last executing test programs: 1m24.113516478s ago: executing program 4 (id=519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (fail_nth: 5) 1m24.063595823s ago: executing program 4 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, r2, 0xfc5, 0x70bd29, 0x4000, {{0x11}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = memfd_secret(0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) futimesat(r4, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000fdf5", @ANYBLOB="bca6f07cd6bf803516ef86b2d3d2aa026956d530a50fc899787b58eedaa3bc38ed14a27fa9906c5a096e37295efe50497e2f2649cfe6e0febb574f", @ANYRES8=r10, @ANYRES32=r12, @ANYBLOB="0c00580026000000000000000c00580015000000000000000c0058003c000000000000000c0058007e000000000000000c00580072000000000000000c00580057000000000000000c0058001400000000000000", @ANYRES16=r11, @ANYRES32=r9], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004050) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x49000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf252500000008000300", @ANYRES32=r12, @ANYBLOB="0c0099000104000059000000100034002e407b6d88df8c651740871c08003700010000000500080000000000110007008e6e0017fb6b24734c7a62dadac6350000000800090005ac0f000a000600ffffffffffff00000a00060050505050505000000a0006006c3a5e094d8a00007b478a1cf4cc72293ede4873bb17fba334470bfe1938a0abfb127cad57ac53"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x806}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x400405c) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9f9c9fd32727809502a6950000812236ac1609", @ANYRES16=r13, @ANYBLOB="200028bd7000fcdbdf2509000000080002000800000038000180060001000a000000060005004e210000060005004e24000008000300ac1414aa14000400fe880000000000000000000000000001240001800600010002000000060005004e23000005000200090000000500020002000000"], 0x78}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='kmem_cache_free\x00', r14}, 0x18) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r15, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 1m24.016474607s ago: executing program 4 (id=524): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x62, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000700000000000019078ac1e0001ac1414aa0300907800080000450000000000000000ff2c000000000000000001443c00d10000000000000000ffffffff00000000ffffffff000000000000000000000000e000000100000000e0000001ffffffffff006c21c92eff1400000000008303000097e5c13ad346991c48395842af777f9b9da031a1b6b87bea06a513342c8dd30f32509efb637203b25ddeae571cd58b030583a136a3bb2127da8e83566d952780ccf77e332049aa074671a8cbecc47bb561dc90b98fa356a9e5fbaa3d"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x1000000000000000}, 0x18) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc96, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$TCFLSH(r1, 0x400455c8, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400009bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$P9_RLOPEN(r6, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x80, 0x4, 0x6}, 0x2}}, 0x18) 1m21.654775566s ago: executing program 4 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x1b8, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0xc8, 0x1, {{'sha1\x00'}, 0x400, "c1fc1176d858b905a1db4ff6cb8fc1f08589966e6e99a74a5f55ad725a1fe0dac791824a72fb9792a0f47d88e0dea44b765bb9c761ab943014be9e1e175df8adf35ac57e0121ada0c1320d3ef5a6b590b9ba9fff4a2475f0fa2502ec8fe225a6745191fe376e10b191eeb65be657050dddd68d5e0ea4c83ac887a61b5606d125"}}]}, 0x1b8}}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000000)='./file0/file0\x00', 0x200) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb) 1m21.384853411s ago: executing program 4 (id=564): pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, 0x0, 0x0, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (fail_nth: 1) 1m21.216341176s ago: executing program 4 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 1m21.199734958s ago: executing program 32 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 4.299274382s ago: executing program 2 (id=1793): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10010, 0xffffffffffffffff, 0x9111b000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0', 0x1, r2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r6, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5c) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRES32], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYRES32=r7, @ANYRESOCT=r1], &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)={0x80, r11, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x141}, 0x20000801) 3.734367314s ago: executing program 2 (id=1794): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f00000003c0)="ea", 0x1}], 0x1}, 0x40408d1) 3.715141466s ago: executing program 2 (id=1796): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000005933fb7b"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r5, r2, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xfffffffffffffff8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 2.847480576s ago: executing program 2 (id=1806): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r6, {0x700, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2.694076411s ago: executing program 2 (id=1808): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x62, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000700000000000019078ac1e0001ac1414aa0300907800080000450000000000000000ff2c000000000000000001443c00d10000000000000000ffffffff00000000ffffffff000000000000000000000000e000000100000000e0000001ffffffffff006c21c92eff1400000000008303000097e5c13ad346991c48395842af777f9b9da031a1b6b87bea06a513342c8dd30f32509efb637203b25ddeae571cd58b030583a136a3bb2127da8e83566d952780ccf77e332049aa074671a8cbecc47bb561dc90b98fa356a9e5fbaa3d"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x1000000000000000}, 0x18) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc96, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$TCFLSH(r1, 0x400455c8, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = inotify_init() r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r8 = inotify_add_watch(r6, &(0x7f0000000200)='./file0\x00', 0x400009bf) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x69) close(r7) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$P9_RLOPEN(r7, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x80, 0x4, 0x6}, 0x2}}, 0x18) 2.608236108s ago: executing program 0 (id=1811): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}], 0x1, 0x145) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kfree\x00', r6, 0x0, 0xfffffffffffffffb}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r7) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 2.572094972s ago: executing program 0 (id=1814): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x62, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000700000000000019078ac1e0001ac1414aa0300907800080000450000000000000000ff2c000000000000000001443c00d10000000000000000ffffffff00000000ffffffff000000000000000000000000e000000100000000e0000001ffffffffff006c21c92eff1400000000008303000097e5c13ad346991c48395842af777f9b9da031a1b6b87bea06a513342c8dd30f32509efb637203b25ddeae571cd58b030583a136a3bb2127da8e83566d952780ccf77e332049aa074671a8cbecc47bb561dc90b98fa356a9e5fbaa3d"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x1000000000000000}, 0x18) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc96, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$TCFLSH(r1, 0x400455c8, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = inotify_init() r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r8 = inotify_add_watch(r6, &(0x7f0000000200)='./file0\x00', 0x400009bf) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x69) close(r7) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$P9_RLOPEN(r7, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x80, 0x4, 0x6}, 0x2}}, 0x18) 2.091898716s ago: executing program 1 (id=1828): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) creat(&(0x7f00000000c0)='./bus\x00', 0x182) fgetxattr(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="59a7d5cba322e326c943adaa553c2916851eaafd2cc3c904eb3053db4bf1d8a663c679051c202ff3cbf362425e0683f03e370d9e7849330f23c2a941f7f169c350e1b9ef36fb027ee5de74e1b9d59e79d4f971295cfd4d2b676fa0dc7fafc7e583cbd69c17bf47573f890d20fb4102b40e9cf4faf0e1070000000000000077e4721a8ebcbd7b1cb142f25baeb737475e61f62ec0dc7adf7e4587f837365f693c69ed2ed7a3000f471e8a"], 0x0, 0x0) 1.656842716s ago: executing program 5 (id=1834): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/269], 0x2, 0x6b1, &(0x7f0000001100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.50092143s ago: executing program 5 (id=1835): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) utimes(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.428144207s ago: executing program 5 (id=1836): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001811000099a3a9ed762a4a35c1eb5e4b778cf7b1357f1496819981a7cad7b85388e525908287c8d8d3518e56f823c0fb4bf6cedaf29ce8988a9a340b418e093d1899259367bbbbb1ae8d6d2271b996a1ceb86544e3720aafcb0167a57c2e1b387c6c7910d8d02f5644e17bab77381fdeaa6a170e", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000180)=0x4) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00130000080000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000000000000ff7f0000ff0f000040040400", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000020000d52f00007a7cde7216ef03c81200000000"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x4, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010026bd7000ffffffff0a14204003000006fffffff014000100ff020000000000000000000000000001140002"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r10, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r9, &(0x7f0000000100)='syz0\x00', 0x1ff) 1.240905094s ago: executing program 5 (id=1839): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000080"], 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 1.087654719s ago: executing program 1 (id=1840): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) read(r1, &(0x7f00000001c0)=""/155, 0x9b) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8bd4997069855d07b2c842639453caacaf769dcc9b0dbe08742a0500"], 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x7, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r3 = socket$netlink(0x10, 0x3, 0x0) dup(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.067961281s ago: executing program 1 (id=1841): utime(&(0x7f00000003c0)='.\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x21081e, &(0x7f0000000b80)={[{@resgid}, {@nogrpid}, {@grpquota}, {@noquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0xc9c50, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x104b0d, 0x6, 0x0, 0x0, 0x8, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES8=r1, @ANYBLOB="400d00000000000030001280"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000000)="85", 0x76200}], 0x1000000000000084, 0x7bfc, 0x7f, 0x3) 982.719828ms ago: executing program 1 (id=1842): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r6, {0x700, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 898.930377ms ago: executing program 1 (id=1843): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f00000003c0)="ea", 0x1}], 0x1}, 0x40408d1) 878.473318ms ago: executing program 1 (id=1844): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ipi_raise\x00', 0xffffffffffffffff, 0x0, 0x4013}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4192, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x20000, 0x0, 0x2d3}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x60100100, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 790.131496ms ago: executing program 3 (id=1847): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) utimes(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 758.236639ms ago: executing program 3 (id=1848): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000280)) socket(0x400000000010, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) 757.61016ms ago: executing program 3 (id=1849): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) acct(0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) sync() sync() set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a320000000014000580080001"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000dd", @ANYRES16=r6, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 676.625817ms ago: executing program 5 (id=1850): r0 = syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0x80082) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r4 = dup(r0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000008c0)={0xa0, 0x0, 0xf20, 0xc, 0x0, 0xb, 0x0}) 491.010354ms ago: executing program 2 (id=1851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 487.988524ms ago: executing program 0 (id=1852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 487.325754ms ago: executing program 5 (id=1853): syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 442.578328ms ago: executing program 3 (id=1854): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f00000003c0)="ea", 0x1}], 0x1}, 0x40408d1) 300.458172ms ago: executing program 0 (id=1855): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10010, 0xffffffffffffffff, 0x9111b000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r5, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5c) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYRES32], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRES32=r6, @ANYRESOCT=r1], &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r9}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)={0x80, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x141}, 0x20000801) 215.932059ms ago: executing program 3 (id=1856): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x1d1f, &(0x7f00000002c0)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00"/14], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 195.479111ms ago: executing program 3 (id=1857): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000005933fb7b"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r5, r2, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 27.786917ms ago: executing program 0 (id=1858): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) 0s ago: executing program 0 (id=1859): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000280)) socket(0x400000000010, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) kernel console output (not intermixed with test programs): : auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 49.008981][ T4090] 9pnet: Could not find request transport: 0xffffffffffffffff [ 49.011865][ T29] audit: type=1326 audit(1760385744.175:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 49.043259][ T29] audit: type=1326 audit(1760385744.235:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 49.066608][ T29] audit: type=1326 audit(1760385744.235:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 49.111640][ T4098] !yz!: rxe_newlink: already configured on team_slave_0 [ 49.430272][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.473052][ T4114] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 49.523981][ T4120] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 49.537604][ T4125] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 49.550546][ T4120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.695361][ T4145] loop2: detected capacity change from 0 to 1024 [ 49.702875][ T4145] EXT4-fs: Ignoring removed orlov option [ 49.732966][ T4145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.834831][ T4160] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 49.867860][ T4145] __nla_validate_parse: 4 callbacks suppressed [ 49.867879][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 49.895195][ T4165] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 49.912018][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.956193][ T4167] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 50.314443][ T4167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.463548][ T4184] loop3: detected capacity change from 0 to 128 [ 50.474696][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 50.604706][ T4199] FAULT_INJECTION: forcing a failure. [ 50.604706][ T4199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.617945][ T4199] CPU: 0 UID: 0 PID: 4199 Comm: syz.0.198 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 50.617984][ T4199] Tainted: [W]=WARN [ 50.617993][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.618009][ T4199] Call Trace: [ 50.618017][ T4199] [ 50.618028][ T4199] __dump_stack+0x1d/0x30 [ 50.618104][ T4199] dump_stack_lvl+0xe8/0x140 [ 50.618131][ T4199] dump_stack+0x15/0x1b [ 50.618153][ T4199] should_fail_ex+0x265/0x280 [ 50.618199][ T4199] should_fail+0xb/0x20 [ 50.618319][ T4199] should_fail_usercopy+0x1a/0x20 [ 50.618346][ T4199] _copy_from_user+0x1c/0xb0 [ 50.618456][ T4199] __sys_sendto+0x19e/0x330 [ 50.618562][ T4199] __x64_sys_sendto+0x76/0x90 [ 50.618622][ T4199] x64_sys_call+0x2d14/0x3000 [ 50.618650][ T4199] do_syscall_64+0xd2/0x200 [ 50.618682][ T4199] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.618713][ T4199] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.618741][ T4199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.618818][ T4199] RIP: 0033:0x7f61eaeceec9 [ 50.618837][ T4199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.618861][ T4199] RSP: 002b:00007f61e992f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 50.618885][ T4199] RAX: ffffffffffffffda RBX: 00007f61eb125fa0 RCX: 00007f61eaeceec9 [ 50.618902][ T4199] RDX: 000000000000ffeb RSI: 0000200000000040 RDI: 0000000000000007 [ 50.618918][ T4199] RBP: 00007f61e992f090 R08: 0000200000000340 R09: 0000000000000010 [ 50.618934][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.618950][ T4199] R13: 00007f61eb126038 R14: 00007f61eb125fa0 R15: 00007fffe50f3378 [ 50.618975][ T4199] [ 50.805013][ T4204] loop2: detected capacity change from 0 to 1024 [ 50.819741][ T4204] EXT4-fs: Ignoring removed orlov option [ 50.882137][ T4206] !yz!: rxe_newlink: already configured on team_slave_0 [ 50.883519][ T4209] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 50.905003][ T4204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.926883][ T4209] loop1: detected capacity change from 0 to 164 [ 50.946908][ T4209] Unable to read rock-ridge attributes [ 50.981225][ T4209] Unable to read rock-ridge attributes [ 51.001787][ T4209] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.022616][ T4224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 51.041926][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 51.057475][ T4227] loop4: detected capacity change from 0 to 512 [ 51.069688][ T4230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 51.090541][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.117101][ T4227] geneve2: entered promiscuous mode [ 51.122499][ T4227] geneve2: entered allmulticast mode [ 51.231009][ T4244] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 51.527209][ T4265] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 51.627146][ T4265] loop1: detected capacity change from 0 to 164 [ 51.639271][ T4265] Unable to read rock-ridge attributes [ 51.647669][ T4265] Unable to read rock-ridge attributes [ 51.654547][ T4265] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.845260][ T3637] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.884431][ T3647] Bluetooth: hci1: Frame reassembly failed (-84) [ 52.190065][ T4285] !yz!: rxe_newlink: already configured on team_slave_0 [ 52.224014][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 52.262137][ T4294] Driver unsupported XDP return value 0 on prog (id 212) dev N/A, expect packet loss! [ 52.442076][ T4307] random: crng reseeded on system resumption [ 52.495115][ T4313] tipc: Enabling of bearer rejected, failed to enable media [ 52.595410][ T4315] loop4: detected capacity change from 0 to 1024 [ 52.603081][ T4315] EXT4-fs: Ignoring removed orlov option [ 52.631142][ T4315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.698418][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.726492][ T4320] loop4: detected capacity change from 0 to 512 [ 52.734662][ T4320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.745791][ T4320] EXT4-fs (loop4): 1 truncate cleaned up [ 52.751905][ T4320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.768066][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 52.777403][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 52.796608][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.261057][ T4350] netlink: 'syz.4.246': attribute type 13 has an invalid length. [ 53.298272][ T4350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.848871][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.848914][ T3891] Bluetooth: hci0: command 0x1003 tx timeout [ 53.872510][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 53.872527][ T29] audit: type=1400 audit(1760385749.065:1733): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.903450][ T29] audit: type=1400 audit(1760385749.075:1734): avc: denied { create } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 53.923891][ T29] audit: type=1400 audit(1760385749.075:1735): avc: denied { create } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 53.944609][ T29] audit: type=1400 audit(1760385749.075:1736): avc: denied { prog_load } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.948913][ T3484] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 53.963750][ T29] audit: type=1400 audit(1760385749.075:1737): avc: denied { prog_load } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 53.969843][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 53.995205][ T29] audit: type=1400 audit(1760385749.075:1738): avc: denied { prog_load } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 54.014221][ T29] audit: type=1400 audit(1760385749.075:1739): avc: denied { allowed } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 54.033562][ T29] audit: type=1400 audit(1760385749.075:1740): avc: denied { create } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 54.052938][ T29] audit: type=1400 audit(1760385749.075:1741): avc: denied { map_create } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 54.072194][ T29] audit: type=1400 audit(1760385749.075:1742): avc: denied { map_create } for pid=4363 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 54.251750][ T4388] netlink: 'syz.4.258': attribute type 4 has an invalid length. [ 54.410527][ T4395] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 54.417134][ T4395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.424700][ T4395] vhci_hcd vhci_hcd.0: Device attached [ 54.434652][ T3639] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.442387][ T4396] vhci_hcd: connection closed [ 54.442630][ T3637] vhci_hcd: stop threads [ 54.451728][ T3637] vhci_hcd: release socket [ 54.456167][ T3637] vhci_hcd: disconnect device [ 55.288846][ T44] Bluetooth: hci2: command 0x1003 tx timeout [ 55.288849][ T3523] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 55.922055][ T3637] Bluetooth: hci1: Frame reassembly failed (-84) [ 56.488861][ T3484] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.489050][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 56.546586][ T4485] futex_wake_op: syz.3.296 tries to shift op by -1; fix this program [ 56.966605][ T4506] syz.0.301 uses obsolete (PF_INET,SOCK_PACKET) [ 57.928849][ T3484] Bluetooth: hci1: command 0x1003 tx timeout [ 57.934928][ T3523] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 58.060636][ T4562] capability: warning: `syz.4.326' uses 32-bit capabilities (legacy support in use) [ 58.276890][ T4562] netlink: 'syz.4.326': attribute type 6 has an invalid length. [ 58.439042][ T4581] loop4: detected capacity change from 0 to 1024 [ 58.446072][ T4581] EXT4-fs: Ignoring removed orlov option [ 58.474469][ T4581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.516626][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 58.538383][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.572377][ T4587] !yz!: rxe_newlink: already configured on team_slave_0 [ 58.590840][ T3658] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.610721][ T3639] Bluetooth: hci1: Frame reassembly failed (-84) [ 58.677343][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 58.780686][ T4598] loop2: detected capacity change from 0 to 512 [ 58.788770][ T4598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.800304][ T4598] EXT4-fs (loop2): 1 truncate cleaned up [ 58.806644][ T4598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.883261][ T29] kauditd_printk_skb: 17252 callbacks suppressed [ 58.883279][ T29] audit: type=1400 audit(1760385754.075:17591): avc: denied { write } for pid=4605 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.921206][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.968130][ T4613] netlink: 256 bytes leftover after parsing attributes in process `syz.2.346'. [ 58.978132][ T4612] loop3: detected capacity change from 0 to 1024 [ 58.985323][ T4612] EXT4-fs: Ignoring removed orlov option [ 59.002425][ T29] audit: type=1400 audit(1760385754.195:17592): avc: denied { search } for pid=3042 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.023967][ T29] audit: type=1400 audit(1760385754.195:17593): avc: denied { search } for pid=3042 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.025481][ T4612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.045695][ T29] audit: type=1400 audit(1760385754.195:17594): avc: denied { search } for pid=3042 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.079672][ T29] audit: type=1400 audit(1760385754.195:17595): avc: denied { read } for pid=3042 comm="dhcpcd" name="n34" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.093995][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 59.101552][ T29] audit: type=1400 audit(1760385754.195:17596): avc: denied { open } for pid=3042 comm="dhcpcd" path="/run/udev/data/n34" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.133407][ T29] audit: type=1400 audit(1760385754.195:17597): avc: denied { getattr } for pid=3042 comm="dhcpcd" path="/run/udev/data/n34" dev="tmpfs" ino=2252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.156829][ T29] audit: type=1326 audit(1760385754.195:17598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9318aeec9 code=0x0 [ 59.179726][ T29] audit: type=1326 audit(1760385754.255:17599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 59.203166][ T29] audit: type=1326 audit(1760385754.255:17600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.3.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 59.204752][ T4621] loop2: detected capacity change from 0 to 128 [ 59.241950][ T4621] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.270475][ T4621] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.303356][ T3647] Bluetooth: hci2: Frame reassembly failed (-84) [ 59.312068][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.339776][ T4626] loop3: detected capacity change from 0 to 164 [ 59.348334][ T4626] Unable to read rock-ridge attributes [ 59.355520][ T4626] Unable to read rock-ridge attributes [ 59.361902][ T4626] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 59.449309][ T4630] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.500519][ T4630] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.550740][ T4630] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.610343][ T4630] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.666616][ T3647] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.678188][ T3647] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.690153][ T3647] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.701684][ T3647] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.812562][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.366723][ T4642] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 60.391134][ T4644] loop3: detected capacity change from 0 to 164 [ 60.398389][ T4644] Unable to read rock-ridge attributes [ 60.404713][ T4644] Unable to read rock-ridge attributes [ 60.410734][ T4644] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.457816][ T3653] Bluetooth: hci3: Frame reassembly failed (-84) [ 60.649268][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.649544][ T4649] Bluetooth: hci1: command 0x1003 tx timeout [ 60.655612][ T3484] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 60.661689][ T3495] Bluetooth: hci0: command 0x1003 tx timeout [ 60.756867][ T4658] loop2: detected capacity change from 0 to 164 [ 60.766209][ T4658] Unable to read rock-ridge attributes [ 60.781327][ T4658] Unable to read rock-ridge attributes [ 60.787442][ T4658] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.926238][ T4683] !yz!: rxe_newlink: already configured on team_slave_0 [ 60.989982][ T4694] netlink: 232 bytes leftover after parsing attributes in process `syz.4.366'. [ 61.035223][ T4703] loop4: detected capacity change from 0 to 128 [ 61.141589][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 61.161521][ T4703] bio_check_eod: 83 callbacks suppressed [ 61.161535][ T4703] syz.4.367: attempt to access beyond end of device [ 61.161535][ T4703] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 61.180699][ T4703] syz.4.367: attempt to access beyond end of device [ 61.180699][ T4703] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 61.194161][ T4703] syz.4.367: attempt to access beyond end of device [ 61.194161][ T4703] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 61.207600][ T4703] syz.4.367: attempt to access beyond end of device [ 61.207600][ T4703] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 61.221142][ T4703] syz.4.367: attempt to access beyond end of device [ 61.221142][ T4703] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 61.234640][ T4703] syz.4.367: attempt to access beyond end of device [ 61.234640][ T4703] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 61.248105][ T4703] syz.4.367: attempt to access beyond end of device [ 61.248105][ T4703] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 61.261499][ T4703] syz.4.367: attempt to access beyond end of device [ 61.261499][ T4703] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 61.274998][ T4703] syz.4.367: attempt to access beyond end of device [ 61.274998][ T4703] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 61.288468][ T4703] syz.4.367: attempt to access beyond end of device [ 61.288468][ T4703] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 61.303813][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 61.337532][ T3658] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.372572][ T4716] loop4: detected capacity change from 0 to 1024 [ 61.382528][ T4716] EXT4-fs: Ignoring removed orlov option [ 61.400901][ T4716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.424808][ T4720] random: crng reseeded on system resumption [ 61.498331][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 61.524071][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.551907][ T3639] Bluetooth: hci1: Frame reassembly failed (-84) [ 61.586713][ T4725] loop1: detected capacity change from 0 to 164 [ 61.594111][ T4725] Unable to read rock-ridge attributes [ 61.601422][ T4725] Unable to read rock-ridge attributes [ 61.607205][ T4725] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 61.736874][ T4735] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 61.952419][ T4743] syzkaller0: entered promiscuous mode [ 61.957937][ T4743] syzkaller0: entered allmulticast mode [ 61.967452][ T4743] usb usb1: check_ctrlrecip: process 4743 (syz.1.381) requesting ep 01 but needs 81 [ 61.976969][ T4743] usb usb1: usbfs: process 4743 (syz.1.381) did not claim interface 0 before use [ 62.059718][ T4745] loop1: detected capacity change from 0 to 512 [ 62.254561][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 62.306450][ T315] Bluetooth: hci2: Frame reassembly failed (-84) [ 62.344077][ T4754] loop1: detected capacity change from 0 to 164 [ 62.352621][ T4754] Unable to read rock-ridge attributes [ 62.358856][ T4754] Unable to read rock-ridge attributes [ 62.364612][ T4754] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 62.463628][ T4761] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 62.488866][ T3891] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 62.488928][ T4650] Bluetooth: hci3: command 0x1003 tx timeout [ 62.501280][ T4763] loop1: detected capacity change from 0 to 1024 [ 62.509879][ T4763] EXT4-fs: Ignoring removed orlov option [ 62.535709][ T4763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.548098][ T4766] loop3: detected capacity change from 0 to 164 [ 62.555545][ T4766] Unable to read rock-ridge attributes [ 62.562379][ T4766] Unable to read rock-ridge attributes [ 62.568263][ T4766] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 62.611575][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 62.635272][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.661036][ T4771] loop1: detected capacity change from 0 to 512 [ 62.668408][ T4771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.680108][ T4771] EXT4-fs (loop1): 1 truncate cleaned up [ 62.686413][ T4771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.763734][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.796239][ T4775] IPv6: Can't replace route, no match found [ 62.860965][ T4775] SELinux: failed to load policy [ 62.907850][ T4778] loop1: detected capacity change from 0 to 1024 [ 62.914722][ T4778] EXT4-fs: Ignoring removed orlov option [ 62.930464][ T4778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.982728][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 63.005449][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.056437][ T4785] loop1: detected capacity change from 0 to 164 [ 63.068081][ T4785] Unable to read rock-ridge attributes [ 63.074947][ T4785] Unable to read rock-ridge attributes [ 63.080841][ T4785] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 63.167707][ T4789] random: crng reseeded on system resumption [ 63.181464][ T4789] loop1: detected capacity change from 0 to 164 [ 63.190567][ T4789] Unable to read rock-ridge attributes [ 63.197519][ T4789] Unable to read rock-ridge attributes [ 63.204096][ T4789] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 63.275762][ T4793] Unable to read rock-ridge attributes [ 63.281387][ T4793] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 63.368861][ T3891] Bluetooth: hci0: command 0x1003 tx timeout [ 63.368885][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.479029][ T4801] loop2: detected capacity change from 0 to 164 [ 63.489932][ T4801] Unable to read rock-ridge attributes [ 63.496745][ T4801] Unable to read rock-ridge attributes [ 63.502850][ T4801] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 63.608888][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 63.608938][ T3523] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 63.650308][ T4809] 9pnet_fd: p9_fd_create_unix (4809): problem connecting socket: ./file0: -2 [ 63.694743][ T4810] random: crng reseeded on system resumption [ 63.711336][ T4810] loop2: detected capacity change from 0 to 164 [ 63.722827][ T4810] Unable to read rock-ridge attributes [ 63.729666][ T4810] Unable to read rock-ridge attributes [ 63.735417][ T4810] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 63.798555][ T4817] Unable to read rock-ridge attributes [ 63.804396][ T4817] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 63.993648][ T4819] loop1: detected capacity change from 0 to 1024 [ 64.004532][ T4819] EXT4-fs: Ignoring removed orlov option [ 64.021557][ T4819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.035181][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 64.035199][ T29] audit: type=1326 audit(1760385759.225:18106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d02feec9 code=0x7ffc0000 [ 64.065196][ T29] audit: type=1326 audit(1760385759.255:18107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f88d02feec9 code=0x7ffc0000 [ 64.088765][ T29] audit: type=1326 audit(1760385759.255:18108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d02feec9 code=0x7ffc0000 [ 64.112910][ T29] audit: type=1326 audit(1760385759.255:18109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f88d02feec9 code=0x7ffc0000 [ 64.136553][ T29] audit: type=1326 audit(1760385759.255:18110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d02feec9 code=0x7ffc0000 [ 64.160052][ T29] audit: type=1326 audit(1760385759.255:18111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f88d02feec9 code=0x7ffc0000 [ 64.185376][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 64.202230][ T29] audit: type=1326 audit(1760385759.395:18112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d02feec9 code=0x7ffc0000 [ 64.225781][ T29] audit: type=1326 audit(1760385759.395:18113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d02feec9 code=0x7ffc0000 [ 64.263079][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.321077][ T3647] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.330488][ T3495] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 64.513201][ T29] audit: type=1400 audit(1760385759.695:18114): avc: denied { setopt } for pid=4840 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.564666][ T29] audit: type=1400 audit(1760385759.755:18115): avc: denied { setopt } for pid=4850 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.595688][ T4851] loop4: detected capacity change from 0 to 2048 [ 64.648578][ T4855] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.692201][ T4856] FAULT_INJECTION: forcing a failure. [ 64.692201][ T4856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.705401][ T4856] CPU: 1 UID: 0 PID: 4856 Comm: syz.3.421 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.705444][ T4856] Tainted: [W]=WARN [ 64.705485][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.705537][ T4856] Call Trace: [ 64.705546][ T4856] [ 64.705556][ T4856] __dump_stack+0x1d/0x30 [ 64.705583][ T4856] dump_stack_lvl+0xe8/0x140 [ 64.705609][ T4856] dump_stack+0x15/0x1b [ 64.705628][ T4856] should_fail_ex+0x265/0x280 [ 64.705667][ T4856] should_fail+0xb/0x20 [ 64.705747][ T4856] should_fail_usercopy+0x1a/0x20 [ 64.705771][ T4856] _copy_from_user+0x1c/0xb0 [ 64.705805][ T4856] ___sys_sendmsg+0xc1/0x1d0 [ 64.705858][ T4856] __x64_sys_sendmsg+0xd4/0x160 [ 64.705893][ T4856] x64_sys_call+0x191e/0x3000 [ 64.705979][ T4856] do_syscall_64+0xd2/0x200 [ 64.706089][ T4856] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.706117][ T4856] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.706139][ T4856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.706163][ T4856] RIP: 0033:0x7f3e7378eec9 [ 64.706225][ T4856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.706243][ T4856] RSP: 002b:00007f3e721ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.706272][ T4856] RAX: ffffffffffffffda RBX: 00007f3e739e5fa0 RCX: 00007f3e7378eec9 [ 64.706289][ T4856] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 64.706301][ T4856] RBP: 00007f3e721ef090 R08: 0000000000000000 R09: 0000000000000000 [ 64.706324][ T4856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.706343][ T4856] R13: 00007f3e739e6038 R14: 00007f3e739e5fa0 R15: 00007ffc0f7a1dc8 [ 64.706364][ T4856] [ 64.935619][ T4871] loop3: detected capacity change from 0 to 164 [ 64.950124][ T4871] Unable to read rock-ridge attributes [ 64.969286][ T4871] Unable to read rock-ridge attributes [ 64.983452][ T4871] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 65.027334][ T4876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'. [ 65.038456][ T4877] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 65.079616][ T4879] loop2: detected capacity change from 0 to 164 [ 65.103680][ T4879] Unable to read rock-ridge attributes [ 65.116688][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 65.119944][ T4879] Unable to read rock-ridge attributes [ 65.136132][ T4879] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 65.352307][ T4894] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.502788][ T4906] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.541787][ T4909] FAULT_INJECTION: forcing a failure. [ 65.541787][ T4909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.555137][ T4909] CPU: 1 UID: 0 PID: 4909 Comm: syz.4.441 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.555207][ T4909] Tainted: [W]=WARN [ 65.555216][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.555233][ T4909] Call Trace: [ 65.555241][ T4909] [ 65.555250][ T4909] __dump_stack+0x1d/0x30 [ 65.555279][ T4909] dump_stack_lvl+0xe8/0x140 [ 65.555305][ T4909] dump_stack+0x15/0x1b [ 65.555348][ T4909] should_fail_ex+0x265/0x280 [ 65.555395][ T4909] should_fail+0xb/0x20 [ 65.555448][ T4909] should_fail_usercopy+0x1a/0x20 [ 65.555471][ T4909] _copy_from_user+0x1c/0xb0 [ 65.555565][ T4909] copy_from_sockptr+0x5e/0xa0 [ 65.555598][ T4909] do_ip_setsockopt+0x1a90/0x2240 [ 65.555628][ T4909] ip_setsockopt+0x58/0x110 [ 65.555653][ T4909] udp_setsockopt+0x99/0xb0 [ 65.555686][ T4909] sock_common_setsockopt+0x69/0x80 [ 65.555715][ T4909] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 65.555786][ T4909] __sys_setsockopt+0x184/0x200 [ 65.555818][ T4909] __x64_sys_setsockopt+0x64/0x80 [ 65.555846][ T4909] x64_sys_call+0x20ec/0x3000 [ 65.555886][ T4909] do_syscall_64+0xd2/0x200 [ 65.555938][ T4909] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.555976][ T4909] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.555999][ T4909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.556021][ T4909] RIP: 0033:0x7f26800feec9 [ 65.556071][ T4909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.556093][ T4909] RSP: 002b:00007f267eb67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.556112][ T4909] RAX: ffffffffffffffda RBX: 00007f2680355fa0 RCX: 00007f26800feec9 [ 65.556125][ T4909] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000007 [ 65.556219][ T4909] RBP: 00007f267eb67090 R08: 000000000000000c R09: 0000000000000000 [ 65.556236][ T4909] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 65.556253][ T4909] R13: 00007f2680356038 R14: 00007f2680355fa0 R15: 00007ffcda0104e8 [ 65.556279][ T4909] [ 65.766265][ T4914] netlink: 'syz.4.441': attribute type 4 has an invalid length. [ 65.777844][ T4914] netlink: 'syz.4.441': attribute type 4 has an invalid length. [ 65.788904][ T4909] SELinux: policydb magic number 0x20000e0 does not match expected magic number 0xf97cff8c [ 65.812207][ T4909] SELinux: failed to load policy [ 65.847140][ T4916] loop3: detected capacity change from 0 to 164 [ 65.873745][ T4916] Unable to read rock-ridge attributes [ 65.873752][ T4919] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 65.882941][ T4916] Unable to read rock-ridge attributes [ 65.895660][ T4916] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 66.042997][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 66.051921][ T4926] netlink: 'syz.4.445': attribute type 2 has an invalid length. [ 66.062365][ T4926] netlink: 'syz.4.445': attribute type 4 has an invalid length. [ 66.071210][ T4906] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.151356][ T4906] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.240074][ T4906] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.338862][ T3495] Bluetooth: hci0: command 0x1003 tx timeout [ 66.344925][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.433671][ T3653] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.442877][ T4943] loop1: detected capacity change from 0 to 164 [ 66.466920][ T3647] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.484295][ T4943] Unable to read rock-ridge attributes [ 66.520403][ T3647] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.529482][ T4943] Unable to read rock-ridge attributes [ 66.535225][ T4943] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 66.552745][ T3647] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.566034][ T4946] netlink: 'syz.4.451': attribute type 4 has an invalid length. [ 66.577424][ T4946] netlink: 'syz.4.451': attribute type 4 has an invalid length. [ 66.777821][ T4946] loop4: detected capacity change from 0 to 764 [ 66.785302][ T4946] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.759491][ T4946] Symlink component flag not implemented [ 67.765659][ T4946] Symlink component flag not implemented (7) [ 68.275159][ T4960] loop2: detected capacity change from 0 to 512 [ 68.304385][ T4958] atomic_op ffff88811d2d6928 conn xmit_atomic 0000000000000000 [ 68.316565][ T4960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.354292][ T4958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4958 comm=syz.4.456 [ 68.412546][ T4960] EXT4-fs (loop2): 1 truncate cleaned up [ 68.418754][ T4960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.464649][ T4967] random: crng reseeded on system resumption [ 68.508468][ T3639] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.548401][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.603567][ T3639] Bluetooth: hci1: Frame reassembly failed (-84) [ 68.613697][ T4956] loop1: detected capacity change from 0 to 2048 [ 68.633861][ T4956] loop1: detected capacity change from 0 to 512 [ 68.652039][ T4956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.664915][ T4956] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.702754][ T4956] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.454: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=1, size=2048 fake=0 [ 68.723425][ T4956] EXT4-fs (loop1): Remounting filesystem read-only [ 68.759632][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.783534][ T4979] loop1: detected capacity change from 0 to 164 [ 68.791097][ T4979] Unable to read rock-ridge attributes [ 68.797329][ T4979] Unable to read rock-ridge attributes [ 68.803509][ T4979] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.830251][ T4982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.462'. [ 68.859375][ T4984] loop1: detected capacity change from 0 to 1024 [ 68.866163][ T4984] EXT4-fs: Ignoring removed orlov option [ 68.880907][ T4984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.971070][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 68.993185][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.016931][ T4989] 9pnet_fd: Insufficient options for proto=fd [ 69.027739][ T4989] pim6reg: entered allmulticast mode [ 69.034177][ T4989] pim6reg: left allmulticast mode [ 69.085873][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 69.085898][ T29] audit: type=1400 audit(1760385764.275:18314): avc: denied { create } for pid=4988 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.213765][ T4999] loop1: detected capacity change from 0 to 512 [ 69.222383][ T4999] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.467: missing EA_INODE flag [ 69.234638][ T4999] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.467: error while reading EA inode 12 err=-117 [ 69.247280][ T4999] EXT4-fs (loop1): 1 orphan inode deleted [ 69.254121][ T4999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.280828][ T29] audit: type=1400 audit(1760385764.475:18315): avc: denied { write } for pid=4998 comm="syz.1.467" name="memory.events" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.317423][ T5004] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 69.410384][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.455030][ T29] audit: type=1400 audit(1760385764.645:18316): avc: denied { cpu } for pid=5011 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.489894][ T29] audit: type=1326 audit(1760385764.685:18317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.3.475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e7378eec9 code=0x0 [ 69.514931][ T29] audit: type=1400 audit(1760385764.705:18318): avc: denied { write } for pid=5011 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.535224][ T29] audit: type=1400 audit(1760385764.735:18319): avc: denied { connect } for pid=5011 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.556832][ T29] audit: type=1400 audit(1760385764.755:18320): avc: denied { execute } for pid=5011 comm="syz.1.470" name="cgroup" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 69.580005][ T29] audit: type=1400 audit(1760385764.755:18321): avc: denied { shutdown } for pid=5019 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.599837][ T29] audit: type=1400 audit(1760385764.755:18322): avc: denied { ioctl } for pid=5019 comm="syz.0.476" path="socket:[11643]" dev="sockfs" ino=11643 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.624868][ T5025] sctp: [Deprecated]: syz.0.476 (pid 5025) Use of int in maxseg socket option. [ 69.624868][ T5025] Use struct sctp_assoc_value instead [ 69.700458][ T29] audit: type=1400 audit(1760385764.895:18323): avc: denied { ioctl } for pid=5019 comm="syz.0.476" path="socket:[11031]" dev="sockfs" ino=11031 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.897408][ T5043] loop1: detected capacity change from 0 to 1024 [ 69.904567][ T5043] EXT4-fs: Ignoring removed orlov option [ 69.932343][ T5043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.001087][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 70.354388][ T5050] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 70.406819][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.474055][ T5062] FAULT_INJECTION: forcing a failure. [ 70.474055][ T5062] name failslab, interval 1, probability 0, space 0, times 1 [ 70.486998][ T5062] CPU: 1 UID: 0 PID: 5062 Comm: syz.0.489 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.487039][ T5062] Tainted: [W]=WARN [ 70.487046][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.487079][ T5062] Call Trace: [ 70.487084][ T5062] [ 70.487091][ T5062] __dump_stack+0x1d/0x30 [ 70.487185][ T5062] dump_stack_lvl+0xe8/0x140 [ 70.487212][ T5062] dump_stack+0x15/0x1b [ 70.487235][ T5062] should_fail_ex+0x265/0x280 [ 70.487277][ T5062] should_failslab+0x8c/0xb0 [ 70.487378][ T5062] kmem_cache_alloc_noprof+0x50/0x480 [ 70.487412][ T5062] ? dst_alloc+0xbd/0x100 [ 70.487438][ T5062] ? css_rstat_updated+0xb7/0x240 [ 70.487489][ T5062] dst_alloc+0xbd/0x100 [ 70.487527][ T5062] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 70.487574][ T5062] ip_route_output_flow+0x65/0x110 [ 70.487604][ T5062] udp_sendmsg+0x11b0/0x13c0 [ 70.487657][ T5062] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 70.487689][ T5062] ? avc_has_perm+0xf7/0x180 [ 70.487738][ T5062] ? __pfx_udp_sendmsg+0x10/0x10 [ 70.487758][ T5062] inet_sendmsg+0xac/0xd0 [ 70.487855][ T5062] __sock_sendmsg+0x102/0x180 [ 70.487882][ T5062] ____sys_sendmsg+0x345/0x4e0 [ 70.487989][ T5062] ___sys_sendmsg+0x17b/0x1d0 [ 70.488038][ T5062] __sys_sendmmsg+0x178/0x300 [ 70.488091][ T5062] __x64_sys_sendmmsg+0x57/0x70 [ 70.488130][ T5062] x64_sys_call+0x1c4a/0x3000 [ 70.488224][ T5062] do_syscall_64+0xd2/0x200 [ 70.488257][ T5062] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.488310][ T5062] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.488403][ T5062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.488426][ T5062] RIP: 0033:0x7f61eaeceec9 [ 70.488442][ T5062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.488466][ T5062] RSP: 002b:00007f61e992f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.488581][ T5062] RAX: ffffffffffffffda RBX: 00007f61eb125fa0 RCX: 00007f61eaeceec9 [ 70.488596][ T5062] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 70.488613][ T5062] RBP: 00007f61e992f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.488630][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.488646][ T5062] R13: 00007f61eb126038 R14: 00007f61eb125fa0 R15: 00007fffe50f3378 [ 70.488671][ T5062] [ 70.724007][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 70.724404][ T3495] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 70.730175][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 70.742229][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.788099][ T5060] vhci_hcd: invalid port number 12 [ 70.800462][ T5066] !yz!: rxe_newlink: already configured on team_slave_0 [ 70.849421][ T5071] atomic_op ffff888141117528 conn xmit_atomic 0000000000000000 [ 70.868133][ T5071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5071 comm=syz.0.494 [ 70.906908][ T5081] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 70.923413][ T5075] loop4: detected capacity change from 0 to 1024 [ 70.931220][ T5075] EXT4-fs: Ignoring removed orlov option [ 70.961471][ T5075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.022982][ T5090] loop2: detected capacity change from 0 to 512 [ 71.029979][ T5090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.046506][ T5090] EXT4-fs (loop2): 1 truncate cleaned up [ 71.053388][ T5090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.055468][ T5096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'. [ 71.076021][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 71.114140][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.125810][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.151103][ T5105] loop4: detected capacity change from 0 to 128 [ 71.152598][ T5106] netlink: 256 bytes leftover after parsing attributes in process `syz.2.504'. [ 71.159710][ T5105] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.179427][ T5105] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.180370][ T5108] random: crng reseeded on system resumption [ 71.203782][ T5111] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 71.210824][ T5108] loop1: detected capacity change from 0 to 164 [ 71.217971][ T5108] Unable to read rock-ridge attributes [ 71.224757][ T5108] Unable to read rock-ridge attributes [ 71.230935][ T5108] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.241536][ T5108] Unable to read rock-ridge attributes [ 71.247122][ T5108] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.285611][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.316175][ T5119] loop2: detected capacity change from 0 to 128 [ 71.327493][ T5119] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.340150][ T5119] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.418452][ T5129] loop4: detected capacity change from 0 to 128 [ 71.426824][ T5129] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.439217][ T5129] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.487414][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.588512][ T5136] loop4: detected capacity change from 0 to 128 [ 71.595953][ T5136] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 71.607984][ T5136] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.615870][ T5136] FAT-fs (loop4): Filesystem has been set read-only [ 71.622623][ T5136] bio_check_eod: 90 callbacks suppressed [ 71.622635][ T5136] syz.4.515: attempt to access beyond end of device [ 71.622635][ T5136] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.734912][ T5138] loop4: detected capacity change from 0 to 1024 [ 71.742057][ T5138] EXT4-fs: Ignoring removed orlov option [ 71.751567][ T5138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.828864][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 71.852298][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.934456][ T5149] 9pnet_fd: p9_fd_create_unix (5149): problem connecting socket: ./file0: -2 [ 71.945135][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 72.017600][ T5158] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.030657][ T3647] Bluetooth: hci1: Frame reassembly failed (-84) [ 72.037757][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.525007][ T5181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5181 comm=syz.0.533 [ 72.553487][ T5183] FAULT_INJECTION: forcing a failure. [ 72.553487][ T5183] name failslab, interval 1, probability 0, space 0, times 0 [ 72.566294][ T5183] CPU: 0 UID: 0 PID: 5183 Comm: syz.0.534 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.566323][ T5183] Tainted: [W]=WARN [ 72.566329][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.566340][ T5183] Call Trace: [ 72.566345][ T5183] [ 72.566353][ T5183] __dump_stack+0x1d/0x30 [ 72.566462][ T5183] dump_stack_lvl+0xe8/0x140 [ 72.566480][ T5183] dump_stack+0x15/0x1b [ 72.566494][ T5183] should_fail_ex+0x265/0x280 [ 72.566526][ T5183] should_failslab+0x8c/0xb0 [ 72.566553][ T5183] kmem_cache_alloc_noprof+0x50/0x480 [ 72.566620][ T5183] ? security_file_alloc+0x32/0x100 [ 72.566645][ T5183] security_file_alloc+0x32/0x100 [ 72.566667][ T5183] init_file+0x5c/0x1d0 [ 72.566752][ T5183] alloc_empty_file+0x8b/0x200 [ 72.566781][ T5183] alloc_file_pseudo+0xc6/0x160 [ 72.566815][ T5183] __shmem_file_setup+0x1de/0x210 [ 72.566921][ T5183] shmem_file_setup+0x3b/0x50 [ 72.566949][ T5183] __se_sys_memfd_create+0x2c3/0x590 [ 72.566971][ T5183] __x64_sys_memfd_create+0x31/0x40 [ 72.566994][ T5183] x64_sys_call+0x2ac2/0x3000 [ 72.567014][ T5183] do_syscall_64+0xd2/0x200 [ 72.567036][ T5183] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.567062][ T5183] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.567140][ T5183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.567168][ T5183] RIP: 0033:0x7f61eaeceec9 [ 72.567187][ T5183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.567210][ T5183] RSP: 002b:00007f61e992ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 72.567232][ T5183] RAX: ffffffffffffffda RBX: 000000000000053b RCX: 00007f61eaeceec9 [ 72.567249][ T5183] RDX: 00007f61e992eef0 RSI: 0000000000000000 RDI: 00007f61eaf52960 [ 72.567330][ T5183] RBP: 0000200000000b80 R08: 00007f61e992ebb7 R09: 00007f61e992ee40 [ 72.567341][ T5183] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 72.567353][ T5183] R13: 00007f61e992eef0 R14: 00007f61e992eeb0 R15: 00002000000001c0 [ 72.567370][ T5183] [ 72.888122][ T5194] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.926010][ T5198] FAULT_INJECTION: forcing a failure. [ 72.926010][ T5198] name failslab, interval 1, probability 0, space 0, times 0 [ 72.938921][ T5198] CPU: 1 UID: 0 PID: 5198 Comm: syz.1.540 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.938977][ T5198] Tainted: [W]=WARN [ 72.938984][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.939001][ T5198] Call Trace: [ 72.939008][ T5198] [ 72.939018][ T5198] __dump_stack+0x1d/0x30 [ 72.939044][ T5198] dump_stack_lvl+0xe8/0x140 [ 72.939076][ T5198] dump_stack+0x15/0x1b [ 72.939096][ T5198] should_fail_ex+0x265/0x280 [ 72.939180][ T5198] should_failslab+0x8c/0xb0 [ 72.939283][ T5198] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 72.939312][ T5198] ? __d_alloc+0x3d/0x340 [ 72.939342][ T5198] __d_alloc+0x3d/0x340 [ 72.939443][ T5198] ? mpol_shared_policy_init+0xbd/0x4c0 [ 72.939469][ T5198] d_alloc_pseudo+0x1e/0x80 [ 72.939521][ T5198] alloc_file_pseudo+0x71/0x160 [ 72.939603][ T5198] __shmem_file_setup+0x1de/0x210 [ 72.939649][ T5198] shmem_file_setup+0x3b/0x50 [ 72.939691][ T5198] __se_sys_memfd_create+0x2c3/0x590 [ 72.939723][ T5198] __x64_sys_memfd_create+0x31/0x40 [ 72.939780][ T5198] x64_sys_call+0x2ac2/0x3000 [ 72.939809][ T5198] do_syscall_64+0xd2/0x200 [ 72.939839][ T5198] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.939893][ T5198] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.939922][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.939950][ T5198] RIP: 0033:0x7f88d02feec9 [ 72.939970][ T5198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.939998][ T5198] RSP: 002b:00007f88ced5ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 72.940017][ T5198] RAX: ffffffffffffffda RBX: 0000000000000519 RCX: 00007f88d02feec9 [ 72.940030][ T5198] RDX: 00007f88ced5eef0 RSI: 0000000000000000 RDI: 00007f88d0382960 [ 72.940043][ T5198] RBP: 0000200000000340 R08: 00007f88ced5ebb7 R09: 00007f88ced5ee40 [ 72.940056][ T5198] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200 [ 72.940068][ T5198] R13: 00007f88ced5eef0 R14: 00007f88ced5eeb0 R15: 0000200000000080 [ 72.940136][ T5198] [ 73.155597][ T3495] Bluetooth: hci0: command 0x1003 tx timeout [ 73.161881][ T3891] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.180151][ T5203] loop1: detected capacity change from 0 to 164 [ 73.187720][ T5203] Unable to read rock-ridge attributes [ 73.192725][ T5206] loop3: detected capacity change from 0 to 164 [ 73.194559][ T5203] Unable to read rock-ridge attributes [ 73.205199][ T5206] Unable to read rock-ridge attributes [ 73.205357][ T5203] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 73.214598][ T5206] Unable to read rock-ridge attributes [ 73.224551][ T5206] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 73.231140][ T5207] netlink: 'syz.2.542': attribute type 3 has an invalid length. [ 73.286586][ T5215] loop3: detected capacity change from 0 to 1024 [ 73.294289][ T5215] EXT4-fs: Ignoring removed oldalloc option [ 73.300355][ T5215] EXT4-fs: Ignoring removed bh option [ 73.310808][ T5215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.530914][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.558954][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 73.632008][ T5229] loop3: detected capacity change from 0 to 128 [ 73.651622][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 73.747252][ T5244] Unsupported ieee802154 address type: 0 [ 74.185037][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 74.185052][ T29] audit: type=1400 audit(1760385769.375:18861): avc: denied { open } for pid=5254 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.210623][ T29] audit: type=1400 audit(1760385769.375:18862): avc: denied { kernel } for pid=5254 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.247008][ T3891] Bluetooth: hci1: command 0x1003 tx timeout [ 74.253269][ T3523] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 74.405411][ T29] audit: type=1400 audit(1760385769.425:18863): avc: denied { mac_admin } for pid=5254 comm="syz.1.559" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.426577][ T29] audit: type=1400 audit(1760385769.425:18864): avc: denied { relabelto } for pid=5254 comm="syz.1.559" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 74.454378][ T29] audit: type=1400 audit(1760385769.425:18865): avc: denied { associate } for pid=5254 comm="syz.1.559" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 74.482839][ T29] audit: type=1400 audit(1760385769.565:18866): avc: denied { create } for pid=5256 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.491442][ T3639] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.502343][ T29] audit: type=1400 audit(1760385769.575:18867): avc: denied { ioctl } for pid=5256 comm="syz.1.560" path="socket:[12514]" dev="sockfs" ino=12514 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.533493][ T29] audit: type=1400 audit(1760385769.575:18868): avc: denied { bind } for pid=5256 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.552735][ T29] audit: type=1400 audit(1760385769.575:18869): avc: denied { create } for pid=5256 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.572369][ T29] audit: type=1400 audit(1760385769.585:18870): avc: denied { setopt } for pid=5256 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.722901][ T5267] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 74.821057][ T3647] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.853826][ T5270] loop3: detected capacity change from 0 to 128 [ 74.882791][ T3647] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.945241][ T3647] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.981823][ T3647] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.069284][ T3647] bridge_slave_1: left allmulticast mode [ 75.074985][ T3647] bridge_slave_1: left promiscuous mode [ 75.080939][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.091159][ T3647] bridge_slave_0: left allmulticast mode [ 75.096839][ T3647] bridge_slave_0: left promiscuous mode [ 75.102588][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.178095][ T5285] loop3: detected capacity change from 0 to 1024 [ 75.185416][ T5285] EXT4-fs: Ignoring removed orlov option [ 75.201640][ T5285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.217205][ T3647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.229033][ T3647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.239957][ T3647] bond0 (unregistering): Released all slaves [ 75.248775][ T3647] bond1 (unregistering): Released all slaves [ 75.301869][ T5271] chnl_net:caif_netlink_parms(): no params data found [ 75.316948][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 75.328697][ T3647] hsr_slave_0: left promiscuous mode [ 75.335901][ T3647] hsr_slave_1: left promiscuous mode [ 75.348548][ T3647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.356005][ T3647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.363580][ T3647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.364683][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.370998][ T3647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.391046][ T3647] veth1_macvtap: left promiscuous mode [ 75.399122][ T3647] veth0_macvtap: left promiscuous mode [ 75.466702][ T3647] team0 (unregistering): Port device team_slave_1 removed [ 75.478985][ T3647] team0 (unregistering): Port device team_slave_0 removed [ 75.608092][ T5300] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.574'. [ 75.699745][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.706923][ T5271] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.737822][ T5271] bridge_slave_0: entered allmulticast mode [ 75.744789][ T5271] bridge_slave_0: entered promiscuous mode [ 75.752594][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.759757][ T5271] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.770802][ T5271] bridge_slave_1: entered allmulticast mode [ 75.777622][ T5271] bridge_slave_1: entered promiscuous mode [ 75.812719][ T5271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.823382][ T5271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.856431][ T5271] team0: Port device team_slave_0 added [ 75.864173][ T5271] team0: Port device team_slave_1 added [ 75.890275][ T5271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.897346][ T5271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.923300][ T5271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.954990][ T5271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.962105][ T5271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.988063][ T5271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.027916][ T5271] hsr_slave_0: entered promiscuous mode [ 76.039226][ T5271] hsr_slave_1: entered promiscuous mode [ 76.045190][ T5271] debugfs: 'hsr0' already exists in 'hsr' [ 76.051055][ T5271] Cannot create hsr debugfs directory [ 76.186408][ T5271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.209906][ T5314] loop1: detected capacity change from 0 to 512 [ 76.218052][ T5271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.227551][ T5271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.239797][ T5271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.302174][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.309408][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.309710][ T5321] loop1: detected capacity change from 0 to 1024 [ 76.316787][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.316898][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.351658][ T5321] EXT4-fs: Ignoring removed orlov option [ 76.370994][ T5271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.372331][ T5321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.384214][ T5271] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.400425][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.408408][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.432454][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.439598][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.470140][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 76.496672][ T5271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.507239][ T5271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.536015][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.548859][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.555984][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.580532][ T3891] Bluetooth: hci0: command 0x1003 tx timeout [ 76.586642][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.661696][ T5333] infiniband !yz!: set active [ 76.666454][ T5333] infiniband !yz!: added team_slave_0 [ 76.674084][ T5271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.681932][ T5334] random: crng reseeded on system resumption [ 76.700679][ T5343] loop2: detected capacity change from 0 to 164 [ 76.721305][ T5333] RDS/IB: !yz!: added [ 76.725949][ T5343] Unable to read rock-ridge attributes [ 76.735749][ T5334] loop3: detected capacity change from 0 to 164 [ 76.753893][ T5343] Unable to read rock-ridge attributes [ 76.762670][ T5334] Unable to read rock-ridge attributes [ 76.826715][ T5334] Unable to read rock-ridge attributes [ 76.837334][ T5357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 76.859179][ T5334] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 76.870437][ T5361] loop2: detected capacity change from 0 to 256 [ 76.877426][ T5361] vfat: Unknown parameter '7id' [ 76.886289][ T5334] Unable to read rock-ridge attributes [ 76.891957][ T5334] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 77.039203][ T5271] veth0_vlan: entered promiscuous mode [ 77.047755][ T5271] veth1_vlan: entered promiscuous mode [ 77.061835][ T5271] veth0_macvtap: entered promiscuous mode [ 77.069369][ T5271] veth1_macvtap: entered promiscuous mode [ 77.082909][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.096667][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.138182][ T315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.157336][ T315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.169172][ T315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.186874][ T315] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.267346][ T5383] loop1: detected capacity change from 0 to 512 [ 77.283037][ T5383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.330147][ T5383] EXT4-fs (loop1): 1 truncate cleaned up [ 77.341001][ T5383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.360487][ T5383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'. [ 77.372145][ T5383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'. [ 77.416295][ T5391] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.430875][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.549099][ T3641] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.668399][ T5408] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 77.676384][ T5408] netlink: 224 bytes leftover after parsing attributes in process `syz.3.601'. [ 77.757274][ T5410] netlink: 256 bytes leftover after parsing attributes in process `syz.1.602'. [ 77.860472][ T5423] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5423 comm=syz.2.604 [ 77.918255][ T5424] loop1: detected capacity change from 0 to 128 [ 77.927712][ T5424] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.940473][ T5424] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.533843][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.601663][ T5391] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.608920][ T3891] Bluetooth: hci0: command 0x1003 tx timeout [ 79.610108][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.061475][ T5391] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.201683][ T5391] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.255374][ T315] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.266761][ T315] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.278222][ T315] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.289293][ T315] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.832794][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 115.832813][ T29] audit: type=1400 audit(1760385811.025:19106): avc: denied { write } for pid=5427 comm="syz.1.608" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.838590][ T5432] netlink: 64 bytes leftover after parsing attributes in process `syz.5.611'. [ 115.839104][ T29] audit: type=1400 audit(1760385811.025:19107): avc: denied { open } for pid=5427 comm="syz.1.608" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.839133][ T29] audit: type=1400 audit(1760385811.025:19108): avc: denied { map_create } for pid=5428 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.914639][ T29] audit: type=1400 audit(1760385811.025:19109): avc: denied { map_read map_write } for pid=5428 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.033596][ T29] audit: type=1400 audit(1760385811.025:19110): avc: denied { perfmon } for pid=5428 comm="syz.5.611" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.054621][ T29] audit: type=1400 audit(1760385811.025:19111): avc: denied { create } for pid=5428 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.074111][ T29] audit: type=1400 audit(1760385811.025:19112): avc: denied { create } for pid=5428 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.094498][ T29] audit: type=1400 audit(1760385811.025:19113): avc: denied { write } for pid=5428 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.114622][ T29] audit: type=1400 audit(1760385811.025:19114): avc: denied { nlmsg_write } for pid=5428 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.135336][ T29] audit: type=1400 audit(1760385811.135:19115): avc: denied { ioctl } for pid=5427 comm="syz.1.608" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.240075][ T5452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.250577][ T5452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.291404][ T5462] tipc: Started in network mode [ 116.291432][ T5462] tipc: Node identity 8, cluster identity 4711 [ 116.291446][ T5462] tipc: Node number set to 8 [ 116.462078][ T5485] netlink: 16 bytes leftover after parsing attributes in process `syz.5.633'. [ 116.618213][ T5493] loop3: detected capacity change from 0 to 1024 [ 116.625234][ T5493] EXT4-fs: Ignoring removed oldalloc option [ 116.631323][ T5493] EXT4-fs: Ignoring removed bh option [ 116.647688][ T5493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.958622][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.342949][ C0] hrtimer: interrupt took 37654 ns [ 117.774824][ T5537] loop1: detected capacity change from 0 to 8192 [ 117.998446][ T5543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.655'. [ 120.377342][ T5718] netlink: 64 bytes leftover after parsing attributes in process `syz.0.729'. [ 123.274231][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 123.274251][ T29] audit: type=1400 audit(1760385818.465:19202): avc: denied { relabelfrom } for pid=6083 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.302448][ T29] audit: type=1400 audit(1760385818.465:19203): avc: denied { relabelto } for pid=6083 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.784064][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'. [ 123.922562][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 124.121081][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.944'. [ 124.952453][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.969'. [ 125.037787][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 125.095122][ T6246] netlink: 64 bytes leftover after parsing attributes in process `syz.3.977'. [ 125.247234][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.988'. [ 125.700512][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 125.762136][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 125.933324][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 126.890924][ T6469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.909078][ T6469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.201964][ T29] audit: type=1400 audit(1760385822.395:19204): avc: denied { create } for pid=6511 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.221763][ T29] audit: type=1400 audit(1760385822.395:19205): avc: denied { connect } for pid=6511 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.779469][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.814501][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.895581][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.918936][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.100701][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.118927][ T29] audit: type=1400 audit(1760385823.295:19206): avc: denied { mount } for pid=6573 comm="syz.5.1133" name="/" dev="ramfs" ino=17645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 128.149193][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.750093][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.759595][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.366567][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.391883][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.449657][ T6732] __nla_validate_parse: 1 callbacks suppressed [ 129.449677][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1204'. [ 129.637095][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 129.769804][ T29] audit: type=1326 audit(1760385824.965:19207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.793409][ T29] audit: type=1326 audit(1760385824.965:19208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.819139][ T29] audit: type=1326 audit(1760385825.005:19209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.842716][ T29] audit: type=1326 audit(1760385825.005:19210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.866206][ T29] audit: type=1326 audit(1760385825.005:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.889737][ T29] audit: type=1326 audit(1760385825.005:19212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.913366][ T29] audit: type=1326 audit(1760385825.005:19213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.936995][ T29] audit: type=1326 audit(1760385825.005:19214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.960610][ T29] audit: type=1326 audit(1760385825.005:19215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.982325][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.984071][ T29] audit: type=1326 audit(1760385825.005:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6773 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9318aeec9 code=0x7ffc0000 [ 129.992852][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.042622][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.051203][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.260689][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.269420][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.966896][ T6837] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.054641][ T6844] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.682349][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1265'. [ 131.976614][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.986712][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.853297][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1296'. [ 133.123855][ T6983] delete_channel: no stack [ 133.253125][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 133.952827][ T7106] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1366'. [ 134.373566][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.382148][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.606806][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1391'. [ 134.615914][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'. [ 134.712139][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 134.853770][ T7183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1402'. [ 135.225673][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 135.225692][ T29] audit: type=1400 audit(1760385830.415:19246): avc: denied { read } for pid=7213 comm="syz.3.1416" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.253207][ T29] audit: type=1400 audit(1760385830.415:19247): avc: denied { open } for pid=7213 comm="syz.3.1416" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.280804][ T29] audit: type=1326 audit(1760385830.475:19248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7213 comm="syz.3.1416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e7378eec9 code=0x0 [ 135.334407][ T29] audit: type=1400 audit(1760385830.525:19249): avc: denied { prog_load } for pid=7213 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.353737][ T29] audit: type=1400 audit(1760385830.525:19250): avc: denied { bpf } for pid=7213 comm="syz.3.1416" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.390427][ T7216] loop3: detected capacity change from 0 to 128 [ 135.422225][ T7216] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.448818][ T29] audit: type=1400 audit(1760385830.535:19251): avc: denied { write } for pid=7207 comm="syz.0.1414" path="socket:[19871]" dev="sockfs" ino=19871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.472364][ T29] audit: type=1400 audit(1760385830.585:19252): avc: denied { read write } for pid=7213 comm="syz.3.1416" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.496687][ T29] audit: type=1400 audit(1760385830.585:19253): avc: denied { open } for pid=7213 comm="syz.3.1416" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.499381][ T7216] ext4 filesystem being mounted at /332/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.520729][ T29] audit: type=1400 audit(1760385830.585:19254): avc: denied { ioctl } for pid=7213 comm="syz.3.1416" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.520770][ T29] audit: type=1400 audit(1760385830.585:19255): avc: denied { mounton } for pid=7213 comm="syz.3.1416" path="/332/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 135.858045][ T7242] 9pnet_fd: Insufficient options for proto=fd [ 135.921341][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 136.059359][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1437'. [ 136.069871][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.095674][ T7269] loop3: detected capacity change from 0 to 164 [ 136.103591][ T7269] Unable to read rock-ridge attributes [ 136.111056][ T7269] Unable to read rock-ridge attributes [ 136.116944][ T7269] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 136.312739][ T7287] loop5: detected capacity change from 0 to 512 [ 136.320044][ T7287] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.335446][ T7287] EXT4-fs (loop5): 1 truncate cleaned up [ 136.341876][ T7287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.412891][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.437626][ T7298] loop5: detected capacity change from 0 to 1024 [ 136.445147][ T7298] EXT4-fs: Ignoring removed orlov option [ 136.471695][ T7298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.535067][ T7309] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 136.549536][ T7309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.588295][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 136.594781][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1452'. [ 136.624862][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.708634][ T315] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.814671][ T7332] loop5: detected capacity change from 0 to 512 [ 136.821533][ T7332] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.833164][ T7332] EXT4-fs (loop5): 1 truncate cleaned up [ 136.839730][ T7332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.880177][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 136.904363][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.001226][ T7357] loop5: detected capacity change from 0 to 164 [ 137.008473][ T7357] Unable to read rock-ridge attributes [ 137.015358][ T7357] Unable to read rock-ridge attributes [ 137.021453][ T7357] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.090476][ T7373] loop2: detected capacity change from 0 to 512 [ 137.102957][ T7373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.115326][ T7373] EXT4-fs (loop2): 1 truncate cleaned up [ 137.124150][ T7377] netlink: 'syz.5.1485': attribute type 1 has an invalid length. [ 137.132882][ T7373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.153708][ T7377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.191756][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.281872][ T7409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7409 comm=syz.1.1497 [ 137.300158][ T3658] Bluetooth: hci1: Frame reassembly failed (-84) [ 138.089928][ T7420] 9pnet_fd: Insufficient options for proto=fd [ 138.101358][ T7422] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 138.122584][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.151825][ T7427] loop1: detected capacity change from 0 to 164 [ 138.159723][ T7427] Unable to read rock-ridge attributes [ 138.170148][ T7427] Unable to read rock-ridge attributes [ 138.179358][ T7427] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 138.281976][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 138.728996][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.783082][ T7452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7452 comm=syz.3.1515 [ 139.033614][ T7454] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 139.048018][ T7454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.213749][ T7468] loop1: detected capacity change from 0 to 512 [ 139.222245][ T7468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.234921][ T7468] EXT4-fs (loop1): 1 truncate cleaned up [ 139.241487][ T7468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.269571][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.348604][ T7479] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 139.368949][ T3523] Bluetooth: hci1: command 0x1003 tx timeout [ 139.375230][ T3891] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 139.455701][ T7495] loop5: detected capacity change from 0 to 512 [ 139.464204][ T7495] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.497415][ T7495] EXT4-fs (loop5): 1 truncate cleaned up [ 139.509232][ T7495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.585768][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.702942][ T7509] loop5: detected capacity change from 0 to 1024 [ 139.713441][ T7509] EXT4-fs: Ignoring removed orlov option [ 139.735533][ T3658] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.753842][ T7514] loop3: detected capacity change from 0 to 164 [ 139.761027][ T7509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.774262][ T7514] Unable to read rock-ridge attributes [ 139.786512][ T7514] Unable to read rock-ridge attributes [ 139.797575][ T7514] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 139.891093][ T7509] __nla_validate_parse: 1 callbacks suppressed [ 139.891108][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1539'. [ 139.947205][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.978238][ T7539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7539 comm=syz.5.1548 [ 139.982595][ T7537] 9pnet_fd: Insufficient options for proto=fd [ 140.036216][ T7543] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 140.214512][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 140.259859][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 140.259896][ T29] audit: type=1400 audit(1760385835.455:19596): avc: denied { read } for pid=7564 comm="syz.0.1563" dev="nsfs" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 140.269306][ T7565] 9pnet_fd: Insufficient options for proto=fd [ 140.287636][ T29] audit: type=1400 audit(1760385835.455:19597): avc: denied { open } for pid=7564 comm="syz.0.1563" path="net:[4026532510]" dev="nsfs" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 140.317135][ T29] audit: type=1400 audit(1760385835.455:19598): avc: denied { prog_run } for pid=7564 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 140.336447][ T29] audit: type=1400 audit(1760385835.455:19599): avc: denied { watch watch_reads } for pid=7564 comm="syz.0.1563" path="/378" dev="tmpfs" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.359590][ T29] audit: type=1400 audit(1760385835.455:19600): avc: denied { create } for pid=7564 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.377246][ T7568] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 140.379224][ T29] audit: type=1400 audit(1760385835.455:19601): avc: denied { ioctl } for pid=7564 comm="syz.0.1563" path="socket:[20468]" dev="sockfs" ino=20468 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.410626][ T29] audit: type=1400 audit(1760385835.465:19602): avc: denied { mounton } for pid=7564 comm="syz.0.1563" path="/syzcgroup/net/syz0/devices.allow" dev="cgroup" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 140.437549][ T29] audit: type=1400 audit(1760385835.485:19603): avc: denied { kernel } for pid=7564 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.457167][ T29] audit: type=1400 audit(1760385835.485:19604): avc: denied { open } for pid=7564 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.476696][ T29] audit: type=1400 audit(1760385835.515:19605): avc: denied { map_create } for pid=7566 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 140.605979][ T7588] 9pnet_fd: Insufficient options for proto=fd [ 140.630342][ T7590] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 140.675201][ T7596] loop2: detected capacity change from 0 to 164 [ 140.682398][ T7596] Unable to read rock-ridge attributes [ 140.689064][ T7596] Unable to read rock-ridge attributes [ 140.694993][ T7596] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.964512][ T7615] loop5: detected capacity change from 0 to 512 [ 140.973046][ T7615] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.990719][ T7615] EXT4-fs (loop5): 1 truncate cleaned up [ 140.999217][ T7615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.015371][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 141.024888][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 141.043526][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.281748][ T7622] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.575206][ T7642] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 141.788825][ T3523] Bluetooth: hci0: command 0x1003 tx timeout [ 141.807823][ T3891] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.898636][ T7656] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 141.933035][ T7656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.129244][ T7671] loop2: detected capacity change from 0 to 164 [ 142.136804][ T7671] Unable to read rock-ridge attributes [ 142.142840][ T7671] Unable to read rock-ridge attributes [ 142.149384][ T7671] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 142.171098][ T7673] random: crng reseeded on system resumption [ 142.197021][ T7675] loop3: detected capacity change from 0 to 1024 [ 142.204282][ T7675] EXT4-fs: Ignoring removed orlov option [ 142.233040][ T7675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.288911][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 142.311046][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.386070][ T7692] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 142.403734][ T7692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.732170][ T7704] loop1: detected capacity change from 0 to 164 [ 142.739964][ T7704] Unable to read rock-ridge attributes [ 142.746932][ T7704] Unable to read rock-ridge attributes [ 142.752933][ T7704] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 142.783133][ T3641] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.800589][ T7713] loop5: detected capacity change from 0 to 1024 [ 142.807657][ T7713] EXT4-fs: Ignoring removed orlov option [ 142.824985][ T7713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.860740][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1626'. [ 142.890228][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.975470][ T7724] loop5: detected capacity change from 0 to 512 [ 142.982522][ T7724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.993852][ T7724] EXT4-fs (loop5): 1 truncate cleaned up [ 143.000139][ T7724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.017006][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1630'. [ 143.037916][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.055915][ T7731] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1633'. [ 143.172224][ T7740] loop2: detected capacity change from 0 to 164 [ 143.179577][ T7740] Unable to read rock-ridge attributes [ 143.186444][ T7742] loop5: detected capacity change from 0 to 128 [ 143.186484][ T7740] Unable to read rock-ridge attributes [ 143.199656][ T7740] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.200201][ T7742] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.225714][ T7742] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.820573][ T7757] loop2: detected capacity change from 0 to 512 [ 143.827565][ T7757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.844465][ T7757] EXT4-fs (loop2): 1 truncate cleaned up [ 143.851173][ T7757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.865226][ T7760] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.868271][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 143.911641][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.922610][ T5271] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.926545][ T7767] loop3: detected capacity change from 0 to 164 [ 143.939485][ T7767] Unable to read rock-ridge attributes [ 143.945457][ T7767] Unable to read rock-ridge attributes [ 143.951315][ T7767] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.964682][ T7770] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 144.605397][ T7790] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 144.629799][ T7792] loop5: detected capacity change from 0 to 512 [ 144.636675][ T7792] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.647736][ T7792] EXT4-fs (loop5): 1 truncate cleaned up [ 144.653874][ T7792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.669774][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1658'. [ 144.699148][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.808816][ T3523] Bluetooth: hci0: command 0x1003 tx timeout [ 144.808827][ T3891] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.874708][ T7813] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 144.896612][ T7812] netlink: 'syz.1.1664': attribute type 1 has an invalid length. [ 144.910364][ T7812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.991919][ T7826] loop3: detected capacity change from 0 to 512 [ 145.002453][ T7826] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.020756][ T7826] EXT4-fs (loop3): 1 truncate cleaned up [ 145.031623][ T7826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.045712][ T7832] loop2: detected capacity change from 0 to 164 [ 145.058370][ T7832] Unable to read rock-ridge attributes [ 145.079945][ T7832] Unable to read rock-ridge attributes [ 145.085874][ T7832] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 145.100447][ T7826] __nla_validate_parse: 1 callbacks suppressed [ 145.100464][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 145.125430][ T7835] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.136712][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.180487][ T7835] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.232331][ T7843] random: crng reseeded on system resumption [ 145.245952][ T7843] loop3: detected capacity change from 0 to 164 [ 145.256101][ T7843] Unable to read rock-ridge attributes [ 145.263943][ T7843] Unable to read rock-ridge attributes [ 145.270014][ T7843] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 145.335748][ T7835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.390414][ T7835] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.415189][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 145.415206][ T29] audit: type=1400 audit(1760385840.605:20047): avc: denied { create } for pid=7845 comm="syz.5.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.441335][ T29] audit: type=1400 audit(1760385840.605:20048): avc: denied { setopt } for pid=7845 comm="syz.5.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.461043][ T29] audit: type=1400 audit(1760385840.605:20049): avc: denied { getopt } for pid=7845 comm="syz.5.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.490017][ T3658] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.511718][ T3641] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.527647][ T3641] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.556917][ T29] audit: type=1400 audit(1760385840.745:20050): avc: denied { create } for pid=7849 comm="syz.0.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.577109][ T3641] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.589855][ T29] audit: type=1404 audit(1760385840.785:20051): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 145.606661][ T29] audit: type=1404 audit(1760385840.785:20052): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 145.630345][ T29] audit: type=1400 audit(1760385840.825:20053): avc: denied { prog_load } for pid=7849 comm="syz.0.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 145.649566][ T29] audit: type=1400 audit(1760385840.825:20054): avc: denied { bpf } for pid=7849 comm="syz.0.1678" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.670234][ T29] audit: type=1400 audit(1760385840.825:20055): avc: denied { perfmon } for pid=7849 comm="syz.0.1678" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.693860][ T29] audit: type=1400 audit(1760385840.825:20056): avc: denied { prog_run } for pid=7851 comm="syz.5.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 145.733932][ T7852] netlink: 'syz.5.1679': attribute type 1 has an invalid length. [ 145.749616][ T7852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.773280][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 145.843855][ T7860] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 145.886005][ T7864] loop1: detected capacity change from 0 to 164 [ 145.893759][ T7864] Unable to read rock-ridge attributes [ 145.900913][ T7864] Unable to read rock-ridge attributes [ 145.906885][ T7864] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 145.937874][ T7867] loop1: detected capacity change from 0 to 512 [ 145.944830][ T7867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.956242][ T7867] EXT4-fs (loop1): 1 truncate cleaned up [ 145.962975][ T7867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.995661][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 146.077136][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.678995][ T7889] netlink: 'syz.5.1692': attribute type 1 has an invalid length. [ 146.693349][ T7889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.727203][ T7892] loop1: detected capacity change from 0 to 1024 [ 146.736288][ T7892] EXT4-fs: Ignoring removed orlov option [ 146.765243][ T7892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.823896][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 146.862532][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.097590][ T7932] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1710'. [ 147.234318][ T7940] loop3: detected capacity change from 0 to 128 [ 147.244888][ T7940] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.257622][ T7940] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.281871][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 147.475989][ T7955] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 147.633059][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 147.660756][ T7973] loop5: detected capacity change from 0 to 164 [ 147.668460][ T7973] Unable to read rock-ridge attributes [ 147.677794][ T7973] Unable to read rock-ridge attributes [ 147.684032][ T7973] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.790571][ T7981] random: crng reseeded on system resumption [ 147.949788][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.058489][ T7991] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.100478][ T7991] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.241651][ T8002] netlink: 'syz.3.1736': attribute type 4 has an invalid length. [ 148.247902][ T7991] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.269903][ T8001] netlink: 'syz.3.1736': attribute type 4 has an invalid length. [ 148.290086][ T8001] loop3: detected capacity change from 0 to 764 [ 148.297622][ T8001] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 148.307157][ T8001] Symlink component flag not implemented [ 148.309036][ T7991] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.313579][ T8001] Symlink component flag not implemented (7) [ 148.356549][ T8004] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 148.388597][ T3658] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.408971][ T3658] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.418332][ T8006] loop2: detected capacity change from 0 to 1024 [ 148.426555][ T8006] EXT4-fs: Ignoring removed orlov option [ 148.433465][ T3658] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.442525][ T3658] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.455791][ T8006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.513320][ T8012] loop1: detected capacity change from 0 to 1024 [ 148.529890][ T8012] EXT4-fs: Ignoring removed oldalloc option [ 148.535978][ T8012] EXT4-fs: Ignoring removed bh option [ 148.540601][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 148.560453][ T8012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.588457][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.664756][ T8021] loop3: detected capacity change from 0 to 512 [ 148.679433][ T8026] loop5: detected capacity change from 0 to 164 [ 148.687842][ T8026] Unable to read rock-ridge attributes [ 148.693426][ T8021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.706163][ T8021] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.711116][ T8026] Unable to read rock-ridge attributes [ 148.738211][ T8026] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 149.269652][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.299161][ T8047] loop3: detected capacity change from 0 to 1024 [ 149.306623][ T8047] EXT4-fs: Ignoring removed orlov option [ 149.321718][ T8047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.360231][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.389183][ T8051] vhci_hcd: invalid port number 12 [ 149.403705][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 149.433169][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.443742][ T8054] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.480424][ T8054] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.614365][ T8054] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.671739][ T8054] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.718244][ T3637] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.731878][ T3637] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.743556][ T3637] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.754750][ T3637] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.820936][ T8077] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 149.852502][ T8080] loop2: detected capacity change from 0 to 164 [ 149.860696][ T8080] Unable to read rock-ridge attributes [ 149.867601][ T8080] Unable to read rock-ridge attributes [ 149.874239][ T8080] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 149.881992][ T8084] loop1: detected capacity change from 0 to 1024 [ 149.889693][ T8084] EXT4-fs: Ignoring removed orlov option [ 149.901457][ T8084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.930203][ T8090] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 149.944253][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 150.199751][ T8105] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 150.276566][ T8110] random: crng reseeded on system resumption [ 150.318428][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.331797][ T3639] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.356103][ T8118] 9p: Unknown access argument 00000000000000000000vp~z^iXF7: -22 [ 150.376284][ T8120] netlink: 'syz.5.1781': attribute type 1 has an invalid length. [ 150.390485][ T8120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.434571][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 150.434590][ T29] audit: type=1400 audit(1760385845.625:20440): avc: denied { open } for pid=8124 comm="syz.5.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 150.460687][ T29] audit: type=1400 audit(1760385845.625:20441): avc: denied { kernel } for pid=8124 comm="syz.5.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 150.490563][ T29] audit: type=1400 audit(1760385845.655:20442): avc: denied { execmem } for pid=8124 comm="syz.5.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 150.523728][ T29] audit: type=1400 audit(1760385845.715:20443): avc: denied { write } for pid=8126 comm="syz.1.1784" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.554135][ T8127] vhci_hcd: invalid port number 12 [ 150.560325][ T29] audit: type=1400 audit(1760385845.745:20444): avc: denied { write } for pid=8126 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 150.579811][ T29] audit: type=1400 audit(1760385845.745:20445): avc: denied { create } for pid=8126 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.599467][ T29] audit: type=1400 audit(1760385845.745:20446): avc: denied { write } for pid=8126 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.663865][ T3639] Bluetooth: hci1: Frame reassembly failed (-84) [ 151.329601][ T29] audit: type=1400 audit(1760385846.525:20447): avc: denied { mac_admin } for pid=8135 comm="syz.5.1787" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.351049][ T29] audit: type=1400 audit(1760385846.525:20448): avc: denied { relabelto } for pid=8135 comm="syz.5.1787" name="cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 151.378717][ T29] audit: type=1400 audit(1760385846.525:20449): avc: denied { associate } for pid=8135 comm="syz.5.1787" name="cgroup.procs" dev="cgroup" ino=347 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 151.673360][ T8150] loop2: detected capacity change from 0 to 164 [ 151.681113][ T8150] Unable to read rock-ridge attributes [ 151.687575][ T8150] Unable to read rock-ridge attributes [ 151.693775][ T8150] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 151.722082][ T8153] netlink: 'syz.2.1793': attribute type 1 has an invalid length. [ 151.735909][ T8153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.307479][ T8161] loop2: detected capacity change from 0 to 1024 [ 152.314550][ T8161] EXT4-fs: Ignoring removed oldalloc option [ 152.320614][ T8161] EXT4-fs: Ignoring removed bh option [ 152.330405][ T8161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.408869][ T3495] Bluetooth: hci0: command 0x1003 tx timeout [ 152.414074][ T3891] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.728587][ T8185] loop3: detected capacity change from 0 to 512 [ 152.734961][ T3891] Bluetooth: hci1: command 0x1003 tx timeout [ 152.738835][ T3523] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 152.751639][ T8185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.777325][ T8185] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.783957][ T8189] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.055608][ T8189] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.110478][ T8189] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.163159][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.173178][ T8193] netlink: 'syz.0.1805': attribute type 1 has an invalid length. [ 153.182418][ T8189] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.218298][ T8193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.336525][ T3647] Bluetooth: hci0: Frame reassembly failed (-84) [ 153.357093][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.412818][ T8209] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 153.534969][ T3641] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.547665][ T3641] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.548161][ T8221] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 153.574034][ T8221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.588869][ T3641] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.608713][ T3641] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.683557][ T8232] loop1: detected capacity change from 0 to 164 [ 153.691068][ T8232] Unable to read rock-ridge attributes [ 153.697044][ T8232] Unable to read rock-ridge attributes [ 153.703446][ T8232] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 153.759013][ T8241] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 153.820616][ T8246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8246 comm=syz.1.1824 [ 153.880570][ T8253] loop3: detected capacity change from 0 to 2048 [ 153.887535][ T8253] ext4: Unknown parameter 'uid>00000000000000000000' [ 154.390682][ T8272] loop5: detected capacity change from 0 to 164 [ 154.418460][ T8272] Unable to read rock-ridge attributes [ 154.438267][ T8272] Unable to read rock-ridge attributes [ 154.458956][ T8272] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 154.610082][ T8280] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 154.660894][ T8283] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1838'. [ 154.953813][ T8290] loop1: detected capacity change from 0 to 512 [ 154.982721][ T8290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.995740][ T8290] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.029096][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.264024][ T8310] loop3: detected capacity change from 0 to 1024 [ 155.271299][ T8310] EXT4-fs: Ignoring removed orlov option [ 155.281569][ T8310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.367672][ T8315] vhci_hcd: invalid port number 12 [ 155.372963][ T3495] Bluetooth: hci0: command 0x1003 tx timeout [ 155.372966][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 155.421321][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 155.448788][ T3523] Bluetooth: hci1: command 0x1003 tx timeout [ 155.454847][ T3891] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 155.465664][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 155.465683][ T29] audit: type=1326 audit(1760385850.655:20576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 155.495741][ T29] audit: type=1326 audit(1760385850.655:20577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 155.567516][ T29] audit: type=1400 audit(1760385850.715:20578): avc: denied { create } for pid=8309 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.568661][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.588304][ T29] audit: type=1400 audit(1760385850.715:20579): avc: denied { write } for pid=8309 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.617965][ T29] audit: type=1400 audit(1760385850.715:20580): avc: denied { read } for pid=8309 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.638437][ T29] audit: type=1326 audit(1760385850.715:20581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 155.661917][ T29] audit: type=1326 audit(1760385850.715:20582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 155.685541][ T29] audit: type=1326 audit(1760385850.715:20583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7378eec9 code=0x7ffc0000 [ 155.709294][ T29] audit: type=1400 audit(1760385850.735:20584): avc: denied { read write } for pid=8321 comm="syz.5.1853" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.733172][ T29] audit: type=1400 audit(1760385850.735:20585): avc: denied { open } for pid=8321 comm="syz.5.1853" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.786125][ T8326] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 155.828903][ T8333] loop3: detected capacity change from 0 to 1024 [ 155.839626][ T8326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.846987][ T8333] EXT4-fs: Ignoring removed oldalloc option [ 155.853091][ T8333] EXT4-fs: Ignoring removed bh option [ 155.892214][ T8333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.033312][ T8339] ================================================================== [ 156.041450][ T8339] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 156.048586][ T8339] [ 156.050920][ T8339] write to 0xffff88810696f6ac of 4 bytes by task 8333 on cpu 1: [ 156.058645][ T8339] xas_set_mark+0x12b/0x140 [ 156.063167][ T8339] __folio_start_writeback+0x155/0x390 [ 156.068641][ T8339] ext4_bio_write_folio+0x5ad/0x9f0 [ 156.073870][ T8339] mpage_process_page_bufs+0x4a1/0x620 [ 156.079383][ T8339] mpage_prepare_extent_to_map+0x786/0xc00 [ 156.085213][ T8339] ext4_do_writepages+0xa05/0x2750 [ 156.090355][ T8339] ext4_writepages+0x176/0x300 [ 156.095137][ T8339] do_writepages+0x1c6/0x310 [ 156.099747][ T8339] file_write_and_wait_range+0x156/0x2c0 [ 156.105401][ T8339] generic_buffers_fsync_noflush+0x45/0x120 [ 156.111317][ T8339] ext4_sync_file+0x1ab/0x690 [ 156.116017][ T8339] vfs_fsync_range+0x10d/0x130 [ 156.120802][ T8339] ext4_buffered_write_iter+0x34f/0x3c0 [ 156.126362][ T8339] ext4_file_write_iter+0x387/0xf60 [ 156.131592][ T8339] iter_file_splice_write+0x666/0xa60 [ 156.136976][ T8339] direct_splice_actor+0x156/0x2a0 [ 156.142106][ T8339] splice_direct_to_actor+0x312/0x680 [ 156.147518][ T8339] do_splice_direct+0xda/0x150 [ 156.152293][ T8339] do_sendfile+0x380/0x650 [ 156.156735][ T8339] __x64_sys_sendfile64+0x105/0x150 [ 156.161952][ T8339] x64_sys_call+0x2bb4/0x3000 [ 156.166649][ T8339] do_syscall_64+0xd2/0x200 [ 156.171171][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.177077][ T8339] [ 156.179407][ T8339] read to 0xffff88810696f6ac of 4 bytes by task 8339 on cpu 0: [ 156.187047][ T8339] xas_find_marked+0x5dc/0x620 [ 156.191830][ T8339] find_get_entry+0x5d/0x380 [ 156.196443][ T8339] filemap_get_folios_tag+0x92/0x210 [ 156.201756][ T8339] mpage_prepare_extent_to_map+0x320/0xc00 [ 156.207579][ T8339] ext4_do_writepages+0xa05/0x2750 [ 156.212718][ T8339] ext4_writepages+0x176/0x300 [ 156.217507][ T8339] do_writepages+0x1c6/0x310 [ 156.222109][ T8339] file_write_and_wait_range+0x156/0x2c0 [ 156.227768][ T8339] generic_buffers_fsync_noflush+0x45/0x120 [ 156.233764][ T8339] ext4_sync_file+0x1ab/0x690 [ 156.238459][ T8339] vfs_fsync_range+0x10d/0x130 [ 156.243241][ T8339] ext4_buffered_write_iter+0x34f/0x3c0 [ 156.248843][ T8339] ext4_file_write_iter+0x387/0xf60 [ 156.254091][ T8339] iter_file_splice_write+0x666/0xa60 [ 156.259480][ T8339] direct_splice_actor+0x156/0x2a0 [ 156.264609][ T8339] splice_direct_to_actor+0x312/0x680 [ 156.269998][ T8339] do_splice_direct+0xda/0x150 [ 156.274774][ T8339] do_sendfile+0x380/0x650 [ 156.279221][ T8339] __x64_sys_sendfile64+0x105/0x150 [ 156.284453][ T8339] x64_sys_call+0x2bb4/0x3000 [ 156.289189][ T8339] do_syscall_64+0xd2/0x200 [ 156.293726][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.299645][ T8339] [ 156.301979][ T8339] value changed: 0x0a000021 -> 0x04000021 [ 156.307709][ T8339] [ 156.310042][ T8339] Reported by Kernel Concurrency Sanitizer on: [ 156.316205][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.3.1857 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.327517][ T8339] Tainted: [W]=WARN [ 156.331334][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.341401][ T8339] ================================================================== [ 156.398988][ T8339] syz.3.1857 (8339) used greatest stack depth: 9064 bytes left [ 156.420045][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.