last executing test programs: 1.690430416s ago: executing program 0 (id=2034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b708000000003b6f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x4a140, 0x0) r2 = io_uring_setup(0x3ea7, &(0x7f0000000080)={0x0, 0x4fa8c, 0x1000, 0x0, 0x100000ae, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.655137576s ago: executing program 0 (id=2036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) close(r2) 1.579305397s ago: executing program 0 (id=2037): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x46) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001640)=""/231, 0xe7}], 0x1) setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 1.536701318s ago: executing program 0 (id=2039): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)={r2}, &(0x7f0000000180)=0x8) 904.628457ms ago: executing program 4 (id=2047): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='P', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x40}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 794.781359ms ago: executing program 1 (id=2050): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0xf, "f85b33bc55"}, 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 794.455419ms ago: executing program 4 (id=2051): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 773.201839ms ago: executing program 1 (id=2053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 740.621569ms ago: executing program 3 (id=2055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 737.624249ms ago: executing program 4 (id=2056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000500)='locks_get_lock_context\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 717.79246ms ago: executing program 1 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) 693.7264ms ago: executing program 4 (id=2059): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 656.880271ms ago: executing program 3 (id=2060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 645.000191ms ago: executing program 0 (id=2061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 622.276571ms ago: executing program 3 (id=2062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000007565000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) sigaltstack(0x0, 0x0) 611.983081ms ago: executing program 1 (id=2063): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r1}}, 0x20) r2 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) 551.397992ms ago: executing program 1 (id=2065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 549.854482ms ago: executing program 0 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x800, 0x2000402) 529.022152ms ago: executing program 2 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x40048c2) 519.341823ms ago: executing program 4 (id=2068): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/109, 0x6d}, 0x401}], 0x1, 0x40016141, 0x0) 491.931373ms ago: executing program 3 (id=2069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 491.118603ms ago: executing program 2 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0x0, 0x0) 443.322584ms ago: executing program 4 (id=2071): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)={r2}, &(0x7f0000000180)=0x8) 443.110984ms ago: executing program 3 (id=2072): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) close(r2) 423.644974ms ago: executing program 1 (id=2073): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="603556f6", 0x4, 0xc185a9dc689d2d04, &(0x7f0000000100)={0xa, 0x2, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r1, 0x1) 410.363504ms ago: executing program 2 (id=2074): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 359.717545ms ago: executing program 3 (id=2075): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 281.207456ms ago: executing program 2 (id=2076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 125.655968ms ago: executing program 2 (id=2077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 HID v8.00 Device [syz1] on syz0 [ 33.386930][ T3750] fido_id[3750]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.422208][ T3757] process 'syz.3.125' launched './file0' with NULL argv: empty string added [ 33.465055][ T3758] SELinux: failed to load policy [ 33.708307][ T3771] usb usb8: usbfs: process 3771 (syz.4.130) did not claim interface 0 before use [ 33.738872][ T3773] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 33.738905][ T3773] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 34.334580][ T3829] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 34.334580][ T3829] program syz.3.146 not setting count and/or reply_len properly [ 34.402792][ T3836] loop0: detected capacity change from 0 to 1024 [ 34.406927][ T3837] syz.3.149 uses obsolete (PF_INET,SOCK_PACKET) [ 34.427431][ T3836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.523298][ T3836] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.150: Allocating blocks 449-513 which overlap fs metadata [ 34.571073][ T3834] EXT4-fs (loop0): pa ffff888106827070: logic 48, phys. 177, len 21 [ 34.579277][ T3834] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 34.623816][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.696276][ T3865] loop3: detected capacity change from 0 to 1024 [ 34.729694][ T3865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.746452][ T3873] smc: net device bond0 applied user defined pnetid SYZ2 [ 34.782260][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.787642][ T3873] smc: net device bond0 erased user defined pnetid SYZ2 [ 34.830682][ T3880] loop0: detected capacity change from 0 to 1024 [ 34.841616][ T3880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.869264][ T3885] team0: Device gre1 is of different type [ 34.901924][ T3880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.920645][ T3888] bridge_slave_0: left allmulticast mode [ 34.926494][ T3888] bridge_slave_0: left promiscuous mode [ 34.932440][ T3888] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.954898][ T3888] bridge_slave_1: left allmulticast mode [ 34.960773][ T3888] bridge_slave_1: left promiscuous mode [ 34.966659][ T3888] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.977561][ T3888] bond0: (slave bond_slave_0): Releasing backup interface [ 34.991811][ T3888] bond0: (slave bond_slave_1): Releasing backup interface [ 35.006659][ T3895] loop2: detected capacity change from 0 to 512 [ 35.013769][ T3896] loop1: detected capacity change from 0 to 1024 [ 35.025761][ T3888] team0: Port device team_slave_0 removed [ 35.032804][ T3896] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.035435][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.042813][ T3896] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.053644][ T3895] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 35.062925][ T3896] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.071409][ T3895] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.087807][ T3896] JBD2: no valid journal superblock found [ 35.089446][ T3888] team0: Port device team_slave_1 removed [ 35.093628][ T3896] EXT4-fs (loop1): Could not load journal inode [ 35.108297][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.109681][ T3895] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.174: corrupted inode contents [ 35.115730][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.135478][ T3895] EXT4-fs (loop2): Remounting filesystem read-only [ 35.138617][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.142281][ T3895] EXT4-fs (loop2): 1 truncate cleaned up [ 35.149559][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.164132][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.174948][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.189558][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 35.200425][ T3895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.264700][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.337601][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 35.337621][ T29] audit: type=1400 audit(1751699590.925:293): avc: denied { getopt } for pid=3908 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.401261][ T29] audit: type=1326 audit(1751699590.975:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 35.424891][ T29] audit: type=1326 audit(1751699590.975:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 35.448442][ T29] audit: type=1326 audit(1751699590.975:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 35.471772][ T29] audit: type=1326 audit(1751699590.975:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 35.495437][ T29] audit: type=1326 audit(1751699590.975:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 35.519138][ T29] audit: type=1326 audit(1751699590.975:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 35.542707][ T29] audit: type=1326 audit(1751699590.975:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 35.566057][ T29] audit: type=1326 audit(1751699590.975:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 35.604235][ T3926] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 35.720018][ T29] audit: type=1400 audit(1751699591.305:302): avc: denied { write } for pid=3942 comm="syz.4.196" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.933687][ T3971] loop2: detected capacity change from 0 to 2048 [ 35.977880][ T3971] loop2: p1 < > p4 [ 35.987271][ T3971] loop2: p4 size 8388608 extends beyond EOD, truncated [ 36.112523][ T3991] loop3: detected capacity change from 0 to 512 [ 36.122066][ T3989] SELinux: unknown common  [ 36.127743][ T3989] SELinux: failed to load policy [ 36.138961][ T3991] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.146266][ T3991] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.215: bg 0: block 248: padding at end of block bitmap is not set [ 36.162582][ T3991] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.215: Failed to acquire dquot type 1 [ 36.174796][ T3991] EXT4-fs (loop3): 1 truncate cleaned up [ 36.181539][ T3991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.202486][ T3991] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.215: deleted inode referenced: 12 [ 36.223928][ T3991] syz.3.215 (3991) used greatest stack depth: 9304 bytes left [ 36.241039][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.265687][ T4002] loop3: detected capacity change from 0 to 512 [ 36.285057][ T4004] __nla_validate_parse: 3 callbacks suppressed [ 36.285077][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 36.299128][ T4002] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.220: Failed to acquire dquot type 1 [ 36.313236][ T4002] EXT4-fs (loop3): 1 truncate cleaned up [ 36.319503][ T4002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.332297][ T4002] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.352505][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.527280][ T4022] loop3: detected capacity change from 0 to 1024 [ 36.539540][ T4022] EXT4-fs: Ignoring removed orlov option [ 36.551209][ T4022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.587663][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.615660][ T4034] loop1: detected capacity change from 0 to 512 [ 36.640459][ T4034] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.668792][ T4034] EXT4-fs (loop1): 1 truncate cleaned up [ 36.681549][ T4034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.864429][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.866566][ T4045] ALSA: seq fatal error: cannot create timer (-19) [ 37.067752][ T4068] loop4: detected capacity change from 0 to 2048 [ 37.078447][ T4073] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 37.123453][ T4068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.198918][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.208631][ T4087] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 37.216463][ T4087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.260'. [ 37.227073][ T4087] dummy0: entered promiscuous mode [ 37.233623][ T4087] bridge0: port 3(dummy0) entered blocking state [ 37.240178][ T4087] bridge0: port 3(dummy0) entered disabled state [ 37.252121][ T4087] dummy0: entered allmulticast mode [ 37.256557][ T31] nci: nci_rx_work: unknown MT 0x6 [ 37.263326][ T4087] bridge0: port 3(dummy0) entered blocking state [ 37.269835][ T4087] bridge0: port 3(dummy0) entered forwarding state [ 37.474397][ T4127] netlink: 96 bytes leftover after parsing attributes in process `syz.3.275'. [ 37.626146][ T4142] capability: warning: `syz.2.283' uses deprecated v2 capabilities in a way that may be insecure [ 37.684394][ T4150] loop3: detected capacity change from 0 to 512 [ 37.701289][ T4152] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 37.701289][ T4152] C< [ 37.728411][ T4154] Driver unsupported XDP return value 0 on prog (id 211) dev N/A, expect packet loss! [ 37.749967][ T4150] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.768001][ T4150] EXT4-fs (loop3): mount failed [ 37.842815][ T4168] loop4: detected capacity change from 0 to 128 [ 37.855733][ T4168] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.874588][ T4168] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.900753][ T4170] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 37.909958][ T2193] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.975410][ T4182] sd 0:0:1:0: device reset [ 38.285028][ T4227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.307439][ T4227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.352606][ T4235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.323'. [ 38.365082][ T4237] rdma_op ffff888118dd4980 conn xmit_rdma 0000000000000000 [ 38.400556][ T4235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.323'. [ 38.416532][ T4235] Zero length message leads to an empty skb [ 38.466668][ T4250] loop4: detected capacity change from 0 to 128 [ 38.478603][ T4250] EXT4-fs: test_dummy_encryption option not supported [ 38.621306][ T4265] SELinux: syz.4.337 (4265) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 39.023056][ T4300] loop4: detected capacity change from 0 to 2048 [ 39.033844][ T4300] ext4: Unknown parameter 'fsuuid' [ 39.112907][ T4312] loop4: detected capacity change from 0 to 128 [ 39.328436][ T4345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.344005][ T4347] bridge: RTM_NEWNEIGH with invalid ether address [ 39.381568][ T4352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 39.529441][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 39.600338][ T4378] loop2: detected capacity change from 0 to 8192 [ 39.666312][ T4392] futex_wake_op: syz.2.397 tries to shift op by -1; fix this program [ 39.710929][ T4389] SELinux: ebitmap: truncated map [ 39.726885][ T4389] SELinux: failed to load policy [ 39.765148][ T4402] smc: net device bond0 applied user defined pnetid SYZ2 [ 39.783525][ T4402] smc: net device bond0 erased user defined pnetid SYZ2 [ 40.157330][ T4451] loop3: detected capacity change from 0 to 256 [ 40.167744][ T4451] FAT-fs (loop3): bogus number of FAT sectors [ 40.173897][ T4451] FAT-fs (loop3): Can't find a valid FAT filesystem [ 40.338783][ T4463] ALSA: seq fatal error: cannot create timer (-16) [ 40.354395][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 40.354415][ T29] audit: type=1400 audit(1751699595.935:533): avc: denied { create } for pid=4464 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.423261][ T29] audit: type=1400 audit(1751699596.005:534): avc: denied { create } for pid=4460 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.442876][ T29] audit: type=1400 audit(1751699596.005:535): avc: denied { setopt } for pid=4460 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.499713][ T29] audit: type=1400 audit(1751699596.055:536): avc: denied { read } for pid=4469 comm="syz.3.431" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.523349][ T29] audit: type=1400 audit(1751699596.055:537): avc: denied { open } for pid=4469 comm="syz.3.431" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.547248][ T29] audit: type=1400 audit(1751699596.075:538): avc: denied { ioctl } for pid=4469 comm="syz.3.431" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.605499][ T4473] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 40.641939][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.434'. [ 40.671271][ T29] audit: type=1400 audit(1751699596.255:539): avc: denied { watch watch_reads } for pid=4474 comm="syz.3.444" path="/94" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.737935][ T4481] Cannot find add_set index 0 as target [ 40.743634][ T29] audit: type=1400 audit(1751699596.295:540): avc: denied { write } for pid=4482 comm="syz.0.447" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.766681][ T29] audit: type=1400 audit(1751699596.315:541): avc: denied { create } for pid=4480 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.786286][ T29] audit: type=1400 audit(1751699596.325:542): avc: denied { setopt } for pid=4480 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.103014][ T4513] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 41.543357][ T4560] loop3: detected capacity change from 0 to 2048 [ 41.587824][ T4560] loop3: p1 < > p4 [ 41.602778][ T4560] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.614237][ T2996] loop3: p1 < > p4 [ 41.619965][ T2996] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.647424][ T2996] loop3: p1 < > p4 [ 41.651814][ T2996] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.705344][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.707319][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.746529][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.747423][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.779243][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.789808][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.970662][ T4598] loop3: detected capacity change from 0 to 128 [ 42.008721][ T4602] team0: Device gre1 is of different type [ 42.107848][ T4609] loop4: detected capacity change from 0 to 2048 [ 42.148748][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.158438][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.167169][ T3743] loop4: p1 < > p4 [ 42.173131][ T3743] loop4: p4 size 8388608 extends beyond EOD, truncated [ 42.193844][ T4609] loop4: p1 < > p4 [ 42.211823][ T4609] loop4: p4 size 8388608 extends beyond EOD, truncated [ 42.303438][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 42.354774][ T4636] team0: Device gre1 is of different type [ 42.421173][ T4641] loop4: detected capacity change from 0 to 1024 [ 42.448480][ T4641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.489679][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.588183][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.595748][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.603331][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.616488][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.624175][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.631745][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.639306][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.646773][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.654310][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.661793][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.669402][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.677042][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.684455][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.691872][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.699557][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.706992][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.714390][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.721836][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.729263][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.736859][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.744326][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.751777][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.759237][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.766740][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.774217][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.781683][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.788695][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 42.789151][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.805642][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.814137][ T1033] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 42.845781][ T4674] fido_id[4674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.890323][ T4678] loop4: detected capacity change from 0 to 512 [ 42.918139][ T4678] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.926376][ T4678] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.943263][ T4678] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.524: corrupted inode contents [ 42.955598][ T4678] EXT4-fs (loop4): Remounting filesystem read-only [ 42.955790][ T4686] loop2: detected capacity change from 0 to 512 [ 42.962463][ T4678] EXT4-fs (loop4): 1 truncate cleaned up [ 42.970660][ T4686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.984715][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.992306][ T4686] EXT4-fs (loop2): 1 truncate cleaned up [ 42.995385][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.001434][ T4686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.013267][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.036828][ T4678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.065064][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.088326][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.808307][ T4697] loop2: detected capacity change from 0 to 128 [ 44.072781][ T4710] SELinux: ebitmap: truncated map [ 44.073994][ T4710] SELinux: failed to load policy [ 44.218599][ T1033] IPVS: starting estimator thread 0... [ 44.248979][ T4730] loop3: detected capacity change from 0 to 128 [ 44.257320][ T4729] dummy0: left allmulticast mode [ 44.257490][ T4729] bridge0: port 3(dummy0) entered disabled state [ 44.282397][ T4729] bridge_slave_0: left allmulticast mode [ 44.282422][ T4729] bridge_slave_0: left promiscuous mode [ 44.282635][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.284902][ T4729] bridge_slave_1: left allmulticast mode [ 44.284921][ T4729] bridge_slave_1: left promiscuous mode [ 44.285023][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.309488][ T4729] bond0: (slave bond_slave_0): Releasing backup interface [ 44.317150][ T4726] IPVS: using max 2832 ests per chain, 141600 per kthread [ 44.319548][ T4729] bond0: (slave bond_slave_1): Releasing backup interface [ 44.331113][ T4732] loop2: detected capacity change from 0 to 512 [ 44.332150][ T4729] team0: Port device team_slave_0 removed [ 44.341895][ T4729] team0: Port device team_slave_1 removed [ 44.345100][ T4729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.345140][ T4729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.360476][ T4729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.360508][ T4729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.362830][ T4732] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.546: Failed to acquire dquot type 1 [ 44.363309][ T4732] EXT4-fs (loop2): 1 truncate cleaned up [ 44.363788][ T4732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.364201][ T4732] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.408331][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.747867][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 44.751784][ T4755] bridge0: port 1(macvlan0) entered blocking state [ 44.751820][ T4755] bridge0: port 1(macvlan0) entered disabled state [ 44.751934][ T4755] macvlan0: entered allmulticast mode [ 44.751950][ T4755] bridge0: entered allmulticast mode [ 44.754316][ T4755] macvlan0: left allmulticast mode [ 44.754338][ T4755] bridge0: left allmulticast mode [ 44.770146][ T4757] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 44.770146][ T4757] C< [ 44.909064][ T4764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.921859][ T4764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.985434][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 44.996904][ T4770] loop4: detected capacity change from 0 to 512 [ 45.085636][ T4775] bridge_slave_0: left allmulticast mode [ 45.091462][ T4775] bridge_slave_0: left promiscuous mode [ 45.097395][ T4775] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.109181][ T4775] bridge_slave_1: left allmulticast mode [ 45.114937][ T4775] bridge_slave_1: left promiscuous mode [ 45.120740][ T4775] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.130695][ T4775] bond0: (slave bond_slave_0): Releasing backup interface [ 45.141335][ T4775] bond0: (slave bond_slave_1): Releasing backup interface [ 45.162528][ T4770] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.562: Failed to acquire dquot type 1 [ 45.162601][ T4775] team0: Port device team_slave_0 removed [ 45.182505][ T4770] EXT4-fs (loop4): 1 truncate cleaned up [ 45.184395][ T4775] team0: Port device team_slave_1 removed [ 45.195142][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.195587][ T4770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.202614][ T4775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.223407][ T4770] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.224775][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.241436][ T4775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.274526][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.361306][ T4780] loop4: detected capacity change from 0 to 128 [ 45.416370][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 45.416388][ T29] audit: type=1326 audit(1751699600.995:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 45.455795][ T4782] loop2: detected capacity change from 0 to 1024 [ 45.467186][ T4782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.478179][ T29] audit: type=1326 audit(1751699601.035:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 45.501519][ T29] audit: type=1326 audit(1751699601.035:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 45.524858][ T29] audit: type=1326 audit(1751699601.035:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 45.548208][ T29] audit: type=1326 audit(1751699601.035:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 45.610518][ T29] audit: type=1400 audit(1751699601.195:689): avc: denied { setopt } for pid=4788 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.611774][ T4782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.630211][ T29] audit: type=1400 audit(1751699601.195:690): avc: denied { ioctl } for pid=4788 comm="syz.4.573" path="socket:[8164]" dev="sockfs" ino=8164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.667201][ T29] audit: type=1400 audit(1751699601.195:691): avc: denied { write } for pid=4788 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.690666][ T29] audit: type=1400 audit(1751699601.235:692): avc: denied { mount } for pid=4790 comm="syz.1.574" name="/" dev="autofs" ino=8293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 45.747895][ T29] audit: type=1400 audit(1751699601.325:693): avc: denied { prog_load } for pid=4798 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.863800][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.082556][ T4843] loop4: detected capacity change from 0 to 1024 [ 46.101893][ T4843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.153919][ T4843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.170581][ T4858] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 46.178566][ T4858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.602'. [ 46.187862][ T4858] dummy0: entered promiscuous mode [ 46.194065][ T4858] bridge0: port 1(dummy0) entered blocking state [ 46.200653][ T4858] bridge0: port 1(dummy0) entered disabled state [ 46.207635][ T4858] dummy0: entered allmulticast mode [ 46.213835][ T4858] bridge0: port 1(dummy0) entered blocking state [ 46.220427][ T4858] bridge0: port 1(dummy0) entered forwarding state [ 46.243955][ T4862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 46.252944][ T4862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 46.340164][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.369744][ T4870] SELinux: ebitmap: truncated map [ 46.388707][ T4870] SELinux: failed to load policy [ 46.397042][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 46.734595][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 46.771888][ T4909] bridge0: port 1(macvlan2) entered blocking state [ 46.778732][ T4909] bridge0: port 1(macvlan2) entered disabled state [ 46.786025][ T4909] macvlan2: entered allmulticast mode [ 46.791531][ T4909] bridge0: entered allmulticast mode [ 46.822686][ T4909] macvlan2: left allmulticast mode [ 46.828117][ T4909] bridge0: left allmulticast mode [ 46.997542][ T4922] loop4: detected capacity change from 0 to 1024 [ 47.019085][ T4922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.068175][ T4922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.123387][ T4944] serio: Serial port ptm0 [ 47.153655][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.260712][ T4963] serio: Serial port ptm0 [ 47.357561][ T4970] batadv_slave_1: entered promiscuous mode [ 47.373626][ T4970] batadv_slave_1: left promiscuous mode [ 47.441734][ T4980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.652'. [ 47.455593][ T4980] x_tables: ip_tables: udp match: only valid for protocol 17 [ 47.509076][ T4986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.665'. [ 47.591990][ T4997] ip6tnl1: entered promiscuous mode [ 47.750683][ T5011] x_tables: ip_tables: udp match: only valid for protocol 17 [ 47.909931][ T5018] __nla_validate_parse: 2 callbacks suppressed [ 47.909977][ T5018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.671'. [ 48.058675][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 48.219354][ T5048] loop4: detected capacity change from 0 to 2048 [ 48.272178][ T5048] loop4: p2 p3 p7 [ 48.401497][ T5060] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 48.501382][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 48.527170][ T5080] netlink: 96 bytes leftover after parsing attributes in process `syz.0.698'. [ 48.539917][ T5082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.699'. [ 48.549073][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.556627][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.566178][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.573779][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.671127][ T5095] vhci_hcd: invalid port number 96 [ 48.676416][ T5095] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 49.283247][ T5169] loop4: detected capacity change from 0 to 512 [ 49.292785][ T5169] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.305284][ T5172] netlink: 104 bytes leftover after parsing attributes in process `syz.1.735'. [ 49.316603][ T5169] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.340555][ T5169] EXT4-fs (loop4): 1 truncate cleaned up [ 49.346682][ T5169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.361513][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.736'. [ 49.370621][ T5178] netlink: 'syz.2.736': attribute type 18 has an invalid length. [ 49.459195][ T5178] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.468098][ T5178] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.476841][ T5178] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.485786][ T5178] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.496837][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.518895][ T5178] vxlan0: entered promiscuous mode [ 49.581732][ T5186] vhci_hcd: invalid port number 96 [ 49.587030][ T5186] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 49.595136][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 49.714155][ T5206] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.778818][ T5213] loop4: detected capacity change from 0 to 512 [ 49.795069][ T5213] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.818330][ T5213] EXT4-fs (loop4): 1 truncate cleaned up [ 49.824675][ T5213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.026030][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.214107][ T5259] veth1_to_bond: entered allmulticast mode [ 50.247844][ T5259] veth1_to_bond: left allmulticast mode [ 50.384753][ T5274] loop2: detected capacity change from 0 to 512 [ 50.459746][ T5274] journal_path: Non-blockdev passed as './file1' [ 50.466416][ T5274] EXT4-fs: error: could not find journal device path [ 50.502988][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 50.503008][ T29] audit: type=1400 audit(1751699606.085:1061): avc: denied { create } for pid=5283 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.595419][ T29] audit: type=1400 audit(1751699606.085:1062): avc: denied { connect } for pid=5283 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.597164][ T5286] Falling back ldisc for ttyS3. [ 50.692391][ T5295] loop4: detected capacity change from 0 to 512 [ 50.713066][ T5293] loop2: detected capacity change from 0 to 8192 [ 50.720242][ T5295] EXT4-fs: Ignoring removed orlov option [ 50.734721][ T5295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.746278][ T5297] xt_hashlimit: max too large, truncated to 1048576 [ 50.755632][ T5295] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.762474][ T5293] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.777881][ T29] audit: type=1400 audit(1751699606.365:1063): avc: denied { mount } for pid=5290 comm="syz.2.791" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.807129][ T5295] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.793: bg 0: block 248: padding at end of block bitmap is not set [ 50.840724][ T5300] netlink: 'syz.3.795': attribute type 10 has an invalid length. [ 50.848678][ T5300] netlink: 40 bytes leftover after parsing attributes in process `syz.3.795'. [ 50.855450][ T5295] Quota error (device loop4): write_blk: dquota write failed [ 50.858011][ T5300] team0: entered promiscuous mode [ 50.865222][ T5295] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 50.865249][ T5295] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.793: Failed to acquire dquot type 1 [ 50.865989][ T5295] EXT4-fs (loop4): 1 truncate cleaned up [ 50.870625][ T5300] team0: entered allmulticast mode [ 50.904373][ T5300] bridge0: port 1(team0) entered blocking state [ 50.910821][ T5300] bridge0: port 1(team0) entered disabled state [ 50.929533][ T5295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.996742][ T29] audit: type=1400 audit(1751699606.575:1064): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.017265][ T5295] EXT4-fs: Ignoring removed orlov option [ 51.023086][ T5295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.063466][ T29] audit: type=1400 audit(1751699606.605:1065): avc: denied { remount } for pid=5294 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.085830][ T5295] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 51.097936][ T5312] netlink: 'syz.2.801': attribute type 4 has an invalid length. [ 51.105678][ T5312] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.801'. [ 51.115519][ T5295] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.793: Abort forced by user [ 51.161715][ T5295] EXT4-fs (loop4): Remounting filesystem read-only [ 51.168402][ T5295] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 51.182726][ T5295] ext4 filesystem being remounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.227756][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.231339][ T145] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 51.256716][ T29] audit: type=1326 audit(1751699606.835:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 51.280376][ T29] audit: type=1326 audit(1751699606.835:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 51.304105][ T29] audit: type=1400 audit(1751699606.835:1068): avc: denied { name_bind } for pid=5327 comm="syz.3.808" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.411966][ T5346] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 51.419847][ T5346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.815'. [ 51.430422][ T5346] dummy0: entered promiscuous mode [ 51.440238][ T5346] bridge0: port 2(dummy0) entered blocking state [ 51.446718][ T5346] bridge0: port 2(dummy0) entered disabled state [ 51.452569][ T5345] 9pnet_fd: Insufficient options for proto=fd [ 51.454811][ T5346] dummy0: entered allmulticast mode [ 51.466425][ T5346] bridge0: port 2(dummy0) entered blocking state [ 51.472871][ T5346] bridge0: port 2(dummy0) entered forwarding state [ 51.679732][ T5372] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 51.704355][ T5376] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 51.733253][ T5376] bond1: entered promiscuous mode [ 51.751065][ T5376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.779786][ T5381] bond1: (slave bridge1): making interface the new active one [ 51.787474][ T5381] bridge1: entered promiscuous mode [ 51.809751][ T5381] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 52.025057][ T5385] loop2: detected capacity change from 0 to 512 [ 52.058888][ T5385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.091454][ T5385] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.149953][ T5385] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.832: corrupted inode contents [ 52.208626][ T5385] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.832: mark_inode_dirty error [ 52.250694][ T5385] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.832: corrupted inode contents [ 52.268991][ T5407] IPVS: Error joining to the multicast group [ 52.289457][ T5401] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.832: corrupted inode contents [ 52.307471][ T5401] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.832: mark_inode_dirty error [ 52.326741][ T5401] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.832: corrupted inode contents [ 52.368413][ T5401] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.832: mark_inode_dirty error [ 52.388288][ T5401] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.832: corrupted inode contents [ 52.454345][ T5401] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.832: mark_inode_dirty error [ 52.502597][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.557273][ T5430] loop2: detected capacity change from 0 to 164 [ 52.574383][ T5430] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.600509][ T5430] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.627728][ T5430] rock: directory entry would overflow storage [ 52.633988][ T5430] rock: sig=0x4f50, size=4, remaining=3 [ 52.639646][ T5430] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.676305][ T5443] Cannot find add_set index 0 as target [ 52.748337][ T5454] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 52.761885][ T5456] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 53.064677][ T5493] __nla_validate_parse: 4 callbacks suppressed [ 53.064694][ T5493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 53.103297][ T5499] mmap: syz.3.886 (5499) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.162401][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 53.222306][ T5515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.222443][ T5517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.231621][ T5515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.802132][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'. [ 54.014430][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.023526][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.079888][ C0] hrtimer: interrupt took 56924 ns [ 54.188886][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 54.197884][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 54.224449][ T5620] wireguard0: entered promiscuous mode [ 54.230098][ T5620] wireguard0: entered allmulticast mode [ 54.252827][ T5625] bridge0: entered allmulticast mode [ 54.262147][ T5625] pim6reg: entered allmulticast mode [ 54.358995][ T5643] xt_hashlimit: max too large, truncated to 1048576 [ 54.410543][ T5654] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 54.410543][ T5654] program syz.4.959 not setting count and/or reply_len properly [ 54.495017][ T5663] netlink: '+}[@': attribute type 3 has an invalid length. [ 54.951254][ T5736] bridge0: entered allmulticast mode [ 54.963009][ T5736] pim6reg: entered allmulticast mode [ 55.124724][ T5768] IPv6: Can't replace route, no match found [ 55.172727][ T5775] bridge0: port 3(syz_tun) entered blocking state [ 55.179361][ T5775] bridge0: port 3(syz_tun) entered disabled state [ 55.202119][ T5775] syz_tun: entered allmulticast mode [ 55.221494][ T5775] syz_tun: entered promiscuous mode [ 55.230151][ T5775] bridge0: port 3(syz_tun) entered blocking state [ 55.236681][ T5775] bridge0: port 3(syz_tun) entered forwarding state [ 55.251550][ T5775] syz_tun: left allmulticast mode [ 55.256668][ T5775] syz_tun: left promiscuous mode [ 55.261870][ T5775] bridge0: port 3(syz_tun) entered disabled state [ 55.297597][ T5775] bridge0: port 1(team0) entered disabled state [ 55.318027][ T5775] dummy0: left allmulticast mode [ 55.323198][ T5775] bridge0: port 2(dummy0) entered disabled state [ 55.368651][ T5796] SELinux: failed to load policy [ 55.532645][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 55.532665][ T29] audit: type=1400 audit(1751699611.115:1373): avc: denied { create } for pid=5822 comm="syz.1.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.562833][ T29] audit: type=1400 audit(1751699611.115:1374): avc: denied { read } for pid=5822 comm="syz.1.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.582432][ T29] audit: type=1400 audit(1751699611.165:1375): avc: denied { write } for pid=5825 comm="syz.1.1041" name="rt_acct" dev="proc" ino=4026532412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 55.619635][ T29] audit: type=1400 audit(1751699611.195:1376): avc: denied { write } for pid=5825 comm="syz.1.1041" path="socket:[10994]" dev="sockfs" ino=10994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.649020][ T5829] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 55.671388][ T5829] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 55.696133][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 55.705263][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1045'. [ 55.714323][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 55.724446][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1045'. [ 55.733489][ T5833] netlink: 'syz.3.1045': attribute type 6 has an invalid length. [ 55.761381][ T29] audit: type=1400 audit(1751699611.345:1377): avc: denied { create } for pid=5839 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.786295][ T29] audit: type=1400 audit(1751699611.355:1378): avc: denied { write } for pid=5839 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.845460][ T5850] SELinux: Context is not valid (left unmapped). [ 55.868627][ T5854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.879772][ T5854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.899387][ T29] audit: type=1400 audit(1751699611.485:1379): avc: denied { ioctl } for pid=5851 comm="syz.3.1052" path="socket:[11782]" dev="sockfs" ino=11782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.092582][ T29] audit: type=1326 audit(1751699611.675:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.3.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ebede929 code=0x7ffc0000 [ 56.125050][ T29] audit: type=1326 audit(1751699611.675:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.3.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ebede929 code=0x7ffc0000 [ 56.148754][ T29] audit: type=1326 audit(1751699611.705:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.3.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4ebede929 code=0x7ffc0000 [ 56.182477][ T5871] bond2 (unregistering): Released all slaves [ 56.194849][ T5875] wireguard0: entered promiscuous mode [ 56.200737][ T5875] wireguard0: entered allmulticast mode [ 56.378633][ T5897] loop4: detected capacity change from 0 to 512 [ 56.409000][ T5897] EXT4-fs (loop4): 1 orphan inode deleted [ 56.417600][ T5897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.431557][ T145] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 56.444909][ T5897] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.475654][ T5897] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1072: iget: bad i_size value: 360287970189639690 [ 56.529053][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.575580][ T5920] pim6reg1: entered promiscuous mode [ 56.581132][ T5920] pim6reg1: entered allmulticast mode [ 56.603489][ T5924] Falling back ldisc for ttyS3. [ 56.640050][ T5932] loop4: detected capacity change from 0 to 128 [ 56.732182][ T5945] xt_hashlimit: max too large, truncated to 1048576 [ 57.127116][ T5989] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1113'. [ 57.300079][ T6006] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 57.300079][ T6006] program syz.2.1120 not setting count and/or reply_len properly [ 57.384692][ T6014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6014 comm=syz.0.1125 [ 57.411287][ T6017] 9pnet_fd: Insufficient options for proto=fd [ 57.485739][ T6026] loop4: detected capacity change from 0 to 512 [ 57.505479][ T6026] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.514670][ T6026] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 57.582307][ T6026] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 57.610273][ T6026] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 57.619728][ T6026] System zones: 0-2, 18-18, 34-35 [ 57.625480][ T6026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.625738][ T6035] sd 0:0:1:0: device reset [ 57.661609][ T6026] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1131: bg 0: block 353: padding at end of block bitmap is not set [ 57.737875][ T6057] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 57.753178][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.783927][ T6062] bridge0: port 3(syz_tun) entered blocking state [ 57.790766][ T6062] bridge0: port 3(syz_tun) entered disabled state [ 57.798025][ T6062] syz_tun: entered allmulticast mode [ 57.803918][ T6062] syz_tun: entered promiscuous mode [ 57.809554][ T6062] bridge0: port 3(syz_tun) entered blocking state [ 57.816015][ T6062] bridge0: port 3(syz_tun) entered forwarding state [ 57.831777][ T6062] syz_tun: left allmulticast mode [ 57.836916][ T6062] syz_tun: left promiscuous mode [ 57.842250][ T6062] bridge0: port 3(syz_tun) entered disabled state [ 57.894630][ T6062] bridge_slave_0: left allmulticast mode [ 57.900450][ T6062] bridge_slave_0: left promiscuous mode [ 57.906260][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.920294][ T6062] bridge_slave_1: left allmulticast mode [ 57.926040][ T6062] bridge_slave_1: left promiscuous mode [ 57.931798][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.946920][ T6062] bond0: (slave bond_slave_0): Releasing backup interface [ 57.967599][ T6062] bond0: (slave bond_slave_1): Releasing backup interface [ 57.986822][ T6078] loop2: detected capacity change from 0 to 512 [ 57.997718][ T6062] team0: Port device team_slave_0 removed [ 58.009625][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.023456][ T6078] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.026056][ T6062] team0: Port device team_slave_1 removed [ 58.042301][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 58.043710][ T6082] vhci_hcd: invalid port number 96 [ 58.065054][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 4: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 58.068340][ T6082] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 58.090560][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 58.106851][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.118012][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 58.123031][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.146289][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.188759][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.188966][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 58.196239][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.228095][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 58.281119][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.324324][ T6078] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 18: comm syz.2.1150: lblock 23 mapped to illegal pblock 18 (length 1) [ 58.352944][ T6078] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.1150: path /233/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 58.633482][ T6093] wireguard0: entered promiscuous mode [ 58.639113][ T6093] wireguard0: entered allmulticast mode [ 58.804590][ T6115] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1167'. [ 58.876890][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.934601][ T6136] loop9: detected capacity change from 0 to 7 [ 58.947261][ T6136] Buffer I/O error on dev loop9, logical block 0, async page read [ 58.964684][ T6136] Buffer I/O error on dev loop9, logical block 0, async page read [ 58.972760][ T6136] loop9: unable to read partition table [ 58.982128][ T6140] wireguard0: entered promiscuous mode [ 58.987800][ T6140] wireguard0: entered allmulticast mode [ 59.022284][ T6136] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 59.022284][ T6136] U) failed (rc=-5) [ 59.120876][ T6158] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 59.120876][ T6158] program syz.0.1187 not setting count and/or reply_len properly [ 59.160131][ T6163] netlink: 'syz.4.1186': attribute type 4 has an invalid length. [ 59.543391][ T6207] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.553392][ T6207] SELinux: failed to load policy [ 59.637317][ T6208] xt_CT: No such helper "pptp" [ 59.659553][ T6211] loop9: detected capacity change from 0 to 7 [ 59.665989][ T6211] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.674106][ T6211] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.682033][ T6211] loop9: unable to read partition table [ 59.687893][ T6211] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 59.687893][ T6211] U) failed (rc=-5) [ 59.714971][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.725791][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.983563][ T6236] rdma_op ffff888118d6a180 conn xmit_rdma 0000000000000000 [ 60.351430][ T6249] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 60.637642][ T6257] tipc: Enabling of bearer rejected, failed to enable media [ 60.704755][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 60.704775][ T29] audit: type=1326 audit(1751699616.285:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.737315][ T29] audit: type=1326 audit(1751699616.315:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.761053][ T29] audit: type=1326 audit(1751699616.325:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.784807][ T29] audit: type=1326 audit(1751699616.325:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.810841][ T29] audit: type=1326 audit(1751699616.395:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.834350][ T29] audit: type=1326 audit(1751699616.395:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.857945][ T29] audit: type=1326 audit(1751699616.395:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.898313][ T29] audit: type=1326 audit(1751699616.465:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.922252][ T29] audit: type=1326 audit(1751699616.465:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 60.945801][ T29] audit: type=1326 audit(1751699616.465:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a492ae929 code=0x7ffc0000 [ 61.097050][ T6289] binfmt_misc: register: failed to install interpreter file ./file0 [ 61.122867][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 61.134694][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 61.164717][ T6293] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 61.639017][ T6330] SELinux: ebitmap: map size 16779264 does not match my size 64 (high bit was 1701210368) [ 61.675443][ T6330] SELinux: failed to load policy [ 61.877339][ T6338] SELinux: failed to load policy [ 62.096519][ T6361] openvswitch: netlink: Message has 6 unknown bytes. [ 62.188778][ T6376] block device autoloading is deprecated and will be removed. [ 62.241808][ T6380] loop2: detected capacity change from 0 to 512 [ 62.264343][ T6380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.290435][ T6380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.380165][ T6380] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 62.419685][ T6380] EXT4-fs (loop2): 1 truncate cleaned up [ 62.426020][ T6402] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 62.426414][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.484776][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.499834][ T6407] netlink: 'syz.1.1299': attribute type 3 has an invalid length. [ 62.761672][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.780386][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.794283][ T6461] netlink: 'syz.2.1324': attribute type 21 has an invalid length. [ 62.802299][ T6461] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1324'. [ 62.803778][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.820347][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.871839][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.880009][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.929618][ T6473] loop3: detected capacity change from 0 to 512 [ 62.966484][ T6473] EXT4-fs: Ignoring removed i_version option [ 62.976618][ T6473] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.984229][ T6473] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1330: bg 0: block 131: padding at end of block bitmap is not set [ 62.999285][ T6473] EXT4-fs (loop3): Remounting filesystem read-only [ 63.006184][ T6473] EXT4-fs (loop3): 1 truncate cleaned up [ 63.012702][ T6473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.053297][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.143845][ T6491] SELinux: failed to load policy [ 63.472706][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 63.484505][ T6514] IPVS: Error joining to the multicast group [ 63.568816][ T6526] loop4: detected capacity change from 0 to 1024 [ 63.575787][ T6526] EXT4-fs: Ignoring removed orlov option [ 63.593706][ T6526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.746677][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.012951][ T6575] loop4: detected capacity change from 0 to 1024 [ 64.020209][ T6575] EXT4-fs: Ignoring removed bh option [ 64.025742][ T6575] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.032480][ T6575] EXT4-fs: Ignoring removed bh option [ 64.059974][ T6575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.094448][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 64.113853][ T6586] IPVS: Error joining to the multicast group [ 64.124842][ T6575] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1374: Allocating blocks 449-513 which overlap fs metadata [ 64.167739][ T6573] EXT4-fs (loop4): pa ffff88810061d2a0: logic 48, phys. 177, len 21 [ 64.175899][ T6573] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 64.204914][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.461987][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1402'. [ 64.491091][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1402'. [ 64.513681][ T6639] program syz.1.1404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.538056][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1402'. [ 64.587244][ T6647] loop4: detected capacity change from 0 to 1024 [ 64.622243][ T6647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.660311][ T6647] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.1405: missing EA_INODE flag [ 64.672446][ T6647] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1405: error while reading EA inode 11 err=-117 [ 64.734860][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.749789][ T6654] xt_hashlimit: max too large, truncated to 1048576 [ 64.783482][ T6656] smc: net device bond0 applied user defined pnetid SYZ2 [ 64.813411][ T6656] smc: net device bond0 erased user defined pnetid SYZ2 [ 64.984352][ T6675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1418'. [ 65.223801][ T6693] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 65.259396][ T6693] team0: Device ipvlan2 is already an upper device of the team interface [ 65.364744][ T6701] loop4: detected capacity change from 0 to 164 [ 65.489939][ T6701] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.500775][ T6701] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.518861][ T6701] Symlink component flag not implemented [ 65.524775][ T6701] Symlink component flag not implemented [ 65.544934][ T6701] Symlink component flag not implemented (7) [ 65.551091][ T6701] Symlink component flag not implemented (116) [ 65.689610][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 65.724257][ T6711] IPVS: Error joining to the multicast group [ 65.778836][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 65.778856][ T29] audit: type=1400 audit(1751699621.365:2039): avc: denied { name_bind } for pid=6718 comm="syz.0.1436" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 65.822380][ T29] audit: type=1400 audit(1751699621.365:2040): avc: denied { node_bind } for pid=6718 comm="syz.0.1436" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 65.858976][ T29] audit: type=1400 audit(1751699621.435:2041): avc: denied { read } for pid=6722 comm="syz.2.1438" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.882353][ T29] audit: type=1400 audit(1751699621.435:2042): avc: denied { open } for pid=6722 comm="syz.2.1438" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.906233][ T29] audit: type=1400 audit(1751699621.435:2043): avc: denied { ioctl } for pid=6722 comm="syz.2.1438" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.032573][ T29] audit: type=1400 audit(1751699621.615:2044): avc: denied { create } for pid=6741 comm="syz.0.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.075002][ T29] audit: type=1400 audit(1751699621.645:2045): avc: denied { setopt } for pid=6741 comm="syz.0.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.140952][ T29] audit: type=1400 audit(1751699621.715:2046): avc: denied { write } for pid=6748 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.160289][ T29] audit: type=1400 audit(1751699621.725:2047): avc: denied { write } for pid=6747 comm="syz.0.1450" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.217851][ T29] audit: type=1400 audit(1751699621.725:2048): avc: denied { read write } for pid=6745 comm="syz.4.1449" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.435809][ T6772] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1460'. [ 67.110478][ T6814] netlink: 'syz.3.1479': attribute type 1 has an invalid length. [ 67.179559][ T6818] loop4: detected capacity change from 0 to 1024 [ 67.653854][ T6856] geneve0: entered allmulticast mode [ 67.766761][ T6862] netlink: 'syz.0.1500': attribute type 12 has an invalid length. [ 67.857524][ T6818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.934462][ T6818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.503079][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 68.512167][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 68.661914][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 68.715381][ T6941] 8021q: adding VLAN 0 to HW filter on device team1 [ 68.841273][ T6949] 0{X: renamed from gretap0 (while UP) [ 68.868966][ T6949] 0{X: entered allmulticast mode [ 68.900527][ T6949] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 69.137490][ T6974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6974 comm=syz.2.1551 [ 69.150152][ T6974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6974 comm=syz.2.1551 [ 69.206069][ T6978] loop4: detected capacity change from 0 to 2048 [ 69.381046][ T7003] loop4: detected capacity change from 0 to 512 [ 69.410777][ T7003] EXT4-fs (loop4): 1 orphan inode deleted [ 69.428821][ T2193] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 69.461992][ T7003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.478854][ T7003] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.528020][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.694068][ T7037] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 69.694926][ T7038] loop4: detected capacity change from 0 to 512 [ 69.742668][ T7038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.755854][ T7038] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.774701][ T7044] netlink: 'syz.2.1584': attribute type 21 has an invalid length. [ 69.783116][ T7044] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 69.785193][ T7049] netlink: 'syz.0.1585': attribute type 1 has an invalid length. [ 69.790917][ T7044] __nla_validate_parse: 6 callbacks suppressed [ 69.790933][ T7044] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1584'. [ 69.830886][ T7049] bond1: entered promiscuous mode [ 69.836453][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.851843][ T7049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.866427][ T7057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.897830][ T7049] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 69.907789][ T7049] bond1: (slave batadv1): making interface the new active one [ 69.915410][ T7049] batadv1: entered promiscuous mode [ 69.928256][ T7049] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 70.043029][ T7084] loop4: detected capacity change from 0 to 1024 [ 70.056822][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 70.059516][ T7084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.065978][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'. [ 70.096738][ T7075] ------------[ cut here ]------------ [ 70.102332][ T7075] WARNING: CPU: 0 PID: 7075 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 70.113241][ T7075] Modules linked in: [ 70.117218][ T7075] CPU: 0 UID: 0 PID: 7075 Comm: syz.1.1594 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 70.129799][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.139985][ T7075] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 70.147048][ T7075] Code: 83 3d 73 31 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 ba 29 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 70.166761][ T7075] RSP: 0018:ffffc90011d4fa30 EFLAGS: 00010246 [ 70.173212][ T7075] RAX: 9ea63f77c8292f00 RBX: 0000000000000016 RCX: 0000000000000000 [ 70.181283][ T7075] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 70.189434][ T7075] RBP: 0000000000000dc0 R08: ffff888118972b18 R09: 0000000000000000 [ 70.197532][ T7075] R10: ffff8881195a0a88 R11: 00018881195a0a88 R12: ffffc90011d4fd28 [ 70.205557][ T7075] R13: 0000000000003f20 R14: 0000000000040dc0 R15: 0000000000000000 [ 70.210061][ T7084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.213830][ T7075] FS: 00007eff855276c0(0000) GS:ffff8882aee30000(0000) knlGS:0000000000000000 [ 70.234698][ T7075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.241351][ T7075] CR2: 0000200000005000 CR3: 000000011c4de000 CR4: 00000000003506f0 [ 70.249430][ T7075] Call Trace: [ 70.252807][ T7075] [ 70.255781][ T7075] __alloc_pages_noprof+0x9/0x20 [ 70.260857][ T7075] ___kmalloc_large_node+0x73/0x140 [ 70.266248][ T7075] __kmalloc_large_node_noprof+0x16/0xa0 [ 70.271972][ T7075] __kmalloc_noprof+0x2ab/0x3e0 [ 70.277000][ T7075] ? hashtab_init+0x9b/0xe0 [ 70.281606][ T7075] ? common_read+0x3f/0x300 [ 70.286167][ T7075] hashtab_init+0x9b/0xe0 [ 70.290563][ T7075] symtab_init+0x2c/0x40 [ 70.295001][ T7075] common_read+0x10b/0x300 [ 70.299525][ T7075] ? __pfx_common_read+0x10/0x10 [ 70.304502][ T7075] policydb_read+0x64f/0x1330 [ 70.309238][ T7075] ? security_load_policy+0x90/0x890 [ 70.314585][ T7075] security_load_policy+0xba/0x890 [ 70.319751][ T7075] ? rep_movs_alternative+0x4a/0x90 [ 70.325023][ T7075] sel_write_load+0x1d4/0x380 [ 70.329790][ T7075] ? __pfx_sel_write_load+0x10/0x10 [ 70.335108][ T7075] vfs_write+0x269/0x8e0 [ 70.339551][ T7075] ? __rcu_read_unlock+0x4f/0x70 [ 70.344516][ T7075] ? __fget_files+0x184/0x1c0 [ 70.349234][ T7075] ? finish_task_switch+0xad/0x2b0 [ 70.354405][ T7075] ksys_write+0xda/0x1a0 [ 70.358728][ T7075] __x64_sys_write+0x40/0x50 [ 70.363471][ T7075] x64_sys_call+0x2cdd/0x2fb0 [ 70.368419][ T7075] do_syscall_64+0xd2/0x200 [ 70.373149][ T7075] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.379367][ T7075] ? clear_bhb_loop+0x40/0x90 [ 70.384147][ T7075] ? clear_bhb_loop+0x40/0x90 [ 70.388912][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.394912][ T7075] RIP: 0033:0x7eff86ebe929 [ 70.399401][ T7075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.419187][ T7075] RSP: 002b:00007eff85527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.427668][ T7075] RAX: ffffffffffffffda RBX: 00007eff870e5fa0 RCX: 00007eff86ebe929 [ 70.435749][ T7075] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 70.443783][ T7075] RBP: 00007eff86f40b39 R08: 0000000000000000 R09: 0000000000000000 [ 70.451924][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.459937][ T7075] R13: 0000000000000000 R14: 00007eff870e5fa0 R15: 00007fffdde16b28 [ 70.467988][ T7075] [ 70.471039][ T7075] ---[ end trace 0000000000000000 ]--- [ 70.477665][ T7095] netlink: 'syz.2.1605': attribute type 4 has an invalid length. [ 70.487382][ T7075] SELinux: failed to load policy [ 70.519574][ T7100] block device autoloading is deprecated and will be removed. [ 70.538898][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.614398][ T7107] netlink: 'syz.0.1609': attribute type 3 has an invalid length. [ 70.789741][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 70.789761][ T29] audit: type=1400 audit(1751699626.375:2257): avc: denied { ioctl } for pid=7132 comm="syz.1.1620" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.917768][ T29] audit: type=1326 audit(1751699626.505:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 70.976222][ T29] audit: type=1326 audit(1751699626.535:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 70.999837][ T29] audit: type=1326 audit(1751699626.535:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 71.023280][ T29] audit: type=1326 audit(1751699626.535:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 71.336634][ T29] audit: type=1326 audit(1751699626.915:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff86ebe929 code=0x7ffc0000 [ 71.381164][ T29] audit: type=1326 audit(1751699626.915:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7eff86ebe929 code=0x7ffc0000 [ 71.404790][ T29] audit: type=1326 audit(1751699626.925:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff86ebe929 code=0x7ffc0000 [ 71.428317][ T29] audit: type=1326 audit(1751699626.925:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7eff86ebe929 code=0x7ffc0000 [ 71.451776][ T29] audit: type=1326 audit(1751699626.925:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.1.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff86ebe929 code=0x7ffc0000 [ 71.529290][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1635'. [ 71.539352][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1635'. [ 71.548659][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1635'. [ 71.669784][ T7187] Dead loop on virtual device ip6_vti0, fix it urgently! [ 71.677274][ T7187] Dead loop on virtual device ip6_vti0, fix it urgently! [ 71.684718][ T7187] Dead loop on virtual device ip6_vti0, fix it urgently! [ 71.692072][ T7187] Dead loop on virtual device ip6_vti0, fix it urgently! [ 71.699292][ T7187] Dead loop on virtual device ip6_vti0, fix it urgently! [ 71.706494][ T7187] Dead loop on virtual device ip6_vti0, fix it urgently! [ 71.717250][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'. [ 71.766350][ T7199] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1649'. [ 71.819117][ T7207] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 71.846851][ T7215] netlink: 'syz.0.1659': attribute type 1 has an invalid length. [ 71.862288][ T7215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.891609][ T7215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.898955][ T7215] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 71.917284][ T7215] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 72.077131][ T7234] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.137769][ T7239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1670'. [ 72.231090][ T7253] block device autoloading is deprecated and will be removed. [ 73.113820][ T7365] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 73.312314][ T7381] loop4: detected capacity change from 0 to 1024 [ 73.321112][ T7381] EXT4-fs: Ignoring removed oldalloc option [ 73.327636][ T7381] EXT4-fs: Ignoring removed orlov option [ 73.343246][ T7381] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.379084][ T7381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.405992][ T7393] 9pnet: p9_errstr2errno: server reported unknown error [ 73.487120][ T7395] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 73.502541][ T7381] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 73.603384][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.716023][ T7301] syz.1.1699 (7301) used greatest stack depth: 7160 bytes left [ 73.899766][ T7430] netlink: 'syz.0.1755': attribute type 3 has an invalid length. [ 73.969052][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 73.982755][ T7440] loop0: detected capacity change from 0 to 512 [ 73.992769][ T7440] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.999964][ T7440] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1760: bg 0: block 248: padding at end of block bitmap is not set [ 74.015258][ T7440] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1760: Failed to acquire dquot type 1 [ 74.026897][ T7438] wireguard0: entered promiscuous mode [ 74.027814][ T7440] EXT4-fs (loop0): 1 truncate cleaned up [ 74.032616][ T7438] wireguard0: entered allmulticast mode [ 74.045192][ T7440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.098243][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.121167][ T7446] loop0: detected capacity change from 0 to 1024 [ 74.141697][ T7446] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.158160][ T7446] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2040c018, mo2=0002] [ 74.166572][ T7446] System zones: 0-1, 3-12 [ 74.172479][ T7446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.201765][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.279602][ T7472] loop0: detected capacity change from 0 to 256 [ 74.355400][ T7484] 9pnet: p9_errstr2errno: server reported unknown error @ [ 74.625308][ T7520] loop0: detected capacity change from 0 to 8192 [ 74.640807][ T7520] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.713449][ T7528] loop0: detected capacity change from 0 to 1024 [ 74.722178][ T7528] EXT4-fs: Ignoring removed oldalloc option [ 74.728452][ T7528] EXT4-fs: Ignoring removed orlov option [ 74.734706][ T7528] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.750135][ T7528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.780706][ T7528] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 74.821233][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.435663][ T7570] __nla_validate_parse: 8 callbacks suppressed [ 75.435685][ T7570] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1818'. [ 75.686355][ T7593] program syz.2.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.726426][ T7597] netlink: 'syz.1.1826': attribute type 13 has an invalid length. [ 75.810131][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.817655][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.849851][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 75.849870][ T29] audit: type=1326 audit(1751699631.435:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 75.879883][ T29] audit: type=1326 audit(1751699631.435:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 75.903470][ T29] audit: type=1326 audit(1751699631.465:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 75.927019][ T29] audit: type=1326 audit(1751699631.465:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 75.950737][ T29] audit: type=1326 audit(1751699631.465:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 75.974227][ T29] audit: type=1326 audit(1751699631.465:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 75.997732][ T29] audit: type=1326 audit(1751699631.465:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 76.021269][ T29] audit: type=1326 audit(1751699631.465:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8b75e929 code=0x7ffc0000 [ 76.060363][ T29] audit: type=1326 audit(1751699631.645:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 76.089090][ T29] audit: type=1326 audit(1751699631.675:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d87fe929 code=0x7ffc0000 [ 76.158429][ T7597] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.167596][ T7597] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.169360][ T145] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 76.176539][ T7597] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.176577][ T7597] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.923659][ T7629] netlink: 'syz.0.1843': attribute type 1 has an invalid length. [ 76.973949][ T7666] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 76.973949][ T7666] program syz.2.1859 not setting count and/or reply_len properly [ 77.044397][ T7681] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1860'. [ 77.065629][ T7668] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1860'. [ 77.137369][ T7694] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 77.172265][ T7698] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1874'. [ 77.200479][ T7698] batadv2: entered promiscuous mode [ 77.205942][ T7698] batadv2: entered allmulticast mode [ 77.217134][ T7708] serio: Serial port ptm0 [ 77.230920][ T7709] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1874'. [ 77.243262][ T7709] batadv2: entered promiscuous mode [ 77.248927][ T7709] batadv2: entered allmulticast mode [ 77.390007][ T7735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7735 comm=syz.1.1891 [ 77.402908][ T7735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7735 comm=syz.1.1891 [ 77.481977][ T7745] rdma_op ffff88810087f980 conn xmit_rdma 0000000000000000 [ 77.555740][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1904'. [ 77.569261][ T7762] netem: change failed [ 77.663630][ T7773] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1910'. [ 77.673852][ T7773] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1910'. [ 77.705974][ T7774] syzkaller1: entered promiscuous mode [ 77.711608][ T7774] syzkaller1: entered allmulticast mode [ 77.802953][ T7787] team0: left promiscuous mode [ 77.809083][ T7787] dummy0: left promiscuous mode [ 77.858596][ T7787] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.867790][ T7787] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.876718][ T7787] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.885825][ T7787] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.109589][ T7817] cgroup: Unknown subsys name 'cpuset' [ 78.346045][ T7839] SELinux: failed to load policy [ 78.371450][ T7846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.389990][ T7831] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.399030][ T7831] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.408057][ T7831] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.414572][ T7848] loop2: detected capacity change from 0 to 512 [ 78.416981][ T7831] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.432833][ T7848] EXT4-fs: test_dummy_encryption option not supported [ 78.501775][ T7854] xt_hashlimit: max too large, truncated to 1048576 [ 78.617898][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 78.653280][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 78.732023][ T7896] serio: Serial port ptm0 [ 78.788769][ T7897] bridge0: port 1(dummy0) entered disabled state [ 78.816006][ T7893] SELinux: failed to load policy [ 79.022389][ T7897] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.031487][ T7897] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.040690][ T7897] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.050250][ T7897] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.105436][ T7897] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.115307][ T7897] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.124407][ T7897] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.133404][ T7897] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.159133][ T7897] vxlan0: left promiscuous mode [ 79.165143][ T7897] bond1: left promiscuous mode [ 79.170726][ T7897] bridge1: left promiscuous mode [ 79.179495][ T7897] wireguard0: left promiscuous mode [ 79.191174][ T7903] : renamed from vlan0 (while UP) [ 79.965409][ T8043] netlink: 'syz.4.2024': attribute type 2 has an invalid length. [ 79.973347][ T8043] netlink: 'syz.4.2024': attribute type 1 has an invalid length. [ 80.555568][ T8075] infiniband syz!: set down [ 80.560334][ T8075] infiniband syz!: added team_slave_0 [ 80.756278][ T8075] RDS/IB: syz!: added [ 80.761117][ T8075] smc: adding ib device syz! with port count 1 [ 80.767600][ T8075] smc: ib device syz! port 1 has pnetid [ 81.059787][ T8090] __nla_validate_parse: 1 callbacks suppressed [ 81.059810][ T8090] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2043'. [ 81.191717][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 81.191738][ T29] audit: type=1400 audit(1751699636.775:2687): avc: denied { execute_no_trans } for pid=8099 comm="syz.1.2048" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.251664][ T29] audit: type=1400 audit(1751699636.815:2688): avc: denied { shutdown } for pid=8095 comm="syz.4.2047" lport=57347 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.320573][ T8055] syz.3.2029 (8055) used greatest stack depth: 6952 bytes left [ 81.366183][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 81.383206][ T29] audit: type=1400 audit(1751699636.965:2689): avc: denied { execute } for pid=8119 comm="syz.2.2058" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 81.449748][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 81.459644][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 81.469892][ T8126] IPVS: Error joining to the multicast group [ 81.479594][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 81.497523][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 81.510517][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 81.602646][ T29] audit: type=1400 audit(1751699637.185:2690): avc: denied { create } for pid=8139 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.623070][ T29] audit: type=1400 audit(1751699637.185:2691): avc: denied { setopt } for pid=8139 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.802027][ T8154] netlink: 'syz.3.2075': attribute type 13 has an invalid length. [ 81.926744][ T8154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.953031][ T8154] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.963138][ T29] audit: type=1400 audit(1751699637.275:2692): avc: denied { lock } for pid=8148 comm="syz.3.2072" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=18333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.988787][ T29] audit: type=1400 audit(1751699637.445:2693): avc: denied { mounton } for pid=8156 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.010408][ T29] audit: type=1400 audit(1751699637.465:2694): avc: denied { create } for pid=8155 comm="syz.2.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.029938][ T29] audit: type=1400 audit(1751699637.475:2695): avc: denied { setopt } for pid=8155 comm="syz.2.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.084862][ T8134] ================================================================== [ 82.093009][ T8134] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 82.100932][ T8134] [ 82.103266][ T8134] write to 0xffffea00041ec5d8 of 8 bytes by task 8141 on cpu 1: [ 82.110942][ T8134] __filemap_remove_folio+0x1a5/0x2a0 [ 82.116331][ T8134] filemap_remove_folio+0x6d/0x1d0 [ 82.121469][ T8134] truncate_inode_folio+0x42/0x50 [ 82.126495][ T8134] shmem_undo_range+0x244/0xa80 [ 82.131354][ T8134] shmem_fallocate+0x799/0x840 [ 82.136117][ T8134] vfs_fallocate+0x413/0x450 [ 82.140714][ T8134] __x64_sys_fallocate+0x7a/0xd0 [ 82.145654][ T8134] x64_sys_call+0x2b88/0x2fb0 [ 82.150355][ T8134] do_syscall_64+0xd2/0x200 [ 82.154860][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.160761][ T8134] [ 82.163088][ T8134] read to 0xffffea00041ec5d8 of 8 bytes by task 8134 on cpu 0: [ 82.170661][ T8134] folio_mapping+0xa1/0x120 [ 82.175180][ T8134] move_folios_to_lru+0x128/0x6a0 [ 82.180207][ T8134] evict_folios+0x3013/0x33d0 [ 82.184893][ T8134] try_to_shrink_lruvec+0x45a/0x7e0 [ 82.190123][ T8134] shrink_lruvec+0x22e/0x1b40 [ 82.194811][ T8134] shrink_node+0x686/0x2120 [ 82.199315][ T8134] do_try_to_free_pages+0x3f6/0xcd0 [ 82.204516][ T8134] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 82.210433][ T8134] try_charge_memcg+0x358/0x9e0 [ 82.215284][ T8134] obj_cgroup_charge_pages+0xa6/0x150 [ 82.220661][ T8134] __memcg_kmem_charge_page+0x9f/0x170 [ 82.226165][ T8134] __alloc_frozen_pages_noprof+0x188/0x360 [ 82.231980][ T8134] alloc_pages_mpol+0xb3/0x250 [ 82.236749][ T8134] alloc_pages_noprof+0x90/0x130 [ 82.241722][ T8134] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 82.247537][ T8134] __kvmalloc_node_noprof+0x30f/0x4e0 [ 82.252920][ T8134] ip_set_alloc+0x1f/0x30 [ 82.257260][ T8134] hash_netiface_create+0x282/0x740 [ 82.262485][ T8134] ip_set_create+0x3c9/0x960 [ 82.267084][ T8134] nfnetlink_rcv_msg+0x4c6/0x590 [ 82.272025][ T8134] netlink_rcv_skb+0x120/0x220 [ 82.276817][ T8134] nfnetlink_rcv+0x16b/0x1690 [ 82.281494][ T8134] netlink_unicast+0x5a1/0x670 [ 82.286261][ T8134] netlink_sendmsg+0x58b/0x6b0 [ 82.291028][ T8134] __sock_sendmsg+0x145/0x180 [ 82.295709][ T8134] ____sys_sendmsg+0x31e/0x4e0 [ 82.300587][ T8134] ___sys_sendmsg+0x17b/0x1d0 [ 82.305292][ T8134] __x64_sys_sendmsg+0xd4/0x160 [ 82.310163][ T8134] x64_sys_call+0x2999/0x2fb0 [ 82.314857][ T8134] do_syscall_64+0xd2/0x200 [ 82.319379][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.325272][ T8134] [ 82.327620][ T8134] value changed: 0xffff888118da04d8 -> 0x0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 82.334809][ T8134] [ 82.337171][ T8134] Reported by Kernel Concurrency Sanitizer on: [ 82.343342][ T8134] CPU: 0 UID: 0 PID: 8134 Comm: syz.0.2066 Tainted: G W 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 82.357347][ T8134] Tainted: [W]=WARN [ 82.361154][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.371222][ T8134] ================================================================== [ 82.417216][ T29] audit: type=1400 audit(1751699637.965:2696): avc: denied { write } for pid=3292 comm="syz-executor" path="pipe:[737]" dev="pipefs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 82.583354][ T8154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.825661][ T37] bridge_slave_1: left allmulticast mode [ 82.831441][ T37] bridge_slave_1: left promiscuous mode [ 82.837434][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.840863][ T8134] syz.0.2066 (8134) used greatest stack depth: 6040 bytes left [ 82.852623][ T37] bridge_slave_0: left allmulticast mode [ 82.858496][ T37] bridge_slave_0: left promiscuous mode [ 82.864220][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.929852][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.939204][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.948260][ T37] bond0 (unregistering): Released all slaves [ 83.003014][ T37] hsr_slave_0: left promiscuous mode [ 83.008931][ T37] hsr_slave_1: left promiscuous mode [ 83.036070][ T37] team0 (unregistering): Port device team_slave_1 removed [ 83.045972][ T37] team0 (unregistering): Port device team_slave_0 removed [ 83.055149][ T51] smc: removing ib device syz! [ 83.401737][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.459998][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.509297][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.560393][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.190879][ T37] dummy0: left allmulticast mode [ 84.195889][ T37] dummy0: left promiscuous mode [ 84.201121][ T37] bridge0: port 1(dummy0) entered disabled state [ 84.251139][ T37] bridge0 (unregistering): left allmulticast mode [ 84.288725][ T37] bond0 (unregistering): Released all slaves [ 84.297464][ T37] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 84.305583][ T37] batadv1: left promiscuous mode [ 84.311546][ T37] bond1 (unregistering): Released all slaves [ 84.319950][ T37] bond2 (unregistering): Released all slaves [ 84.368538][ T37] bond0 (unregistering): Released all slaves [ 84.419149][ T37] bond0 (unregistering): Released all slaves [ 84.441016][ T37] bridge0 (unregistering): left allmulticast mode [ 84.488145][ T37] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 84.528493][ T37] bond0 (unregistering): Released all slaves [ 84.536506][ T37] bond1 (unregistering): Released all slaves [ 84.593852][ T37] IPVS: stopping master sync thread 7365 ... [ 84.602885][ T37] hsr_slave_0: left promiscuous mode [ 84.608640][ T37] hsr_slave_1: left promiscuous mode [ 84.615386][ T37] hsr_slave_0: left promiscuous mode [ 84.621034][ T37] hsr_slave_1: left promiscuous mode [ 84.628064][ T37] hsr_slave_0: left promiscuous mode [ 84.633611][ T37] hsr_slave_1: left promiscuous mode [ 84.640528][ T37] hsr_slave_0: left promiscuous mode [ 84.646238][ T37] hsr_slave_1: left promiscuous mode [ 84.655818][ T37] veth1_vlan: left promiscuous mode [ 84.661286][ T37] veth0_vlan: left promiscuous mode [ 84.692406][ T37] pim6reg (unregistering): left allmulticast mode [ 84.822495][ T37] pim6reg (unregistering): left allmulticast mode [ 85.925107][ T37] IPVS: stop unused estimator thread 0... [ 85.931749][ T37] IPVS: stop unused estimator thread 0...