 50.276419][ T29] audit: type=1326 audit(1752438224.496:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6517e929 code=0x7ffc0000 [ 50.299883][ T29] audit: type=1326 audit(1752438224.496:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6517e929 code=0x7ffc0000 [ 50.341470][ T5793] Alternate GPT is invalid, using primary GPT. [ 50.342276][ T29] audit: type=1326 audit(1752438224.546:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6517e929 code=0x7ffc0000 [ 50.347885][ T5793] loop0: p1 p2 p3 [ 50.371096][ T29] audit: type=1326 audit(1752438224.546:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6517e929 code=0x7ffc0000 [ 50.398294][ T29] audit: type=1326 audit(1752438224.546:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6517e929 code=0x7ffc0000 [ 50.421757][ T29] audit: type=1326 audit(1752438224.546:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6517e929 code=0x7ffc0000 [ 50.445263][ T29] audit: type=1326 audit(1752438224.546:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6517e929 code=0x7ffc0000 [ 50.518067][ T3400] IPVS: starting estimator thread 0... [ 50.564777][ T5817] loop3: detected capacity change from 0 to 2048 [ 50.580773][ T5819] loop1: detected capacity change from 0 to 512 [ 50.592686][ T5819] journal_path: Lookup failure for './file0/../file0' [ 50.599500][ T5819] EXT4-fs: error: could not find journal device path [ 50.608412][ T5823] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.619064][ T5811] IPVS: using max 2832 ests per chain, 141600 per kthread [ 50.633022][ T5817] Alternate GPT is invalid, using primary GPT. [ 50.639349][ T5817] loop3: p1 p2 p3 [ 50.674190][ T5827] loop9: detected capacity change from 0 to 7 [ 50.680682][ T5827] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.688534][ T5827] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.696468][ T5827] loop9: unable to read partition table [ 50.743194][ T5827] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 50.743194][ T5827] ) failed (rc=-5) [ 50.871655][ T5847] loop3: detected capacity change from 0 to 1024 [ 50.890810][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 50.926737][ T3380] Process accounting resumed [ 51.154754][ T5877] loop9: detected capacity change from 0 to 7 [ 51.199238][ T5877] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.234186][ T5877] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.242151][ T5877] loop9: unable to read partition table [ 51.252175][ T5877] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 51.252175][ T5877] ) failed (rc=-5) [ 51.366575][ T5891] loop3: detected capacity change from 0 to 1024 [ 51.404801][ T10] IPVS: starting estimator thread 0... [ 51.416965][ T3380] Process accounting resumed [ 51.499107][ T5906] IPVS: using max 2592 ests per chain, 129600 per kthread [ 51.513207][ T5916] loop0: detected capacity change from 0 to 256 [ 51.529254][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 51.560228][ T5916] FAT-fs (loop0): Directory bread(block 64) failed [ 51.577887][ T5916] FAT-fs (loop0): Directory bread(block 65) failed [ 51.588186][ T5916] FAT-fs (loop0): Directory bread(block 66) failed [ 51.594912][ T5916] FAT-fs (loop0): Directory bread(block 67) failed [ 51.615235][ T5916] FAT-fs (loop0): Directory bread(block 68) failed [ 51.623125][ T5916] FAT-fs (loop0): Directory bread(block 69) failed [ 51.633871][ T5916] FAT-fs (loop0): Directory bread(block 70) failed [ 51.641807][ T5924] loop2: detected capacity change from 0 to 1024 [ 51.654833][ T5916] FAT-fs (loop0): Directory bread(block 71) failed [ 51.670013][ T5924] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 51.673923][ T5916] FAT-fs (loop0): Directory bread(block 72) failed [ 51.694112][ T5924] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.1076: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 51.713818][ T5916] FAT-fs (loop0): Directory bread(block 73) failed [ 51.725046][ T5924] EXT4-fs (loop2): Remounting filesystem read-only [ 51.777282][ T5916] bio_check_eod: 196 callbacks suppressed [ 51.777297][ T5916] syz.0.1062: attempt to access beyond end of device [ 51.777297][ T5916] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 51.796936][ T5916] syz.0.1062: attempt to access beyond end of device [ 51.796936][ T5916] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 51.820911][ T5939] loop1: detected capacity change from 0 to 1024 [ 51.895106][ T5951] validate_nla: 3 callbacks suppressed [ 51.895121][ T5951] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 52.017715][ T5962] __nla_validate_parse: 16 callbacks suppressed [ 52.017742][ T5962] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1091'. [ 52.049806][ T5966] loop3: detected capacity change from 0 to 2048 [ 52.097638][ T5966] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.120956][ T5966] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 52.120984][ T5966] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.120984][ T5966] [ 52.120996][ T5966] EXT4-fs (loop3): Total free blocks count 0 [ 52.121009][ T5966] EXT4-fs (loop3): Free/Dirty block details [ 52.121093][ T5966] EXT4-fs (loop3): free_blocks=2415919504 [ 52.121106][ T5966] EXT4-fs (loop3): dirty_blocks=16 [ 52.165941][ T5966] EXT4-fs (loop3): Block reservation details [ 52.165954][ T5966] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 52.845812][ T5997] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1097'. [ 52.944766][ T6009] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1102'. [ 52.977863][ T6011] loop4: detected capacity change from 0 to 256 [ 53.001647][ T6011] FAT-fs (loop4): Directory bread(block 64) failed [ 53.019003][ T6011] FAT-fs (loop4): Directory bread(block 65) failed [ 53.025764][ T6011] FAT-fs (loop4): Directory bread(block 66) failed [ 53.033890][ T6011] FAT-fs (loop4): Directory bread(block 67) failed [ 53.041571][ T6011] FAT-fs (loop4): Directory bread(block 68) failed [ 53.056512][ T6011] FAT-fs (loop4): Directory bread(block 69) failed [ 53.063160][ T6011] FAT-fs (loop4): Directory bread(block 70) failed [ 53.070251][ T6011] FAT-fs (loop4): Directory bread(block 71) failed [ 53.097007][ T6011] FAT-fs (loop4): Directory bread(block 72) failed [ 53.104912][ T6011] FAT-fs (loop4): Directory bread(block 73) failed [ 53.111899][ T6022] loop1: detected capacity change from 0 to 128 [ 53.139155][ T6022] syz.1.1109: attempt to access beyond end of device [ 53.139155][ T6022] loop1: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 53.153612][ T6011] syz.4.1104: attempt to access beyond end of device [ 53.153612][ T6011] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 53.154541][ T6022] syz.1.1109: attempt to access beyond end of device [ 53.154541][ T6022] loop1: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 53.180088][ T6011] syz.4.1104: attempt to access beyond end of device [ 53.180088][ T6011] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 53.180811][ T6022] Buffer I/O error on dev loop1, logical block 156, lost async page write [ 53.182415][ T6022] syz.1.1109: attempt to access beyond end of device [ 53.182415][ T6022] loop1: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 53.216171][ T6022] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 53.229720][ T6022] syz.1.1109: attempt to access beyond end of device [ 53.229720][ T6022] loop1: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 53.243197][ T6022] Buffer I/O error on dev loop1, logical block 158, lost async page write [ 53.253707][ T6022] syz.1.1109: attempt to access beyond end of device [ 53.253707][ T6022] loop1: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 53.267158][ T6022] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 53.280578][ T6022] syz.1.1109: attempt to access beyond end of device [ 53.280578][ T6022] loop1: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 53.294193][ T6022] Buffer I/O error on dev loop1, logical block 160, lost async page write [ 53.304385][ T6022] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 53.403781][ T6051] loop3: detected capacity change from 0 to 128 [ 53.449315][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 53.460464][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 53.636044][ T6067] loop1: detected capacity change from 0 to 1024 [ 53.642914][ T6067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.705158][ T6080] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1136'. [ 53.745020][ T6088] loop0: detected capacity change from 0 to 128 [ 53.805759][ T6096] loop0: detected capacity change from 0 to 512 [ 53.828183][ T6100] loop3: detected capacity change from 0 to 512 [ 53.835863][ T6100] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 53.855170][ T6100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 53.867240][ T6100] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1143: corrupted in-inode xattr: e_value size too large [ 53.882299][ T6100] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1143: couldn't read orphan inode 15 (err -117) [ 53.907763][ T6107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 53.914337][ T6107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.921911][ T6107] vhci_hcd vhci_hcd.0: Device attached [ 53.937008][ T6107] loop1: detected capacity change from 0 to 164 [ 53.959915][ T6107] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 53.960941][ T6113] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1149'. [ 53.976530][ T6108] vhci_hcd: connection closed [ 53.977181][ T1463] vhci_hcd: stop threads [ 53.986331][ T1463] vhci_hcd: release socket [ 53.990768][ T1463] vhci_hcd: disconnect device [ 54.044772][ T6122] loop2: detected capacity change from 0 to 2048 [ 54.063583][ T6122] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.078354][ T6122] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 54.090794][ T6122] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.090794][ T6122] [ 54.100654][ T6122] EXT4-fs (loop2): Total free blocks count 0 [ 54.106659][ T6122] EXT4-fs (loop2): Free/Dirty block details [ 54.112548][ T6122] EXT4-fs (loop2): free_blocks=2415919504 [ 54.118254][ T6122] EXT4-fs (loop2): dirty_blocks=16 [ 54.123374][ T6122] EXT4-fs (loop2): Block reservation details [ 54.129365][ T6122] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 54.261223][ T6131] loop4: detected capacity change from 0 to 128 [ 54.321906][ T6134] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 54.353874][ T6136] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1156'. [ 54.570227][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.616754][ T6152] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1162'. [ 54.729829][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.754838][ T6176] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 54.796752][ T6181] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1177'. [ 54.803627][ T6183] loop2: detected capacity change from 0 to 512 [ 54.813112][ T6183] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 54.823310][ T6183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 54.838420][ T6183] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.1178: corrupted in-inode xattr: e_value size too large [ 54.853032][ T6183] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1178: couldn't read orphan inode 15 (err -117) [ 54.891315][ T6191] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1190'. [ 54.930449][ T6196] loop4: detected capacity change from 0 to 2048 [ 54.944773][ T6196] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.959917][ T6196] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 54.972167][ T6196] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.972167][ T6196] [ 54.981972][ T6196] EXT4-fs (loop4): Total free blocks count 0 [ 54.987954][ T6196] EXT4-fs (loop4): Free/Dirty block details [ 54.994045][ T6196] EXT4-fs (loop4): free_blocks=2415919504 [ 54.999959][ T6196] EXT4-fs (loop4): dirty_blocks=16 [ 55.005079][ T6196] EXT4-fs (loop4): Block reservation details [ 55.011096][ T6196] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 55.127410][ T6217] loop0: detected capacity change from 0 to 512 [ 55.150671][ T6217] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 55.159949][ T6217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 55.160237][ T6217] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.1191: corrupted in-inode xattr: e_value size too large [ 55.160578][ T6217] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1191: couldn't read orphan inode 15 (err -117) [ 55.168405][ T6223] loop2: detected capacity change from 0 to 512 [ 55.168608][ T6223] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 55.196230][ T6225] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1194'. [ 55.307411][ T6239] ref_ctr_offset mismatch. inode: 0x59a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 55.393399][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 55.393414][ T29] audit: type=1400 audit(1752438229.616:1288): avc: denied { execute } for pid=6247 comm="syz.0.1205" name="file0" dev="tmpfs" ino=1440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.423067][ T29] audit: type=1326 audit(1752438229.626:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 55.446728][ T29] audit: type=1326 audit(1752438229.626:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 55.470377][ T29] audit: type=1326 audit(1752438229.626:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 55.494087][ T29] audit: type=1326 audit(1752438229.626:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 55.517652][ T29] audit: type=1326 audit(1752438229.626:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 55.541243][ T29] audit: type=1326 audit(1752438229.626:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 55.564763][ T29] audit: type=1326 audit(1752438229.626:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 55.588238][ T29] audit: type=1400 audit(1752438229.646:1296): avc: denied { execute_no_trans } for pid=6247 comm="syz.0.1205" path="/277/file0" dev="tmpfs" ino=1440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.611844][ T29] audit: type=1326 audit(1752438229.696:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 55.716868][ T6267] loop0: detected capacity change from 0 to 1024 [ 55.723768][ T6267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.742800][ C1] hrtimer: interrupt took 29202 ns [ 55.751790][ T6271] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 55.795111][ T6278] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 55.801691][ T6278] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.809215][ T6278] vhci_hcd vhci_hcd.0: Device attached [ 55.822584][ T6278] loop3: detected capacity change from 0 to 164 [ 55.840825][ T6278] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 55.854428][ T6286] loop1: detected capacity change from 0 to 512 [ 55.858031][ T6279] vhci_hcd: connection closed [ 55.861479][ T165] vhci_hcd: stop threads [ 55.870548][ T165] vhci_hcd: release socket [ 55.875027][ T165] vhci_hcd: disconnect device [ 55.881496][ T6286] EXT4-fs: Ignoring removed bh option [ 55.888646][ T6286] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 55.899393][ T6286] EXT4-fs (loop1): 1 truncate cleaned up [ 56.179316][ T6314] loop2: detected capacity change from 0 to 512 [ 56.179623][ T6314] EXT4-fs: Ignoring removed bh option [ 56.179864][ T6314] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 56.195753][ T6314] EXT4-fs (loop2): 1 truncate cleaned up [ 56.560060][ T6353] loop3: detected capacity change from 0 to 512 [ 56.560365][ T6353] EXT4-fs: Ignoring removed bh option [ 56.561461][ T6353] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.565920][ T6353] EXT4-fs (loop3): 1 truncate cleaned up [ 56.627384][ T6361] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 56.627407][ T6361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.627504][ T6361] vhci_hcd vhci_hcd.0: Device attached [ 56.629097][ T6361] loop2: detected capacity change from 0 to 164 [ 56.631096][ T6361] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 56.631295][ T6362] vhci_hcd: connection closed [ 56.631469][ T1460] vhci_hcd: stop threads [ 56.631478][ T1460] vhci_hcd: release socket [ 56.631486][ T1460] vhci_hcd: disconnect device [ 56.649321][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 56.828359][ T6375] loop3: detected capacity change from 0 to 1024 [ 56.843087][ T6379] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6379 comm=syz.0.1263 [ 56.855578][ T6379] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6379 comm=syz.0.1263 [ 56.881476][ T3400] Process accounting resumed [ 57.009991][ T6404] SET target dimension over the limit! [ 57.062159][ T6412] __nla_validate_parse: 21 callbacks suppressed [ 57.062195][ T6412] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1278'. [ 57.130327][ T6416] loop0: detected capacity change from 0 to 1024 [ 57.173187][ T6419] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1281'. [ 57.194264][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 57.203518][ T6422] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 57.220500][ T3360] Process accounting resumed [ 57.248179][ T6432] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1295'. [ 57.288738][ T6438] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1287'. [ 57.298380][ T165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 57.309846][ T3413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 57.392629][ T6451] SET target dimension over the limit! [ 57.425574][ T6452] SELinux: ebitmap: truncated map [ 57.432289][ T6452] SELinux: failed to load policy [ 57.455644][ T6463] loop4: detected capacity change from 0 to 1024 [ 57.470850][ T6463] EXT4-fs: Ignoring removed orlov option [ 57.484197][ T6466] loop1: detected capacity change from 0 to 1024 [ 57.506772][ T6470] loop3: detected capacity change from 0 to 1024 [ 57.558270][ T36] Process accounting resumed [ 57.640630][ T6502] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1311'. [ 57.711300][ T6509] loop2: detected capacity change from 0 to 1024 [ 57.740266][ T6519] loop3: detected capacity change from 0 to 1024 [ 57.769408][ T6519] EXT4-fs: Ignoring removed orlov option [ 57.800849][ T6529] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1324'. [ 57.815625][ T6535] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1333'. [ 57.972543][ T6559] loop0: detected capacity change from 0 to 1024 [ 57.985846][ T6563] netlink: 'syz.1.1337': attribute type 1 has an invalid length. [ 57.993821][ T6561] loop2: detected capacity change from 0 to 512 [ 58.002531][ T6561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.012928][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 58.051153][ T6561] EXT4-fs (loop2): 1 truncate cleaned up [ 58.082543][ T6571] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1339'. [ 58.117931][ T6551] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 58.224233][ T6584] SELinux: ebitmap: truncated map [ 58.231186][ T6584] SELinux: failed to load policy [ 58.240076][ T6582] loop0: detected capacity change from 0 to 1024 [ 58.285482][ T3413] Process accounting resumed [ 58.324323][ T6605] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 58.330847][ T6605] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.338631][ T6605] vhci_hcd vhci_hcd.0: Device attached [ 58.347011][ T6605] loop4: detected capacity change from 0 to 164 [ 58.376706][ T6605] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 58.385426][ T6606] vhci_hcd: connection closed [ 58.387878][ T1460] vhci_hcd: stop threads [ 58.397039][ T1460] vhci_hcd: release socket [ 58.401478][ T1460] vhci_hcd: disconnect device [ 58.413760][ T6612] loop2: detected capacity change from 0 to 1024 [ 58.422317][ T6612] EXT4-fs: Ignoring removed orlov option [ 58.428910][ T6608] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 58.542740][ T6632] loop1: detected capacity change from 0 to 1024 [ 58.569925][ T3413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 58.595468][ T10] Process accounting resumed [ 58.608296][ T6645] netlink: 'syz.0.1370': attribute type 1 has an invalid length. [ 58.743788][ T6658] loop1: detected capacity change from 0 to 1024 [ 58.755327][ T6658] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1376: Failed to acquire dquot type 0 [ 58.770242][ T6658] EXT4-fs (loop1): 1 truncate cleaned up [ 58.778455][ T6658] SELinux: failed to load policy [ 58.810151][ T6669] vlan2: entered allmulticast mode [ 58.845982][ T6673] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 58.915557][ T6681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.027227][ T6702] loop2: detected capacity change from 0 to 1024 [ 59.043428][ T6704] loop1: detected capacity change from 0 to 512 [ 59.050382][ T6710] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 59.065624][ T6704] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1399: bg 0: block 248: padding at end of block bitmap is not set [ 59.065707][ T3413] Process accounting resumed [ 59.081314][ T6704] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1399: Failed to acquire dquot type 1 [ 59.096406][ T6704] EXT4-fs (loop1): 1 truncate cleaned up [ 59.110289][ T6704] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.149006][ T6716] 0·: renamed from hsr_slave_1 (while UP) [ 59.156895][ T6716] 0·: entered allmulticast mode [ 59.172112][ T6716] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 59.210417][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 59.223772][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 59.247988][ T6728] loop0: detected capacity change from 0 to 512 [ 59.262424][ T6728] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.274052][ T6728] EXT4-fs (loop0): 1 truncate cleaned up [ 59.297312][ T6730] SELinux: failed to load policy [ 59.342981][ T6739] IPVS: Error joining to the multicast group [ 59.411680][ T6741] loop3: detected capacity change from 0 to 1024 [ 59.457611][ T3360] Process accounting resumed [ 59.493326][ T6762] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 59.583006][ T6775] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.598280][ T6773] loop2: detected capacity change from 0 to 1024 [ 59.618107][ T6773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.638634][ T6775] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.650475][ T6781] 0·: renamed from hsr_slave_1 (while UP) [ 59.668277][ T6781] 0·: entered allmulticast mode [ 59.674243][ T6781] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 59.740278][ T6789] loop4: detected capacity change from 0 to 1024 [ 59.749295][ T6775] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.761211][ T6789] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1434: Failed to acquire dquot type 0 [ 59.773541][ T6792] loop2: detected capacity change from 0 to 1024 [ 59.781246][ T6789] EXT4-fs (loop4): 1 truncate cleaned up [ 59.804408][ T6799] loop0: detected capacity change from 0 to 512 [ 59.808476][ T6789] SELinux: failed to load policy [ 59.818245][ T6775] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.844993][ T3413] Process accounting resumed [ 59.851256][ T6805] vlan2: entered allmulticast mode [ 59.867224][ T3413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 59.880245][ T6799] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1438: bg 0: block 248: padding at end of block bitmap is not set [ 59.899934][ T6799] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1438: Failed to acquire dquot type 1 [ 59.912679][ T6799] EXT4-fs (loop0): 1 truncate cleaned up [ 59.916068][ T6775] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.918810][ T6799] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.930214][ T6775] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.966424][ T6775] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.977763][ T6775] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.069659][ T6827] 0·: renamed from hsr_slave_1 (while UP) [ 60.090840][ T6827] 0·: entered allmulticast mode [ 60.101495][ T6827] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 60.122726][ T6835] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 60.213443][ T6846] loop3: detected capacity change from 0 to 512 [ 60.231474][ T6846] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1457: bg 0: block 248: padding at end of block bitmap is not set [ 60.246105][ T6846] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1457: Failed to acquire dquot type 1 [ 60.258191][ T6846] EXT4-fs (loop3): 1 truncate cleaned up [ 60.264441][ T6846] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.300236][ T6857] loop3: detected capacity change from 0 to 1024 [ 60.307247][ T6857] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.318144][ T6857] EXT4-fs (loop3): group descriptors corrupted! [ 60.330458][ T6857] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 60.452598][ T6882] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 60.490206][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.491150][ T165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.518154][ T6889] loop1: detected capacity change from 0 to 1024 [ 60.544170][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 60.544181][ T29] audit: type=1326 audit(1752438234.766:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.575708][ T29] audit: type=1326 audit(1752438234.776:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.599275][ T29] audit: type=1326 audit(1752438234.776:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.622666][ T29] audit: type=1326 audit(1752438234.776:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.646145][ T29] audit: type=1326 audit(1752438234.776:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.669685][ T29] audit: type=1326 audit(1752438234.776:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.693159][ T29] audit: type=1326 audit(1752438234.776:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.701008][ T3413] Process accounting resumed [ 60.716523][ T29] audit: type=1326 audit(1752438234.776:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.716549][ T29] audit: type=1326 audit(1752438234.776:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.769531][ T29] audit: type=1326 audit(1752438234.846:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 60.967402][ T6898] loop4: detected capacity change from 0 to 512 [ 60.984797][ T6898] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1475: bg 0: block 248: padding at end of block bitmap is not set [ 61.001032][ T6898] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1475: Failed to acquire dquot type 1 [ 61.014330][ T6898] EXT4-fs (loop4): 1 truncate cleaned up [ 61.020546][ T6898] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.030255][ T6907] loop3: detected capacity change from 0 to 1024 [ 61.046941][ T6907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.129856][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.170893][ T6925] serio: Serial port ptm0 [ 61.197001][ T6927] netlink: 'syz.1.1487': attribute type 1 has an invalid length. [ 61.253072][ T6934] loop2: detected capacity change from 0 to 256 [ 61.282026][ T6934] FAT-fs (loop2): Directory bread(block 1285) failed [ 61.292944][ T6934] FAT-fs (loop2): Directory bread(block 1285) failed [ 61.300452][ T6934] FAT-fs (loop2): Directory bread(block 1285) failed [ 61.307907][ T6934] FAT-fs (loop2): Directory bread(block 1285) failed [ 61.353478][ T6942] loop2: detected capacity change from 0 to 512 [ 61.370943][ T6942] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1492: bg 0: block 16: invalid block bitmap [ 61.408375][ T6949] random: crng reseeded on system resumption [ 61.408674][ T6942] EXT4-fs (loop2): Remounting filesystem read-only [ 61.421281][ T6942] EXT4-fs (loop2): 1 truncate cleaned up [ 61.579565][ T6975] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 61.630192][ T6980] SELinux: Context Ü is not valid (left unmapped). [ 61.654446][ T6984] random: crng reseeded on system resumption [ 61.770136][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.932722][ T7015] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 61.972563][ T7019] loop4: detected capacity change from 0 to 256 [ 61.997845][ T7019] FAT-fs (loop4): Directory bread(block 1285) failed [ 61.999630][ T7028] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 62.007055][ T7019] FAT-fs (loop4): Directory bread(block 1285) failed [ 62.013663][ T7025] serio: Serial port ptm0 [ 62.019098][ T7019] FAT-fs (loop4): Directory bread(block 1285) failed [ 62.030403][ T7019] FAT-fs (loop4): Directory bread(block 1285) failed [ 62.113439][ T7034] __nla_validate_parse: 35 callbacks suppressed [ 62.113475][ T7034] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1534'. [ 62.132910][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1531'. [ 62.165048][ T7039] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1535'. [ 62.351993][ T7056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7056 comm=syz.3.1542 [ 62.406672][ T7061] serio: Serial port ptm0 [ 62.411889][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.517261][ T7070] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1549'. [ 62.575012][ T7080] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1552'. [ 62.662160][ T7098] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1562'. [ 62.725566][ T7104] SELinux: ebitmap: truncated map [ 62.735153][ T7106] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1565'. [ 62.745499][ T7104] SELinux: failed to load policy [ 62.816592][ T7122] netlink: 'syz.1.1571': attribute type 1 has an invalid length. [ 62.844122][ T7127] vlan2: entered allmulticast mode [ 62.950250][ T7136] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1578'. [ 62.983763][ T7138] bridge0: entered promiscuous mode [ 62.989164][ T7138] macsec1: entered promiscuous mode [ 63.003121][ T7138] bridge0: port 4(macsec1) entered blocking state [ 63.009659][ T7138] bridge0: port 4(macsec1) entered disabled state [ 63.027126][ T7138] macsec1: entered allmulticast mode [ 63.032508][ T7138] bridge0: entered allmulticast mode [ 63.040697][ T7138] macsec1: left allmulticast mode [ 63.045868][ T7138] bridge0: left allmulticast mode [ 63.046135][ T7141] SELinux: ebitmap: truncated map [ 63.059338][ T7138] bridge0: left promiscuous mode [ 63.067341][ T7142] Invalid ELF header magic: != ELF [ 63.080846][ T7141] SELinux: failed to load policy [ 63.194268][ T7164] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1591'. [ 63.411628][ T7178] SELinux: ebitmap: truncated map [ 63.430730][ T7178] SELinux: failed to load policy [ 63.468812][ T7192] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1603'. [ 63.532802][ T7201] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 63.546351][ T7203] loop4: detected capacity change from 0 to 128 [ 63.558575][ T7203] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.585136][ T7203] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 63.664871][ T3413] Process accounting resumed [ 63.670990][ T7216] Invalid ELF header magic: != ELF [ 64.094464][ T7240] netlink: '+}[@': attribute type 3 has an invalid length. [ 64.119771][ T7247] loop9: detected capacity change from 0 to 7 [ 64.133190][ T7247] buffer_io_error: 106 callbacks suppressed [ 64.133233][ T7247] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.133261][ T7247] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.133344][ T7247] loop9: unable to read partition table [ 64.133386][ T7247] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 64.133386][ T7247] ) failed (rc=-5) [ 64.246484][ T7265] loop4: detected capacity change from 0 to 512 [ 64.268084][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.282387][ T7265] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.294785][ T7268] netlink: '+}[@': attribute type 3 has an invalid length. [ 64.319874][ T7265] EXT4-fs (loop4): 1 truncate cleaned up [ 64.348246][ T7278] netlink: 'syz.1.1650': attribute type 1 has an invalid length. [ 64.372813][ T7282] loop9: detected capacity change from 0 to 7 [ 64.381798][ T7282] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.393873][ T7282] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.401735][ T7282] loop9: unable to read partition table [ 64.415036][ T7282] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 64.415036][ T7282] ) failed (rc=-5) [ 64.464004][ T7295] loop3: detected capacity change from 0 to 512 [ 64.474014][ T7295] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.499047][ T7295] EXT4-fs (loop3): 1 truncate cleaned up [ 64.518510][ T7297] loop4: detected capacity change from 0 to 8192 [ 64.568521][ T7305] netlink: '+}[@': attribute type 3 has an invalid length. [ 64.653362][ T7316] loop3: detected capacity change from 0 to 128 [ 64.692811][ T7326] syz.2.1663: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 64.695539][ T7325] loop4: detected capacity change from 0 to 1024 [ 64.707330][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.2.1663 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 64.707358][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.707370][ T7326] Call Trace: [ 64.707376][ T7326] [ 64.707384][ T7326] __dump_stack+0x1d/0x30 [ 64.707406][ T7326] dump_stack_lvl+0xe8/0x140 [ 64.707506][ T7326] dump_stack+0x15/0x1b [ 64.707523][ T7326] warn_alloc+0x12b/0x1a0 [ 64.707551][ T7326] ? audit_log_end+0x1d7/0x1f0 [ 64.707591][ T7326] ? audit_log_end+0x1d7/0x1f0 [ 64.707623][ T7326] __vmalloc_node_range_noprof+0x9c/0xe00 [ 64.707714][ T7326] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 64.707741][ T7326] ? __rcu_read_unlock+0x4f/0x70 [ 64.707762][ T7326] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 64.707829][ T7326] ? perf_cgroup_switch+0x10c/0x480 [ 64.707868][ T7326] ? update_load_avg+0x1da/0x820 [ 64.707895][ T7326] ? __list_add_valid_or_report+0x38/0xe0 [ 64.707933][ T7326] ? should_fail_ex+0x30/0x280 [ 64.707961][ T7326] ? xskq_create+0x36/0xe0 [ 64.707983][ T7326] vmalloc_user_noprof+0x7d/0xb0 [ 64.708034][ T7326] ? xskq_create+0x80/0xe0 [ 64.708055][ T7326] xskq_create+0x80/0xe0 [ 64.708076][ T7326] xsk_init_queue+0x95/0xf0 [ 64.708157][ T7326] xsk_setsockopt+0x35c/0x510 [ 64.708242][ T7326] ? __pfx_xsk_setsockopt+0x10/0x10 [ 64.708262][ T7326] __sys_setsockopt+0x184/0x200 [ 64.708295][ T7326] __x64_sys_setsockopt+0x64/0x80 [ 64.708407][ T7326] x64_sys_call+0x2bd5/0x2fb0 [ 64.708437][ T7326] do_syscall_64+0xd2/0x200 [ 64.708455][ T7326] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.708482][ T7326] ? clear_bhb_loop+0x40/0x90 [ 64.708565][ T7326] ? clear_bhb_loop+0x40/0x90 [ 64.708587][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.708607][ T7326] RIP: 0033:0x7f4e6517e929 [ 64.708631][ T7326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.708650][ T7326] RSP: 002b:00007f4e637e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.708672][ T7326] RAX: ffffffffffffffda RBX: 00007f4e653a5fa0 RCX: 00007f4e6517e929 [ 64.708685][ T7326] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 64.708697][ T7326] RBP: 00007f4e65200b39 R08: 0000000000000004 R09: 0000000000000000 [ 64.708709][ T7326] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.708721][ T7326] R13: 0000000000000000 R14: 00007f4e653a5fa0 R15: 00007ffc7f109868 [ 64.708739][ T7326] [ 64.708750][ T7326] Mem-Info: [ 64.728196][ T7316] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.736450][ T7326] active_anon:4101 inactive_anon:20 isolated_anon:0 [ 64.736450][ T7326] active_file:5948 inactive_file:2222 isolated_file:0 [ 64.736450][ T7326] unevictable:0 dirty:233 writeback:0 [ 64.736450][ T7326] slab_reclaimable:2955 slab_unreclaimable:14219 [ 64.736450][ T7326] mapped:28904 shmem:320 pagetables:1207 [ 64.736450][ T7326] sec_pagetables:0 bounce:0 [ 64.736450][ T7326] kernel_misc_reclaimable:0 [ 64.736450][ T7326] free:1903185 free_pcp:12215 free_cma:0 [ 64.975612][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 65.020144][ T7326] Node 0 active_anon:16636kB inactive_anon:80kB active_file:23792kB inactive_file:8888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115616kB dirty:932kB writeback:0kB shmem:1280kB writeback_tmp:0kB kernel_stack:3440kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 65.020200][ T7326] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.088140][ T7326] lowmem_reserve[]: 0 2882 7860 7860 [ 65.093516][ T7326] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 65.123580][ T7326] lowmem_reserve[]: 0 0 4978 4978 [ 65.128610][ T7326] Node 0 Normal free:4649320kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16636kB inactive_anon:80kB active_file:23792kB inactive_file:8888kB unevictable:0kB writepending:932kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:45200kB local_pcp:28168kB free_cma:0kB [ 65.160589][ T7326] lowmem_reserve[]: 0 0 0 0 [ 65.165160][ T7326] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 65.177948][ T7326] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 65.194075][ T7326] Node 0 Normal: 1073*4kB (UE) 850*8kB (UME) 548*16kB (UME) 204*32kB (UME) 90*64kB (UM) 59*128kB (UME) 30*256kB (UM) 14*512kB (UM) 41*1024kB (UME) 23*2048kB (UME) 1100*4096kB (UM) = 4649236kB [ 65.213084][ T7326] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 65.222469][ T7326] 8530 total pagecache pages [ 65.227089][ T7326] 47 pages in swap cache [ 65.231329][ T7326] Free swap = 124808kB [ 65.235460][ T7326] Total swap = 124996kB [ 65.239605][ T7326] 2097051 pages RAM [ 65.243388][ T7326] 0 pages HighMem/MovableOnly [ 65.248037][ T7326] 80812 pages reserved [ 65.270520][ T3400] Process accounting resumed [ 65.320749][ T3305] EXT4-fs unmount: 128 callbacks suppressed [ 65.320762][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.326500][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.529779][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 65.540798][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 65.555129][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 65.555143][ T29] audit: type=1400 audit(1752438239.776:2038): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.599133][ T29] audit: type=1400 audit(1752438239.816:2039): avc: denied { remove_name } for pid=3311 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 65.626499][ T29] audit: type=1400 audit(1752438239.816:2040): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="322" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 65.653965][ T29] audit: type=1400 audit(1752438239.826:2041): avc: denied { map_create } for pid=7380 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.673187][ T29] audit: type=1400 audit(1752438239.826:2042): avc: denied { bpf } for pid=7380 comm="syz.0.1701" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.693809][ T29] audit: type=1400 audit(1752438239.826:2043): avc: denied { map_read map_write } for pid=7380 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.713794][ T29] audit: type=1400 audit(1752438239.826:2044): avc: denied { prog_load } for pid=7380 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.732878][ T29] audit: type=1400 audit(1752438239.826:2045): avc: denied { perfmon } for pid=7380 comm="syz.0.1701" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.753799][ T29] audit: type=1400 audit(1752438239.826:2046): avc: denied { prog_run } for pid=7380 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.777298][ T29] audit: type=1400 audit(1752438239.876:2047): avc: denied { read write } for pid=7381 comm="syz.1.1689" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.857058][ T7395] loop3: detected capacity change from 0 to 1024 [ 65.880972][ T7395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.904512][ T7405] pim6reg: left allmulticast mode [ 65.914683][ T36] Process accounting resumed [ 65.915283][ T7405] bridge0: left allmulticast mode [ 65.968366][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.094485][ T7433] loop4: detected capacity change from 0 to 512 [ 66.119793][ T7433] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.138309][ T7433] EXT4-fs (loop4): 1 truncate cleaned up [ 66.150822][ T7440] loop3: detected capacity change from 0 to 128 [ 66.156190][ T7433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.288370][ T2298] bio_check_eod: 110 callbacks suppressed [ 66.288382][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.288382][ T2298] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 66.311596][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.311596][ T2298] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 66.333699][ T3360] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.335815][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.335815][ T2298] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 66.341255][ T3360] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.341289][ T3360] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.363660][ T3360] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 66.424198][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.424198][ T2298] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 66.441310][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.442847][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.442847][ T2298] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 66.464013][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.464013][ T2298] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 66.481548][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.481548][ T2298] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 66.499456][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.499456][ T2298] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 66.537255][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.537255][ T2298] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 66.564623][ T2298] kworker/u8:7: attempt to access beyond end of device [ 66.564623][ T2298] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 66.646547][ T7486] pim6reg: left allmulticast mode [ 66.651930][ T7486] bridge0: left allmulticast mode [ 66.988489][ T7522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.204121][ T7550] __nla_validate_parse: 22 callbacks suppressed [ 67.204136][ T7550] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1769'. [ 67.249938][ T7556] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1772'. [ 67.377843][ T7569] loop3: detected capacity change from 0 to 1024 [ 67.396541][ T7569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.426581][ T3360] Process accounting resumed [ 67.468576][ T7575] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1779'. [ 67.520456][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.549920][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 67.628373][ T7588] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1785'. [ 67.719807][ T7594] SELinux: Context áth is not valid (left unmapped). [ 67.734391][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.741900][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.749329][ T10] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 67.776042][ T10] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 67.842692][ T3380] Process accounting resumed [ 67.845168][ T7609] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1795'. [ 67.867260][ T7610] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1794'. [ 67.892549][ T7612] hub 9-0:1.0: USB hub found [ 67.900972][ T7612] hub 9-0:1.0: 8 ports detected [ 67.965435][ T7626] SELinux: Context âth is not valid (left unmapped). [ 68.040270][ T7632] hub 9-0:1.0: USB hub found [ 68.046706][ T7632] hub 9-0:1.0: 8 ports detected [ 68.124025][ T7650] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1812'. [ 68.169590][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.196353][ T7661] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 68.379771][ T7682] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 68.388494][ T7682] SELinux: failed to load policy [ 68.428686][ T7684] hub 9-0:1.0: USB hub found [ 68.437429][ T7684] hub 9-0:1.0: 8 ports detected [ 68.508714][ T7706] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1838'. [ 68.536787][ T7710] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 68.545633][ T7710] SELinux: failed to load policy [ 68.621835][ T7722] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1854'. [ 68.684056][ T7734] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1862'. [ 68.712886][ T7739] loop4: detected capacity change from 0 to 1024 [ 68.719602][ T7739] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 69.493804][ T7807] loop3: detected capacity change from 0 to 1024 [ 69.532802][ T7807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.581824][ T3400] Process accounting resumed [ 69.666728][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.773086][ T7849] loop4: detected capacity change from 0 to 512 [ 69.792580][ T7849] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.833790][ T7849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 69.849598][ T7849] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.878745][ T7849] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1901: bg 0: block 361: padding at end of block bitmap is not set [ 69.940857][ T7862] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 69.989981][ T7849] EXT4-fs (loop4): Remounting filesystem read-only [ 69.999397][ T7849] EXT4-fs (loop4): 1 truncate cleaned up [ 70.005495][ T7849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 70.067993][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 70.090530][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 70.116733][ T3400] Process accounting resumed [ 70.208868][ T7883] netem: change failed [ 70.249295][ T7889] netlink: 'syz.4.1917': attribute type 13 has an invalid length. [ 70.298949][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.306202][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.358031][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.369177][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.398766][ T7889] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.407865][ T7889] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.416809][ T7889] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.425788][ T7889] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.598834][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 70.598848][ T29] audit: type=1400 audit(1752438244.816:2430): avc: denied { audit_write } for pid=7927 comm="syz.0.1935" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.646783][ T29] audit: type=1107 audit(1752438244.816:2431): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 70.660262][ T29] audit: type=1400 audit(1752438244.866:2432): avc: denied { ioctl } for pid=7934 comm="syz.2.1939" path="socket:[18354]" dev="sockfs" ino=18354 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.723012][ T29] audit: type=1326 audit(1752438244.946:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 70.747061][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 70.758225][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 70.758552][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 70.772747][ T29] audit: type=1326 audit(1752438244.996:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 70.802693][ T29] audit: type=1326 audit(1752438244.996:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 70.826085][ T29] audit: type=1326 audit(1752438244.996:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 70.849458][ T29] audit: type=1326 audit(1752438244.996:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 70.872915][ T29] audit: type=1326 audit(1752438244.996:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 70.896305][ T29] audit: type=1326 audit(1752438244.996:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29aabe929 code=0x7ffc0000 [ 70.929029][ T3413] Process accounting resumed [ 71.195883][ T3413] Process accounting resumed [ 71.237972][ T8003] netem: change failed [ 71.320104][ T36] Process accounting resumed [ 71.336432][ T8019] netlink: 'syz.2.1976': attribute type 13 has an invalid length. [ 71.414575][ T8019] bridge0: port 3(team0) entered disabled state [ 71.421018][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.428271][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.498877][ T8019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.509252][ T8019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.538477][ T8019] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.547467][ T8019] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.556372][ T8019] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.565450][ T8019] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.582901][ T8038] netem: change failed [ 71.647278][ T8053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.715065][ T3380] Process accounting resumed [ 71.747038][ T8070] netlink: 'syz.1.2002': attribute type 13 has an invalid length. [ 71.865005][ T8070] bridge0: port 3(team0) entered disabled state [ 71.871473][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.878687][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.032034][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.052770][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.137347][ T8070] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.146458][ T8070] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.155444][ T8070] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.164370][ T8070] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.283997][ T8130] tipc: Started in network mode [ 72.288909][ T8130] tipc: Node identity ac14140f, cluster identity 4711 [ 72.296430][ T8130] tipc: New replicast peer: 255.255.255.255 [ 72.302618][ T8130] tipc: Enabled bearer , priority 10 [ 72.439538][ T8154] __nla_validate_parse: 16 callbacks suppressed [ 72.439553][ T8154] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2033'. [ 72.469321][ T8155] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8155 comm=syz.4.2030 [ 72.545878][ T8170] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 72.816543][ T8191] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 73.289911][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.320747][ T8219] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 73.320938][ T8110] Process accounting resumed [ 73.328576][ T3360] tipc: Node number set to 2886997007 [ 73.527050][ T8241] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2073'. [ 73.549605][ T8245] tipc: Started in network mode [ 73.554522][ T8245] tipc: Node identity ac14140f, cluster identity 4711 [ 73.562166][ T8245] tipc: New replicast peer: 255.255.255.255 [ 73.568399][ T8245] tipc: Enabled bearer , priority 10 [ 73.596039][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.599548][ T8249] pim6reg: entered allmulticast mode [ 73.603483][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.610706][ T8249] pim6reg: left allmulticast mode [ 73.616109][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.628525][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.635941][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.643374][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.650825][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.658187][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.665649][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.673145][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.680558][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.687916][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.695324][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.702767][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.710319][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.717773][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.725211][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.732581][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.739984][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.747414][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.754840][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.762210][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.769690][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.777081][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.784534][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.791905][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.799293][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.806658][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.814184][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.821599][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.829004][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.836379][ T8110] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.846313][ T8110] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 73.953552][ T8269] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 74.003885][ T36] Process accounting resumed [ 74.081357][ T8283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2092'. [ 74.264009][ T8110] Process accounting resumed [ 74.399871][ T8321] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 74.416433][ T8324] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2111'. [ 74.573520][ T8336] loop4: detected capacity change from 0 to 1024 [ 74.591098][ T8336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.610959][ T8110] Process accounting resumed [ 74.651756][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.689046][ T36] tipc: Node number set to 2886997007 [ 74.700433][ T8348] loop3: detected capacity change from 0 to 128 [ 74.708293][ T8348] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.724048][ T8348] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.936290][ T8372] serio: Serial port ptm0 [ 75.104434][ T8381] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 75.631245][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 75.631259][ T29] audit: type=1400 audit(1752438249.856:2934): avc: denied { allowed } for pid=8391 comm="syz.2.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 75.658495][ T29] audit: type=1400 audit(1752438249.876:2935): avc: denied { create } for pid=8397 comm="syz.1.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 75.680096][ T29] audit: type=1400 audit(1752438249.876:2936): avc: denied { write } for pid=8391 comm="syz.2.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 75.700791][ T29] audit: type=1400 audit(1752438249.886:2937): avc: denied { name_bind } for pid=8391 comm="syz.2.2139" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 75.722837][ T29] audit: type=1400 audit(1752438249.886:2938): avc: denied { allowed } for pid=8397 comm="syz.1.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 75.742115][ T29] audit: type=1400 audit(1752438249.886:2939): avc: denied { map_create } for pid=8397 comm="syz.1.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.761736][ T29] audit: type=1400 audit(1752438249.886:2940): avc: denied { create } for pid=8397 comm="syz.1.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 75.782427][ T29] audit: type=1400 audit(1752438249.886:2941): avc: denied { read } for pid=8397 comm="syz.1.2141" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 75.806166][ T29] audit: type=1400 audit(1752438249.886:2942): avc: denied { open } for pid=8397 comm="syz.1.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 75.825416][ T29] audit: type=1400 audit(1752438249.886:2943): avc: denied { create } for pid=8397 comm="syz.1.2141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 76.489671][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 78.344587][ T8573] netem: change failed [ 78.487001][ T8591] serio: Serial port ptm0 [ 78.713810][ T8621] SELinux: syz.3.2232 (8621) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 78.884760][ T8641] serio: Serial port ptm0 [ 79.059557][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.081820][ T8659] team0: Device is already in use. [ 79.272446][ T8679] SELinux: syz.2.2263 (8679) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 79.373186][ T8688] serio: Serial port ptm0 [ 79.691004][ T8722] serio: Serial port ptm0 [ 79.996932][ T8775] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 80.005598][ T8775] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 80.152208][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'. [ 80.517623][ T3360] Process accounting resumed [ 80.575768][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2344'. [ 80.587050][ T8854] ALSA: seq fatal error: cannot create timer (-19) [ 80.644889][ T29] kauditd_printk_skb: 1726 callbacks suppressed [ 80.644906][ T29] audit: type=1400 audit(1752438254.866:4670): avc: denied { map_create } for pid=8859 comm="syz.0.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.674164][ T29] audit: type=1400 audit(1752438254.896:4671): avc: denied { prog_load } for pid=8859 comm="syz.0.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.693334][ T29] audit: type=1400 audit(1752438254.896:4672): avc: denied { prog_load } for pid=8859 comm="syz.0.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.714294][ T29] audit: type=1400 audit(1752438254.896:4673): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.751725][ T29] audit: type=1400 audit(1752438254.976:4674): avc: denied { prog_load } for pid=8861 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.772927][ T29] audit: type=1400 audit(1752438254.976:4675): avc: denied { map_create } for pid=8861 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.792114][ T29] audit: type=1400 audit(1752438254.976:4676): avc: denied { prog_load } for pid=8861 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.811879][ T29] audit: type=1400 audit(1752438254.976:4677): avc: denied { prog_load } for pid=8861 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.830939][ T29] audit: type=1400 audit(1752438254.976:4678): avc: denied { map_create } for pid=8861 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.867228][ T29] audit: type=1400 audit(1752438255.036:4679): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.938615][ T3391] Process accounting resumed [ 81.085885][ T3360] Process accounting resumed [ 81.261886][ T3360] Process accounting resumed [ 81.390454][ T8948] netem: change failed [ 81.425573][ T8110] Process accounting resumed [ 81.529308][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.234336][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 82.245161][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 82.261865][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 82.280056][ T3391] Process accounting resumed [ 82.303344][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 82.597160][ T9073] netlink: 'syz.4.2447': attribute type 13 has an invalid length. [ 82.737463][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'. [ 82.751949][ T9083] bridge0: port 4(macvlan2) entered blocking state [ 82.758637][ T9083] bridge0: port 4(macvlan2) entered disabled state [ 82.766539][ T9083] macvlan2: entered allmulticast mode [ 82.774650][ T9083] macvlan2: left allmulticast mode [ 83.022023][ T3391] Process accounting resumed [ 83.124387][ T9120] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 83.911811][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 83.982415][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 84.000032][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 84.066601][ T9242] netem: change failed [ 84.809440][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 85.659607][ T29] kauditd_printk_skb: 1625 callbacks suppressed [ 85.659621][ T29] audit: type=1400 audit(1752438259.886:6305): avc: denied { read write } for pid=9421 comm="syz.4.2609" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.697488][ T29] audit: type=1400 audit(1752438259.886:6306): avc: denied { prog_load } for pid=9421 comm="syz.4.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.716806][ T29] audit: type=1400 audit(1752438259.916:6307): avc: denied { create } for pid=9424 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 85.716828][ T29] audit: type=1400 audit(1752438259.916:6308): avc: denied { allowed } for pid=9424 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 85.716845][ T29] audit: type=1400 audit(1752438259.916:6309): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.717953][ T29] audit: type=1400 audit(1752438259.916:6310): avc: denied { create } for pid=9422 comm="syz.3.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 85.717974][ T29] audit: type=1400 audit(1752438259.916:6311): avc: denied { map_create } for pid=9429 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.717993][ T29] audit: type=1400 audit(1752438259.916:6312): avc: denied { prog_load } for pid=9429 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.718055][ T29] audit: type=1400 audit(1752438259.916:6313): avc: denied { prog_load } for pid=9429 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.718077][ T29] audit: type=1400 audit(1752438259.916:6314): avc: denied { map_create } for pid=9427 comm="syz.2.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.163855][ T9479] netlink: 'syz.3.2634': attribute type 3 has an invalid length. [ 86.350372][ T8110] Process accounting resumed [ 86.621268][ T9548] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.632983][ T9548] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 86.744668][ T9567] SELinux: syz.4.2675 (9567) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 87.323133][ T9623] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2702'. [ 87.370188][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.409965][ T9633] netem: change failed [ 89.860295][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.019267][ T9763] Falling back ldisc for ttyS3. [ 90.569628][ T8110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.604687][ T9851] xt_hashlimit: max too large, truncated to 1048576 [ 90.655497][ T9855] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2810'. [ 90.678164][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 90.678178][ T29] audit: type=1400 audit(1752438264.896:7180): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.738249][ T29] audit: type=1400 audit(1752438264.946:7181): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.763220][ T29] audit: type=1400 audit(1752438264.946:7182): avc: denied { prog_load } for pid=9856 comm="syz.3.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.782452][ T29] audit: type=1326 audit(1752438264.946:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 90.806763][ T29] audit: type=1326 audit(1752438264.946:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 90.830442][ T29] audit: type=1326 audit(1752438264.946:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 90.854618][ T29] audit: type=1326 audit(1752438264.946:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 90.878788][ T29] audit: type=1326 audit(1752438264.946:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.3.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c799e929 code=0x7ffc0000 [ 90.917487][ T29] audit: type=1400 audit(1752438265.016:7188): avc: denied { map_create } for pid=9858 comm="syz.4.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.937439][ T29] audit: type=1400 audit(1752438265.016:7189): avc: denied { prog_load } for pid=9858 comm="syz.4.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.353107][ T9913] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.228213][T10025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.389467][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 92.398662][T10048] netem: change failed [ 92.439804][T10054] xt_hashlimit: max too large, truncated to 1048576 [ 92.768470][T10106] serio: Serial port ptm0 [ 92.861522][T10128] netlink: 'syz.3.2939': attribute type 10 has an invalid length. [ 92.870016][T10128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2939'. [ 92.890672][T10128] dummy0: entered promiscuous mode [ 92.896826][T10128] bridge0: port 3(dummy0) entered blocking state [ 92.903626][T10128] bridge0: port 3(dummy0) entered disabled state [ 92.910400][T10128] dummy0: entered allmulticast mode [ 92.916371][T10128] bridge0: port 3(dummy0) entered blocking state [ 92.922967][T10128] bridge0: port 3(dummy0) entered forwarding state [ 93.126513][T10178] mmap: syz.0.2963 (10178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.139358][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.146583][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2965'. [ 93.619945][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3009'. [ 93.738267][T10289] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 93.744804][T10289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.752926][T10289] vhci_hcd vhci_hcd.0: Device attached [ 93.761302][T10290] vhci_hcd: connection closed [ 93.761416][ T31] vhci_hcd: stop threads [ 93.770491][ T31] vhci_hcd: release socket [ 93.775008][ T31] vhci_hcd: disconnect device [ 94.224874][T10316] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3028'. [ 94.432063][T10358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3048'. [ 94.813085][T10412] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 95.352241][T10478] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 95.679351][ T29] kauditd_printk_skb: 1444 callbacks suppressed [ 95.679366][ T29] audit: type=1400 audit(1752438269.906:8634): avc: denied { map_create } for pid=10541 comm="syz.3.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.707117][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.732399][ T29] audit: type=1400 audit(1752438269.916:8635): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.756665][ T29] audit: type=1400 audit(1752438269.936:8636): avc: denied { prog_load } for pid=10541 comm="syz.3.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.776515][ T29] audit: type=1400 audit(1752438269.936:8637): avc: denied { create } for pid=10541 comm="syz.3.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 95.796359][ T29] audit: type=1400 audit(1752438269.946:8638): avc: denied { create } for pid=10543 comm="syz.4.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 95.817769][ T29] audit: type=1400 audit(1752438269.946:8639): avc: denied { create } for pid=10543 comm="syz.4.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.838306][ T29] audit: type=1400 audit(1752438269.946:8640): avc: denied { create } for pid=10543 comm="syz.4.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.859480][ T29] audit: type=1400 audit(1752438269.946:8641): avc: denied { read } for pid=10543 comm="syz.4.3135" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 95.880886][ T29] audit: type=1400 audit(1752438269.946:8642): avc: denied { create } for pid=10543 comm="syz.4.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.902078][ T29] audit: type=1400 audit(1752438269.946:8643): avc: denied { open } for pid=10543 comm="syz.4.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 95.972110][T10559] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 96.147030][T10596] xt_hashlimit: max too large, truncated to 1048576 [ 96.205975][T10605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10605 comm=syz.2.3164 [ 96.647248][T10694] netlink: 'syz.0.3207': attribute type 21 has an invalid length. [ 96.718839][T10705] SELinux: syz.0.3213 (10705) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 96.964774][T10752] Falling back ldisc for ttyS3. [ 97.104055][T10785] SELinux: syz.0.3253 (10785) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 97.182043][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3261'. [ 97.191717][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3261'. [ 97.399253][T10846] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3282'. [ 97.806151][T10904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3310'. [ 97.886033][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3318'. [ 98.899945][ T1463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 100.169222][ T3413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 100.535197][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 100.697645][ T29] kauditd_printk_skb: 1554 callbacks suppressed [ 100.697660][ T29] audit: type=1400 audit(1752438274.916:10198): avc: denied { map_create } for pid=11317 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.729879][ T29] audit: type=1400 audit(1752438274.946:10199): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.760377][ T29] audit: type=1400 audit(1752438274.956:10200): avc: denied { prog_load } for pid=11317 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.780235][ T29] audit: type=1400 audit(1752438274.956:10201): avc: denied { prog_load } for pid=11317 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.799587][ T29] audit: type=1400 audit(1752438274.976:10202): avc: denied { map_create } for pid=11320 comm="syz.3.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.819682][ T29] audit: type=1400 audit(1752438274.976:10203): avc: denied { prog_load } for pid=11320 comm="syz.3.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.839097][ T29] audit: type=1400 audit(1752438274.976:10204): avc: denied { create } for pid=11320 comm="syz.3.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 100.860398][ T29] audit: type=1400 audit(1752438274.976:10205): avc: denied { create } for pid=11320 comm="syz.3.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 100.881254][ T29] audit: type=1400 audit(1752438274.976:10206): avc: denied { read write } for pid=11311 comm="syz.2.3506" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 100.906007][ T29] audit: type=1400 audit(1752438274.976:10207): avc: denied { map_create } for pid=11311 comm="syz.2.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.383429][T11429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.446936][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3566'. [ 101.455898][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3566'. [ 101.465211][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.469946][T11438] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.485163][T11438] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.493952][T11438] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.502754][T11438] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.663865][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3585'. [ 101.672989][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3585'. [ 101.777516][T11496] bridge: RTM_NEWNEIGH with invalid ether address [ 103.227753][T11690] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 104.009267][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.052269][T11827] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3753'. [ 104.073259][T11821] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3753'. [ 104.927599][T11913] SELinux: syz.1.3795 (11913) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 105.343760][T11953] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 105.560559][T11990] netlink: 'syz.2.3831': attribute type 21 has an invalid length. [ 105.568399][T11990] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3831'. [ 105.702865][ T29] kauditd_printk_skb: 1176 callbacks suppressed [ 105.702880][ T29] audit: type=1400 audit(1752438279.926:11384): avc: denied { prog_load } for pid=12019 comm="syz.4.3845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.733263][ T29] audit: type=1400 audit(1752438279.926:11385): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.758249][ T29] audit: type=1400 audit(1752438279.956:11386): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.786588][ T29] audit: type=1400 audit(1752438279.956:11387): avc: denied { create } for pid=12021 comm="syz.4.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 105.806287][ T29] audit: type=1400 audit(1752438279.956:11388): avc: denied { map_create } for pid=12021 comm="syz.4.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.826329][ T29] audit: type=1400 audit(1752438279.956:11389): avc: denied { prog_load } for pid=12021 comm="syz.4.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.845703][ T29] audit: type=1400 audit(1752438279.956:11390): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.870603][ T29] audit: type=1400 audit(1752438279.986:11391): avc: denied { prog_load } for pid=12023 comm="syz.3.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.890176][ T29] audit: type=1400 audit(1752438279.986:11392): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.915130][ T29] audit: type=1400 audit(1752438279.986:11393): avc: denied { create } for pid=12025 comm="syz.2.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 105.942295][T12030] binfmt_misc: register: failed to install interpreter file ./file2 [ 106.571318][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.140438][T12292] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 107.246033][T12318] netlink: 'syz.0.3990': attribute type 39 has an invalid length. [ 107.705128][T12409] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4034'. [ 107.714748][T12409] netem: unknown loss type 0 [ 107.719375][T12409] netem: change failed [ 108.076655][T12446] IPv6: Can't replace route, no match found [ 108.316274][T12491] IPv6: Can't replace route, no match found [ 108.586542][T12530] ALSA: seq fatal error: cannot create timer (-22) [ 108.595280][T12532] xt_hashlimit: max too large, truncated to 1048576 [ 108.604819][T12536] netlink: 'syz.3.4094': attribute type 6 has an invalid length. [ 108.796027][T12563] xt_hashlimit: max too large, truncated to 1048576 [ 108.831790][T12565] ALSA: seq fatal error: cannot create timer (-22) [ 108.944891][T12582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12582 comm=syz.1.4116 [ 108.960469][T12584] xt_hashlimit: max too large, truncated to 1048576 [ 109.049281][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.116597][T12613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4131'. [ 109.126230][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 109.553667][T12673] SELinux: GPL (12673) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 109.652687][T12689] ALSA: seq fatal error: cannot create timer (-22) [ 110.710780][ T29] kauditd_printk_skb: 1579 callbacks suppressed [ 110.710794][ T29] audit: type=1400 audit(1752438284.936:12973): avc: denied { map_create } for pid=12810 comm="syz.3.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.746101][ T29] audit: type=1400 audit(1752438284.966:12974): avc: denied { map_create } for pid=12810 comm="syz.3.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.765603][ T29] audit: type=1400 audit(1752438284.966:12975): avc: denied { create } for pid=12810 comm="syz.3.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 110.786992][ T29] audit: type=1400 audit(1752438284.966:12976): avc: denied { map_create } for pid=12812 comm="syz.2.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.829222][ T29] audit: type=1400 audit(1752438284.966:12977): avc: denied { prog_load } for pid=12812 comm="syz.2.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.848555][ T29] audit: type=1400 audit(1752438284.966:12978): avc: denied { prog_load } for pid=12812 comm="syz.2.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.868441][ T29] audit: type=1400 audit(1752438284.986:12979): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.893536][ T29] audit: type=1400 audit(1752438285.016:12980): avc: denied { read write } for pid=12817 comm="syz.3.4232" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.917745][ T29] audit: type=1400 audit(1752438285.026:12981): avc: denied { prog_load } for pid=12817 comm="syz.3.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.937568][ T29] audit: type=1400 audit(1752438285.036:12982): avc: denied { read } for pid=12820 comm="syz.2.4231" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 111.268289][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4242'. [ 111.536174][T12880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.689344][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.807959][T13037] syzkaller0: entered promiscuous mode [ 112.813846][T13037] syzkaller0: entered allmulticast mode [ 113.717030][T13086] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.746958][T13088] netlink: 'syz.3.4359': attribute type 21 has an invalid length. [ 113.782057][T13088] netlink: 'syz.3.4359': attribute type 1 has an invalid length. [ 113.789928][T13088] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4359'. [ 114.169760][T13153] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.889389][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.173615][T13304] serio: Serial port ptm0 [ 115.719203][ T29] kauditd_printk_skb: 991 callbacks suppressed [ 115.719218][ T29] audit: type=1400 audit(1752438289.946:13974): avc: denied { map_create } for pid=13392 comm="syz.0.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.789088][ T29] audit: type=1400 audit(1752438289.976:13975): avc: denied { prog_load } for pid=13392 comm="syz.0.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.808937][ T29] audit: type=1400 audit(1752438289.976:13976): avc: denied { read write } for pid=13392 comm="syz.0.4501" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 115.834117][ T29] audit: type=1400 audit(1752438289.996:13977): avc: denied { map_create } for pid=13394 comm="syz.2.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.853495][ T29] audit: type=1400 audit(1752438289.996:13978): avc: denied { prog_load } for pid=13394 comm="syz.2.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.873310][ T29] audit: type=1400 audit(1752438289.996:13979): avc: denied { read write } for pid=13394 comm="syz.2.4503" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 115.897463][ T29] audit: type=1400 audit(1752438290.076:13980): avc: denied { prog_load } for pid=13398 comm="syz.2.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.917303][ T29] audit: type=1400 audit(1752438290.076:13981): avc: denied { prog_load } for pid=13398 comm="syz.2.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.936547][ T29] audit: type=1400 audit(1752438290.076:13982): avc: denied { validate_trans } for pid=13398 comm="syz.2.4505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 115.957745][ T29] audit: type=1400 audit(1752438290.116:13983): avc: denied { create } for pid=13396 comm="syz.0.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 116.680266][T13500] Falling back ldisc for ptm0. [ 116.809816][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 116.970392][T13533] wireguard0: entered promiscuous mode [ 116.975980][T13533] wireguard0: entered allmulticast mode [ 117.821031][T13637] capability: warning: `syz.0.4600' uses 32-bit capabilities (legacy support in use) [ 118.585430][T13690] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 118.981769][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4635'. [ 119.064331][T13728] syzkaller0: refused to change device tx_queue_len [ 119.292906][T13752] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 119.613972][T13816] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 119.742911][T13846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4688'. [ 119.975194][T13896] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4711'. [ 120.010125][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.024926][T13904] IPv6: Can't replace route, no match found [ 120.085654][T13919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4722'. [ 120.128325][T13929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4726'. [ 120.233317][T13958] veth1_macvtap: left promiscuous mode [ 120.238857][T13958] macsec0: entered promiscuous mode [ 120.340823][T13976] serio: Serial port ptm0 [ 120.465043][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4750'. [ 120.727881][T14039] pim6reg1: entered promiscuous mode [ 120.733303][T14039] pim6reg1: entered allmulticast mode [ 120.737655][ T29] kauditd_printk_skb: 1023 callbacks suppressed [ 120.737686][ T29] audit: type=1400 audit(1752438294.956:15007): avc: denied { map_create } for pid=14044 comm="syz.2.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.774469][ T29] audit: type=1400 audit(1752438294.956:15008): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.798816][ T29] audit: type=1400 audit(1752438294.976:15009): avc: denied { prog_load } for pid=14044 comm="syz.2.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.818736][ T29] audit: type=1400 audit(1752438294.976:15010): avc: denied { prog_load } for pid=14044 comm="syz.2.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.838002][ T29] audit: type=1400 audit(1752438294.996:15011): avc: denied { map_create } for pid=14046 comm="syz.3.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.857884][ T29] audit: type=1400 audit(1752438294.996:15012): avc: denied { prog_load } for pid=14046 comm="syz.3.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.877226][ T29] audit: type=1400 audit(1752438294.996:15013): avc: denied { prog_load } for pid=14046 comm="syz.3.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.896972][ T29] audit: type=1400 audit(1752438294.996:15014): avc: denied { map_create } for pid=14046 comm="syz.3.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.901495][T14054] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4776'. [ 120.916324][ T29] audit: type=1400 audit(1752438294.996:15015): avc: denied { read write } for pid=14046 comm="syz.3.4769" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 120.916374][ T29] audit: type=1400 audit(1752438294.996:15016): avc: denied { read } for pid=14046 comm="syz.3.4769" dev="nsfs" ino=4026532460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 120.980579][T14051] dummy0: left allmulticast mode [ 120.985625][T14051] bridge0: port 3(dummy0) entered disabled state [ 120.996110][T14051] bridge_slave_0: left allmulticast mode [ 121.001830][T14051] bridge_slave_0: left promiscuous mode [ 121.007531][T14051] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.023320][T14051] bridge_slave_1: left allmulticast mode [ 121.029034][T14051] bridge_slave_1: left promiscuous mode [ 121.034729][T14051] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.044569][T14051] bond0: (slave bond_slave_0): Releasing backup interface [ 121.060471][T14051] bond0: (slave bond_slave_1): Releasing backup interface [ 121.089857][T14051] team0: Port device team_slave_0 removed [ 121.103075][T14051] team0: Port device team_slave_1 removed [ 121.113894][T14051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.121416][T14051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.129614][T14051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.137033][T14051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.152910][T14054] 0ªX¹¦À: renamed from caif0 [ 121.159694][T14054] 0ªX¹¦À: entered allmulticast mode [ 121.164917][T14054] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 121.378595][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4795'. [ 121.712676][T14164] ALSA: seq fatal error: cannot create timer (-22) [ 122.569277][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.773211][T14333] Falling back ldisc for ptm0. [ 123.065967][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4884'. [ 123.192544][T14401] netlink: 'syz.4.4901': attribute type 5 has an invalid length. [ 123.221890][T14403] Falling back ldisc for ptm0. [ 123.305721][T14410] ================================================================== [ 123.313836][T14410] BUG: KCSAN: data-race in __anon_vma_prepare / handle_mm_fault [ 123.321484][T14410] [ 123.323807][T14410] write to 0xffff8881200b0880 of 8 bytes by task 14418 on cpu 1: [ 123.331532][T14410] __anon_vma_prepare+0x172/0x2f0 [ 123.336567][T14410] handle_mm_fault+0x1e47/0x2be0 [ 123.341500][T14410] __get_user_pages+0x1036/0x1fb0 [ 123.346522][T14410] __mm_populate+0x243/0x3a0 [ 123.351276][T14410] vm_mmap_pgoff+0x232/0x2e0 [ 123.355861][T14410] ksys_mmap_pgoff+0x268/0x310 [ 123.360627][T14410] x64_sys_call+0x1602/0x2fb0 [ 123.365300][T14410] do_syscall_64+0xd2/0x200 [ 123.369792][T14410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.375676][T14410] [ 123.377990][T14410] read to 0xffff8881200b0880 of 8 bytes by task 14410 on cpu 0: [ 123.385606][T14410] handle_mm_fault+0xbd0/0x2be0 [ 123.390451][T14410] __get_user_pages+0x1036/0x1fb0 [ 123.395467][T14410] faultin_page_range+0x282/0x5b0 [ 123.400480][T14410] madvise_do_behavior+0x120/0x1f20 [ 123.405672][T14410] do_madvise+0x103/0x190 [ 123.409996][T14410] __x64_sys_madvise+0x64/0x80 [ 123.414753][T14410] x64_sys_call+0x2455/0x2fb0 [ 123.419423][T14410] do_syscall_64+0xd2/0x200 [ 123.423915][T14410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.429799][T14410] [ 123.432108][T14410] value changed: 0x0000000000000000 -> 0xffff8881022761a0 [ 123.439203][T14410] [ 123.441520][T14410] Reported by Kernel Concurrency Sanitizer on: [ 123.447672][T14410] CPU: 0 UID: 0 PID: 14410 Comm: syz.4.4895 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 123.460161][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.470209][T14410] ================================================================== [ 125.769958][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.329457][ T2298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.529266][ T1460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration