last executing test programs: 43.476671866s ago: executing program 1 (id=2003): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 42.583890749s ago: executing program 1 (id=2029): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x320000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 42.518200379s ago: executing program 1 (id=2031): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 41.291132907s ago: executing program 1 (id=2050): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 41.214079798s ago: executing program 1 (id=2054): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 40.886140823s ago: executing program 1 (id=2066): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x587, 0xd32}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x66d0, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 40.854793534s ago: executing program 32 (id=2066): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x587, 0xd32}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x66d0, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 35.129059855s ago: executing program 0 (id=2169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 35.083192686s ago: executing program 0 (id=2180): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 34.719686142s ago: executing program 0 (id=2179): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000380)="721fa8beb0dcec6dd07c238b793882ea91d6bfa6654fe625194f27c8134d3403a797c17d711ab4204bc6bf69474eb3aa7c3b294710f70cd5ea12c71776135ee4f0b95996", 0x44}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 34.625152383s ago: executing program 0 (id=2183): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20) 34.621338833s ago: executing program 0 (id=2184): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) write$UHID_CREATE2(r0, 0x0, 0x8) 34.541052424s ago: executing program 0 (id=2187): perf_event_open(&(0x7f00000001c0)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0xb, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 34.540600914s ago: executing program 33 (id=2187): perf_event_open(&(0x7f00000001c0)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0xb, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 6.96064182s ago: executing program 4 (id=2384): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0xb, 0x0, 0x1, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 6.467842487s ago: executing program 4 (id=2389): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 6.024768883s ago: executing program 2 (id=2393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 5.587975659s ago: executing program 4 (id=2396): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_bond\x00', {0xd}, 0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="414601", @ANYRES16=r2], 0x4) 5.171195045s ago: executing program 2 (id=2400): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 4.288041138s ago: executing program 3 (id=2405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) 4.078427901s ago: executing program 4 (id=2407): r0 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) listen(r1, 0x4) close_range(r0, r1, 0x0) 3.871345714s ago: executing program 2 (id=2408): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) add_key$keyring(&(0x7f0000000300), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 3.644323267s ago: executing program 3 (id=2409): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x4}, 0x400, 0xffffffff, 0x6, 0x5, 0x0, 0x40000001, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mq_open(0x0, 0x80, 0xa7, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pivot_root(&(0x7f0000000000)='.\x00', 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.592327492s ago: executing program 5 (id=2413): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) 2.384989806s ago: executing program 2 (id=2415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) tkill(r1, 0x12) 2.383674635s ago: executing program 3 (id=2416): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffbfe, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2.381943125s ago: executing program 6 (id=2417): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 2.156067609s ago: executing program 5 (id=2418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 2.153154309s ago: executing program 4 (id=2419): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0) 1.948005652s ago: executing program 3 (id=2420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.740809604s ago: executing program 6 (id=2421): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.104270843s ago: executing program 5 (id=2422): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100000, 0x0, 0x0, 0x4, 0x3ff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) close(r3) 1.102939044s ago: executing program 6 (id=2423): r0 = io_uring_setup(0x38eb, &(0x7f0000000300)={0x0, 0x342a, 0x1000, 0x0, 0x3d4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.088170334s ago: executing program 2 (id=2424): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000040), &(0x7f0000000200)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 1.087047954s ago: executing program 3 (id=2425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.072432504s ago: executing program 4 (id=2427): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x801, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1140, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.069747314s ago: executing program 6 (id=2426): r0 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) listen(r1, 0x4) close_range(r0, r1, 0x0) 863.404077ms ago: executing program 5 (id=2428): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 639.14557ms ago: executing program 6 (id=2429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 631.75449ms ago: executing program 5 (id=2430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) tkill(r1, 0x12) 432.360743ms ago: executing program 3 (id=2431): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) unshare(0x8000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$packet(0x11, 0x3, 0x300) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r2, 0xffffffffffffffff, 0x0) 224.614546ms ago: executing program 6 (id=2432): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 222.363936ms ago: executing program 2 (id=2433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=2434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) kernel console output (not intermixed with test programs): 8658): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 74.983263][ T5714] audit: backlog limit exceeded [ 75.328119][ T5752] ALSA: seq fatal error: cannot create timer (-19) [ 75.632811][ T5779] __nla_validate_parse: 6 callbacks suppressed [ 75.632827][ T5779] netlink: 96 bytes leftover after parsing attributes in process `syz.0.865'. [ 76.012781][ T5823] wireguard0: entered promiscuous mode [ 76.018424][ T5823] wireguard0: entered allmulticast mode [ 76.069243][ T5836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.076706][ T5836] IPv6: NLM_F_CREATE should be set when creating new route [ 76.092789][ T5834] pim6reg1: entered promiscuous mode [ 76.098145][ T5834] pim6reg1: entered allmulticast mode [ 76.465449][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 76.592650][ T5915] netlink: 96 bytes leftover after parsing attributes in process `syz.2.918'. [ 76.637203][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 76.885421][ T5964] netlink: 'syz.0.937': attribute type 4 has an invalid length. [ 77.965541][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 78.047300][ T6085] wireguard0: entered promiscuous mode [ 78.246662][ T6115] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 78.287876][ T6115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.322084][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 78.360615][ T6155] bond1 (unregistering): Released all slaves [ 78.451245][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 78.859693][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'. [ 78.869201][ T6262] team0 (unregistering): Port device team_slave_0 removed [ 78.887637][ T6262] team0 (unregistering): Port device team_slave_1 removed [ 79.027609][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 79.085458][ T6330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1038'. [ 79.283215][ T6361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6361 comm=syz.0.1049 [ 79.865240][ T6437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6437 comm=syz.3.1075 [ 79.889782][ T29] kauditd_printk_skb: 21910 callbacks suppressed [ 79.889799][ T29] audit: type=1400 audit(1747326250.767:50452): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.924942][ T29] audit: type=1400 audit(1747326250.767:50453): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.946277][ T29] audit: type=1400 audit(1747326250.767:50454): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.967533][ T29] audit: type=1400 audit(1747326250.767:50455): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.969961][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.988781][ T29] audit: type=1400 audit(1747326250.767:50456): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.995513][ T3045] audit: audit_lost=80 audit_rate_limit=0 audit_backlog_limit=64 [ 79.995530][ T3045] audit: backlog limit exceeded [ 80.020722][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.024786][ T29] audit: type=1400 audit(1747326250.767:50457): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.315764][ T6494] veth0_vlan: entered allmulticast mode [ 80.604123][ T6524] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 80.769738][ T6544] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 80.786047][ T6544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.810271][ T6544] erspan0: entered allmulticast mode [ 80.820559][ T6579] __nla_validate_parse: 4 callbacks suppressed [ 80.820576][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 80.830461][ T6544] bond2: (slave erspan0): making interface the new active one [ 80.853500][ T6544] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 81.298767][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 81.342755][ T6634] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1136'. [ 81.370183][ T6638] SELinux: syz.1.1137 (6638) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 81.494084][ T6658] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1145'. [ 81.508583][ T6660] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 81.807532][ T6692] $Hÿ: renamed from bond0 (while UP) [ 81.842541][ T6692] $Hÿ: entered promiscuous mode [ 81.847715][ T6692] bond_slave_0: entered promiscuous mode [ 81.853631][ T6692] bond_slave_1: entered promiscuous mode [ 81.919438][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 81.971667][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 82.050239][ T6709] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1168'. [ 82.351812][ T6792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1193'. [ 82.414491][ T6801] pim6reg1: entered promiscuous mode [ 82.419866][ T6801] pim6reg1: entered allmulticast mode [ 82.497515][ T6817] vlan2: entered allmulticast mode [ 82.502984][ T6817] bond0: entered allmulticast mode [ 82.508220][ T6817] bond_slave_0: entered allmulticast mode [ 82.514071][ T6817] bond_slave_1: entered allmulticast mode [ 82.520595][ T6817] dummy0: entered allmulticast mode [ 82.907490][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 84.211623][ T6943] wireguard1: entered promiscuous mode [ 84.485849][ T6977] pim6reg1: entered promiscuous mode [ 84.491486][ T6977] pim6reg1: entered allmulticast mode [ 84.898963][ T29] kauditd_printk_skb: 22610 callbacks suppressed [ 84.898980][ T29] audit: type=1400 audit(1747326255.767:69268): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.907198][ T7009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.926982][ T29] audit: type=1400 audit(1747326255.767:69269): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.933599][ T7009] audit: audit_lost=1348 audit_rate_limit=0 audit_backlog_limit=64 [ 84.954873][ T29] audit: type=1400 audit(1747326255.767:69270): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.963153][ T7009] audit: backlog limit exceeded [ 84.985032][ T29] audit: type=1400 audit(1747326255.767:69271): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.990370][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.011778][ T29] audit: type=1400 audit(1747326255.767:69272): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.018300][ T3045] audit: audit_lost=1349 audit_rate_limit=0 audit_backlog_limit=64 [ 85.356215][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 85.435192][ T7036] $Hÿ: renamed from bond0 (while UP) [ 85.461691][ T7036] $Hÿ: entered promiscuous mode [ 85.466783][ T7036] bond_slave_0: entered promiscuous mode [ 85.472865][ T7036] bond_slave_1: entered promiscuous mode [ 85.928168][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 86.481455][ T7134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7134 comm=syz.0.1325 [ 86.716083][ T7160] netlink: 'syz.1.1335': attribute type 7 has an invalid length. [ 86.723991][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 86.835539][ T7172] batadv3: entered allmulticast mode [ 86.866388][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 87.111987][ T7212] netlink: 588 bytes leftover after parsing attributes in process `syz.3.1353'. [ 87.177142][ T7219] bridge0: port 3(macvlan2) entered blocking state [ 87.183921][ T7219] bridge0: port 3(macvlan2) entered disabled state [ 87.197385][ T7219] macvlan2: entered allmulticast mode [ 87.203100][ T7219] bridge0: entered allmulticast mode [ 87.219026][ T7219] macvlan2: left allmulticast mode [ 87.224245][ T7219] bridge0: left allmulticast mode [ 87.351436][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 87.802059][ T7283] pim6reg1: entered promiscuous mode [ 87.807709][ T7283] pim6reg1: entered allmulticast mode [ 87.864141][ T7289] loop3: detected capacity change from 0 to 2048 [ 87.893822][ T7289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.974115][ T7289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.018765][ T7300] atomic_op ffff888119391128 conn xmit_atomic 0000000000000000 [ 88.032456][ T7289] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 88.044879][ T7289] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.044879][ T7289] [ 88.054666][ T7289] EXT4-fs (loop3): Total free blocks count 0 [ 88.060747][ T7289] EXT4-fs (loop3): Free/Dirty block details [ 88.066675][ T7289] EXT4-fs (loop3): free_blocks=2415919104 [ 88.072813][ T7289] EXT4-fs (loop3): dirty_blocks=48 [ 88.078498][ T7289] EXT4-fs (loop3): Block reservation details [ 88.084680][ T7289] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 88.146720][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.178795][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 88.345753][ T7327] pim6reg1: entered promiscuous mode [ 88.351565][ T7327] pim6reg1: entered allmulticast mode [ 88.744806][ T7351] 9pnet: p9_errstr2errno: server reported unknown error [ 89.143836][ T7366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.200130][ T7373] usb usb8: usbfs: process 7373 (syz.0.1398) did not claim interface 0 before use [ 89.218164][ T7366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.299774][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 89.308774][ T7381] netlink: 'syz.4.1400': attribute type 30 has an invalid length. [ 89.320556][ T7381] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.329450][ T7381] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.338176][ T7381] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.347013][ T7381] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.357815][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 89.367038][ T7381] netlink: 'syz.4.1400': attribute type 30 has an invalid length. [ 89.377283][ T7366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.460027][ T7366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.543041][ T7366] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.572377][ T7366] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.610164][ T7366] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.636384][ T7366] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.704456][ T7411] ref_ctr increment failed for inode: 0x556 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888117bfb700 [ 89.754522][ T7410] uprobe: syz.4.1404:7410 failed to unregister, leaking uprobe [ 89.907465][ T7429] 9pnet: p9_errstr2errno: server reported unknown error [ 89.915870][ T29] kauditd_printk_skb: 12065 callbacks suppressed [ 89.915887][ T29] audit: type=1400 audit(1747326260.787:80194): avc: denied { create } for pid=7438 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.942775][ T7441] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.956213][ T7441] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 89.965159][ T29] audit: type=1400 audit(1747326260.827:80195): avc: denied { ioctl } for pid=7438 comm="+}[@" path="socket:[15382]" dev="sockfs" ino=15382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.989591][ T29] audit: type=1400 audit(1747326260.827:80196): avc: denied { setopt } for pid=7438 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.011819][ T7441] bridge_slave_1 (unregistering): left allmulticast mode [ 90.019009][ T7441] bridge_slave_1 (unregistering): left promiscuous mode [ 90.026019][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.139581][ T29] audit: type=1400 audit(1747326261.017:80197): avc: denied { create } for pid=7471 comm="syz.3.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.193586][ T29] audit: type=1400 audit(1747326261.037:80198): avc: denied { connect } for pid=7471 comm="syz.3.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.235973][ T29] audit: type=1400 audit(1747326261.097:80199): avc: denied { write } for pid=7484 comm="syz.3.1421" name="mcfilter6" dev="proc" ino=4026532594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.307866][ T7500] loop3: detected capacity change from 0 to 128 [ 90.316688][ T29] audit: type=1400 audit(1747326261.167:80200): avc: denied { ioctl } for pid=7491 comm="syz.1.1424" path="socket:[15423]" dev="sockfs" ino=15423 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.341792][ T29] audit: type=1400 audit(1747326261.167:80201): avc: denied { create } for pid=7488 comm="syz.2.1423" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.391063][ T29] audit: type=1400 audit(1747326261.247:80202): avc: denied { mount } for pid=7497 comm="syz.3.1426" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 90.416013][ T7493] syzkaller0: entered promiscuous mode [ 90.424231][ T7493] syzkaller0 (unregistering): left promiscuous mode [ 90.429076][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.429076][ T7500] loop3: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 90.448822][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.448822][ T7500] loop3: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 90.462589][ T7500] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 90.473466][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.473466][ T7500] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 90.486952][ T7500] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 90.498615][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.498615][ T7500] loop3: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 90.512230][ T7500] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 90.526141][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.526141][ T7500] loop3: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 90.540610][ T7500] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 90.552119][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.552119][ T7500] loop3: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 90.565780][ T7500] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 90.576898][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.576898][ T7500] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 90.590798][ T7500] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 90.605607][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.605607][ T7500] loop3: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 90.619650][ T7500] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 90.629478][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.629478][ T7500] loop3: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 90.644156][ T7500] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 90.653285][ T7500] syz.3.1426: attempt to access beyond end of device [ 90.653285][ T7500] loop3: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 90.666836][ T7500] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 90.678990][ T7500] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 90.714530][ T29] audit: type=1400 audit(1747326261.587:80203): avc: denied { watch } for pid=7528 comm="syz.2.1432" path="/322" dev="tmpfs" ino=1687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.785165][ T7537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7537 comm=syz.2.1434 [ 91.064114][ T7551] loop3: detected capacity change from 0 to 1024 [ 91.094568][ T7551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.181063][ T7551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.211414][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.348827][ T7580] loop3: detected capacity change from 0 to 2048 [ 91.389448][ T7433] loop3: p1 < > p4 [ 91.394642][ T7433] loop3: p4 size 8388608 extends beyond EOD, truncated [ 91.405012][ T7580] loop3: p1 < > p4 [ 91.410999][ T7580] loop3: p4 size 8388608 extends beyond EOD, truncated [ 91.443085][ T7580] SELinux: failed to load policy [ 91.470454][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'. [ 91.503402][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 91.665258][ T7623] hub 9-0:1.0: USB hub found [ 91.673541][ T7623] hub 9-0:1.0: 8 ports detected [ 91.781499][ T7637] loop4: detected capacity change from 0 to 1024 [ 91.789120][ T7637] EXT4-fs: Ignoring removed nobh option [ 91.795160][ T7637] ext2: Unknown parameter 'dont_hash' [ 91.804938][ T7637] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 91.846497][ T7645] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1451'. [ 92.038678][ T7682] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 92.070359][ T7678] syzkaller0: entered promiscuous mode [ 92.076064][ T7678] syzkaller0: entered allmulticast mode [ 92.108592][ T7693] loop2: detected capacity change from 0 to 1024 [ 92.129721][ T7693] EXT4-fs: Ignoring removed nobh option [ 92.141267][ T7693] ext2: Unknown parameter 'dont_hash' [ 92.150624][ T7693] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 92.218506][ T7704] loop1: detected capacity change from 0 to 1024 [ 92.254696][ T7704] EXT4-fs: Ignoring removed nobh option [ 92.260419][ T7704] EXT4-fs: Ignoring removed nobh option [ 92.286896][ T7704] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 92.335539][ T7704] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.1457: inode #4294967295: comm syz.1.1457: iget: illegal inode # [ 92.470751][ T7739] loop3: detected capacity change from 0 to 1024 [ 92.481009][ T7704] EXT4-fs (loop1): no journal found [ 92.486377][ T7704] EXT4-fs (loop1): can't get journal size [ 92.499715][ T7739] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.507715][ T7739] EXT4-fs: Ignoring removed orlov option [ 92.519764][ T7739] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 92.539532][ T7704] EXT4-fs (loop1): failed to initialize system zone (-22) [ 92.565286][ T7739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.597830][ T7704] EXT4-fs (loop1): mount failed [ 92.652230][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.955935][ T7769] syzkaller0: entered promiscuous mode [ 92.961661][ T7769] syzkaller0: entered allmulticast mode [ 93.185815][ T7791] tipc: Enabled bearer , priority 0 [ 93.194773][ T7789] tipc: Resetting bearer [ 93.201151][ T7684] syz.1.1457 (7684) used greatest stack depth: 9400 bytes left [ 93.208895][ T7699] syz.1.1457 (7699) used greatest stack depth: 8472 bytes left [ 93.225611][ T7789] tipc: Disabling bearer [ 93.374701][ T7803] netlink: 'syz.2.1491': attribute type 1 has an invalid length. [ 93.537017][ T7671] syz.1.1457 (7671) used greatest stack depth: 6208 bytes left [ 93.651046][ T7827] loop1: detected capacity change from 0 to 512 [ 93.658509][ T7827] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.662460][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1498'. [ 93.683977][ T7827] EXT4-fs (loop1): 1 truncate cleaned up [ 93.690301][ T7827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.733982][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.856963][ T7846] loop3: detected capacity change from 0 to 512 [ 93.879445][ T7846] EXT4-fs: Ignoring removed bh option [ 93.885598][ T7846] EXT4-fs: Ignoring removed orlov option [ 93.905655][ T7846] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 94.077452][ T7873] 9pnet: p9_errstr2errno: server reported unknown error [ 94.273782][ T7902] pim6reg1: entered promiscuous mode [ 94.279286][ T7902] pim6reg1: entered allmulticast mode [ 94.312304][ T7910] IPv6: sit1: Disabled Multicast RS [ 94.404749][ T7924] netlink: 'syz.3.1515': attribute type 11 has an invalid length. [ 94.413103][ T7924] netlink: 448 bytes leftover after parsing attributes in process `syz.3.1515'. [ 94.456948][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'. [ 94.466387][ T7934] IPVS: Error joining to the multicast group [ 94.817792][ T7970] pim6reg1: entered promiscuous mode [ 94.823199][ T7970] pim6reg1: entered allmulticast mode [ 95.170164][ T7984] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1528'. [ 95.189079][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 95.213723][ T7987] bond_slave_1: mtu greater than device maximum [ 95.275057][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 95.275072][ T29] audit: type=1400 audit(1747326266.147:80382): avc: denied { firmware_load } for pid=7981 comm="syz.0.1529" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 95.383525][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 95.399422][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1533'. [ 95.513272][ T8010] syzkaller0: entered promiscuous mode [ 95.518987][ T8010] syzkaller0: entered allmulticast mode [ 95.544387][ T8016] 9pnet: p9_errstr2errno: server reported unknown error [ 95.572828][ T8020] netlink: 'syz.1.1540': attribute type 21 has an invalid length. [ 95.743466][ T29] audit: type=1326 audit(1747326266.617:80383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 95.802573][ T8057] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 95.828971][ T8057] syzkaller0: entered promiscuous mode [ 95.834684][ T8057] syzkaller0: entered allmulticast mode [ 95.839283][ T29] audit: type=1326 audit(1747326266.647:80384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 95.864193][ T29] audit: type=1326 audit(1747326266.647:80385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 95.888087][ T29] audit: type=1326 audit(1747326266.647:80386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 95.911872][ T29] audit: type=1326 audit(1747326266.647:80387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 95.935873][ T29] audit: type=1326 audit(1747326266.647:80388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 95.959739][ T29] audit: type=1326 audit(1747326266.657:80389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 95.984373][ T29] audit: type=1326 audit(1747326266.657:80390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 95.992492][ T8070] netlink: 'syz.4.1552': attribute type 3 has an invalid length. [ 96.008440][ T29] audit: type=1326 audit(1747326266.657:80391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 96.028602][ T8069] loop3: detected capacity change from 0 to 512 [ 96.079982][ T8069] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 96.103317][ T8069] EXT4-fs (loop3): invalid journal inode [ 96.111764][ T8069] EXT4-fs (loop3): can't get journal size [ 96.125224][ T8069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 96.133572][ T8069] System zones: 1-12, 13-13 [ 96.141307][ T8069] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.1554: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 96.158870][ T8069] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1554: couldn't read orphan inode 15 (err -117) [ 96.177558][ T8069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.381339][ T8112] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 96.398246][ T8112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.457235][ T8112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.464460][ T8112] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.476677][ T8112] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 96.493355][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.505045][ T8148] ip6erspan0: entered promiscuous mode [ 96.517324][ T8090] __nla_validate_parse: 2 callbacks suppressed [ 96.517417][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 96.522962][ T8148] bond2: (slave ip6erspan0): making interface the new active one [ 96.523772][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 96.551641][ T8148] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 96.654764][ T8172] SELinux: Context system_u:object_r:su_exec_t:s0 is not valid (left unmapped). [ 96.727906][ T8187] loop4: detected capacity change from 0 to 764 [ 96.770254][ T8192] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1573'. [ 96.873140][ T8223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1577'. [ 96.873427][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 96.914485][ T8216] ip6gre1: entered allmulticast mode [ 97.005238][ T8262] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 97.052434][ T8262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.147232][ T8262] bond1: (slave veth3): Enslaving as an active interface with a down link [ 97.227307][ T8322] vlan2: entered allmulticast mode [ 97.232530][ T8322] bond1: entered allmulticast mode [ 97.245192][ T8322] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 97.567050][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.612771][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.640057][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.666443][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.696494][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.723469][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.753367][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.784219][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.805629][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 97.833740][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8381 comm=syz.2.1593 [ 98.092264][ T8412] loop4: detected capacity change from 0 to 512 [ 98.101931][ T8412] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 98.114993][ T8412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c129, mo2=0002] [ 98.123376][ T8412] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.1598: corrupted in-inode xattr: e_value size too large [ 98.138060][ T8412] EXT4-fs (loop4): Remounting filesystem read-only [ 98.151512][ T8412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.395790][ T8427] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 98.412040][ T8427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.445891][ T8427] bond3: (slave veth3): Enslaving as an active interface with a down link [ 98.473722][ T8427] vlan2: entered allmulticast mode [ 98.478947][ T8427] bond3: entered allmulticast mode [ 98.485051][ T8427] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 98.602436][ T8501] netlink: 'syz.3.1604': attribute type 10 has an invalid length. [ 98.611458][ T8501] batman_adv: batadv0: Adding interface: team0 [ 98.617665][ T8501] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.642982][ T8501] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 98.699907][ T8412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.784145][ T8519] syzkaller0: entered promiscuous mode [ 98.789716][ T8519] syzkaller0: entered allmulticast mode [ 98.879869][ T8542] vhci_hcd: default hub control req: 230b v0011 i0002 l0 [ 99.734410][ T8575] netlink: 'syz.3.1629': attribute type 7 has an invalid length. [ 99.742716][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 99.914728][ T8593] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 99.937237][ T8593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.991061][ T8631] bond3: (slave veth5): Enslaving as an active interface with a down link [ 100.033789][ T8593] vlan2: entered allmulticast mode [ 100.039049][ T8593] bond3: entered allmulticast mode [ 100.048246][ T8593] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 100.074121][ T8657] pim6reg1: entered promiscuous mode [ 100.079619][ T8657] pim6reg1: entered allmulticast mode [ 100.173963][ T8689] syzkaller0: entered promiscuous mode [ 100.179706][ T8689] syzkaller0: entered allmulticast mode [ 100.288349][ T8706] vlan2: entered allmulticast mode [ 100.311722][ T8711] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1645'. [ 100.323430][ T8711] 0ªX¹¦À: renamed from caif0 [ 100.348732][ T8711] 0ªX¹¦À: entered allmulticast mode [ 100.354752][ T8711] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.357793][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 100.357809][ T29] audit: type=1326 audit(1747326271.227:80578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42054be969 code=0x7ffc0000 [ 100.461424][ T8717] loop3: detected capacity change from 0 to 512 [ 100.479329][ T29] audit: type=1326 audit(1747326271.297:80579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42054be969 code=0x7ffc0000 [ 100.491072][ T8717] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.503185][ T29] audit: type=1326 audit(1747326271.297:80580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f42054be969 code=0x7ffc0000 [ 100.536513][ T29] audit: type=1326 audit(1747326271.297:80581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42054be969 code=0x7ffc0000 [ 100.560457][ T29] audit: type=1326 audit(1747326271.297:80582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42054be969 code=0x7ffc0000 [ 100.584564][ T8722] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.594593][ T29] audit: type=1326 audit(1747326271.297:80583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f42054be969 code=0x7ffc0000 [ 100.618430][ T29] audit: type=1326 audit(1747326271.297:80584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42054be969 code=0x7ffc0000 [ 100.642180][ T29] audit: type=1326 audit(1747326271.297:80585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42054be969 code=0x7ffc0000 [ 100.686257][ T8717] EXT4-fs (loop3): 1 truncate cleaned up [ 100.694675][ T8717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.729511][ T8732] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 100.759388][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.769080][ T29] audit: type=1400 audit(1747326271.597:80586): avc: denied { read write } for pid=8716 comm="syz.3.1647" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.792132][ T29] audit: type=1400 audit(1747326271.597:80587): avc: denied { open } for pid=8716 comm="syz.3.1647" path="/380/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.853069][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.893229][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 100.896266][ T8768] bond0: (slave veth3): Enslaving as an active interface with a down link [ 100.902282][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 100.923251][ T8732] vlan2: entered allmulticast mode [ 100.928546][ T8732] bond0: entered allmulticast mode [ 100.947353][ T8732] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 101.034234][ T8807] unsupported nla_type 52263 [ 101.233951][ T8834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1666'. [ 101.275313][ T8841] loop3: detected capacity change from 0 to 512 [ 101.293916][ T8841] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.324157][ T8841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.354710][ T8855] loop4: detected capacity change from 0 to 164 [ 101.358402][ T8841] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.425689][ T8855] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.427695][ T8841] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 101.444367][ T8841] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.1668: failed to insert inode 16: doubly allocated? [ 101.467888][ T8855] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.487939][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.489950][ T8855] Symlink component flag not implemented [ 101.502713][ T8855] Symlink component flag not implemented [ 101.512409][ T8855] Symlink component flag not implemented (7) [ 101.518447][ T8855] Symlink component flag not implemented (116) [ 101.584706][ T8883] pim6reg1: entered promiscuous mode [ 101.590347][ T8883] pim6reg1: entered allmulticast mode [ 101.612993][ T8890] netlink: 'syz.4.1677': attribute type 1 has an invalid length. [ 101.620841][ T8890] __nla_validate_parse: 1 callbacks suppressed [ 101.620856][ T8890] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1677'. [ 101.703731][ T8890] SELinux: policydb version 998538475 does not match my version range 15-34 [ 101.737105][ T8890] SELinux: failed to load policy [ 101.752141][ T8890] loop4: detected capacity change from 0 to 512 [ 101.773934][ T8890] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 101.783348][ T8890] EXT4-fs (loop4): failed to open journal device unknown-block(7,45) -6 [ 101.851913][ T8917] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 102.108784][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1687'. [ 102.202389][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 102.243853][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 102.292006][ T8983] loop3: detected capacity change from 0 to 128 [ 102.300737][ T8981] xt_hashlimit: size too large, truncated to 1048576 [ 102.310415][ T8983] EXT4-fs: Ignoring removed nobh option [ 102.542270][ T8983] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.566520][ T8983] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.722220][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.997853][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 103.116622][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1698'. [ 103.285192][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 103.402602][ T9112] blktrace: Concurrent blktraces are not allowed on sg0 [ 103.442181][ T9123] pim6reg1: entered promiscuous mode [ 103.447561][ T9123] pim6reg1: entered allmulticast mode [ 103.495362][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.503210][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.511134][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.518960][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.526784][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.534659][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.542541][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.550629][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.558392][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.563347][ T9142] loop3: detected capacity change from 0 to 1024 [ 103.566475][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.580704][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.588563][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.593448][ T9142] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.596455][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.613093][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.620933][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.628725][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.636632][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.644534][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.652433][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.660255][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.669633][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.677546][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.685436][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.693549][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.701366][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.709072][ T9142] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.711792][ T9142] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.719528][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.719583][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.719609][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.719635][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.719661][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.730485][ T9142] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.735432][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.753412][ T9142] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 103.759019][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.759050][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.759076][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.769801][ T9142] EXT4-fs (loop3): Remounting filesystem read-only [ 103.773306][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.785055][ T9142] EXT4-fs (loop3): 1 orphan inode deleted [ 103.790467][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.799784][ T9142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.805926][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.861497][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.869288][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.877152][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.884947][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.892804][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.900891][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 103.910075][ T3391] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.917833][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.949057][ T9] page_pool_release_retry() stalled pool shutdown: id 23, 2 inflight 60 sec [ 103.988386][ T9163] fido_id[9163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.055557][ T9179] syzkaller0: entered promiscuous mode [ 104.061226][ T9179] syzkaller0: entered allmulticast mode [ 104.140858][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 104.151318][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 104.188675][ T9210] bridge: RTM_NEWNEIGH with invalid ether address [ 104.260497][ T9218] x_tables: duplicate underflow at hook 2 [ 104.575565][ T9267] syzkaller0: entered promiscuous mode [ 104.581303][ T9267] syzkaller0: entered allmulticast mode [ 104.687787][ T9303] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1761'. [ 104.915209][ T9327] pim6reg1: entered promiscuous mode [ 104.920688][ T9327] pim6reg1: entered allmulticast mode [ 105.109788][ T9345] pim6reg1: entered promiscuous mode [ 105.115186][ T9345] pim6reg1: entered allmulticast mode [ 105.144354][ T9349] netlink: 'wg1': attribute type 4 has an invalid length. [ 105.183552][ T9349] : renamed from $Hÿ [ 105.408128][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 105.408157][ T29] audit: type=1400 audit(1747326276.277:80768): avc: denied { write } for pid=9378 comm="syz.1.1783" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.411597][ T9379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.466373][ T9379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.895198][ T29] audit: type=1400 audit(1747326276.767:80769): avc: denied { write } for pid=9393 comm="syz.4.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.920681][ T29] audit: type=1400 audit(1747326276.797:80770): avc: denied { read } for pid=9393 comm="syz.4.1786" path="socket:[17875]" dev="sockfs" ino=17875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.985504][ T9399] SELinux: failed to load policy [ 106.044419][ T9409] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 106.077611][ T9413] vhci_hcd: default hub control req: 230b v0011 i0002 l0 [ 106.196415][ T9426] ip6gre1: entered allmulticast mode [ 106.268853][ T9443] bridge: RTM_NEWNEIGH with invalid ether address [ 106.285825][ T29] audit: type=1326 audit(1747326277.147:80771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 106.309713][ T29] audit: type=1326 audit(1747326277.147:80772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 106.333589][ T29] audit: type=1326 audit(1747326277.147:80773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 106.357421][ T29] audit: type=1326 audit(1747326277.147:80774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 106.380979][ T29] audit: type=1326 audit(1747326277.147:80775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 106.404531][ T29] audit: type=1326 audit(1747326277.147:80776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48181fd2d0 code=0x7ffc0000 [ 106.428441][ T29] audit: type=1326 audit(1747326277.147:80777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 106.562628][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 106.570493][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 106.581612][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 106.589634][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.597438][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.608248][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.616081][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.623951][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.631677][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.639503][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.647248][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.655063][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.662822][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.670795][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.678783][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 106.699106][ T9] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 106.727384][ T9477] fido_id[9477]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.234067][ T9513] netlink: 'syz.2.1819': attribute type 3 has an invalid length. [ 107.404071][ T9536] macsec0: entered allmulticast mode [ 107.409633][ T9536] bridge0: entered allmulticast mode [ 107.415559][ T9536] bridge0: port 2(macsec0) entered blocking state [ 107.422234][ T9536] bridge0: port 2(macsec0) entered disabled state [ 107.428834][ T9525] Falling back ldisc for ttyS3. [ 107.471185][ T9536] bridge0: left allmulticast mode [ 107.827449][ T9607] wg2: entered promiscuous mode [ 107.832513][ T9607] wg2: entered allmulticast mode [ 107.887459][ T9619] __nla_validate_parse: 4 callbacks suppressed [ 107.887529][ T9619] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1840'. [ 107.905815][ T9619] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.916890][ T9619] bond_slave_0: left promiscuous mode [ 107.927972][ T9619] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.939720][ T9619] bond_slave_1: left promiscuous mode [ 107.948626][ T9619] $Hÿ (unregistering): Released all slaves [ 107.987447][ T9622] hub 9-0:1.0: USB hub found [ 108.000462][ T9622] hub 9-0:1.0: 8 ports detected [ 108.034650][ T9630] loop3: detected capacity change from 0 to 1024 [ 108.095163][ T9630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.179134][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.330818][ T9716] netlink: 'syz.0.1856': attribute type 4 has an invalid length. [ 108.355468][ T9716] netlink: 'syz.0.1856': attribute type 4 has an invalid length. [ 108.497473][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 108.559010][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1868'. [ 108.676916][ T9777] loop3: detected capacity change from 0 to 512 [ 108.712932][ T9777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.725812][ T9777] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.761118][ T9801] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.764205][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.898656][ T9816] syzkaller0: entered promiscuous mode [ 108.904269][ T9816] syzkaller0: entered allmulticast mode [ 108.943667][ T9826] ref_ctr_offset mismatch. inode: 0x8cf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 109.193016][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 109.506094][ T9855] loop3: detected capacity change from 0 to 2048 [ 109.524215][ T9855] EXT4-fs: Ignoring removed bh option [ 109.562491][ T9855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.958118][ T9859] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.973888][ T9859] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 109.986243][ T9859] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.986243][ T9859] [ 109.996016][ T9859] EXT4-fs (loop3): Total free blocks count 0 [ 110.002039][ T9859] EXT4-fs (loop3): Free/Dirty block details [ 110.007979][ T9859] EXT4-fs (loop3): free_blocks=2415919104 [ 110.013778][ T9859] EXT4-fs (loop3): dirty_blocks=8224 [ 110.019161][ T9859] EXT4-fs (loop3): Block reservation details [ 110.025264][ T9859] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 110.059628][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 110.078868][ T9861] syzkaller0: entered promiscuous mode [ 110.084654][ T9861] syzkaller0: entered allmulticast mode [ 110.432767][ T9909] loop4: detected capacity change from 0 to 512 [ 110.459389][ T9917] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1903'. [ 110.479332][ T9909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.497199][ T9909] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.578343][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 110.578358][ T29] audit: type=1326 audit(1747326281.447:80833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.666508][ T29] audit: type=1326 audit(1747326281.487:80834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.690112][ T29] audit: type=1326 audit(1747326281.487:80835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.713786][ T29] audit: type=1326 audit(1747326281.487:80836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.737394][ T29] audit: type=1326 audit(1747326281.487:80837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.761116][ T29] audit: type=1326 audit(1747326281.487:80838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.784662][ T29] audit: type=1326 audit(1747326281.487:80839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.808329][ T29] audit: type=1326 audit(1747326281.487:80840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.831889][ T29] audit: type=1326 audit(1747326281.487:80841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.855837][ T29] audit: type=1326 audit(1747326281.487:80842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.1.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48181fe969 code=0x7ffc0000 [ 110.886921][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.941137][ T9948] netlink: 'syz.1.1912': attribute type 3 has an invalid length. [ 110.952808][ T9949] loop3: detected capacity change from 0 to 2048 [ 110.999822][ T7433] Alternate GPT is invalid, using primary GPT. [ 111.006209][ T7433] loop3: p1 p2 p3 [ 111.025550][ T9949] Alternate GPT is invalid, using primary GPT. [ 111.032014][ T9949] loop3: p1 p2 p3 [ 111.037521][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 111.053929][ T9988] loop4: detected capacity change from 0 to 1024 [ 111.066174][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.099505][ T9988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.134151][ T9988] EXT4-fs: Mount option(s) incompatible with ext2 [ 111.167677][ T7433] udevd[7433]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 111.168659][ T7432] udevd[7432]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 111.190135][ T7284] udevd[7284]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 111.208235][T10009] ref_ctr increment failed for inode: 0x90c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888117bfcd00 [ 111.233031][T10009] uprobe: syz.3.1918:10009 failed to unregister, leaking uprobe [ 111.254987][ T2969] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 111.263072][ T2969] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.280917][T10024] loop4: detected capacity change from 0 to 1024 [ 111.303465][T10024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.328270][T10024] EXT4-fs: Mount option(s) incompatible with ext2 [ 111.758685][T10094] loop4: detected capacity change from 0 to 1024 [ 111.777543][T10094] EXT4-fs: Ignoring removed nobh option [ 111.783473][T10094] EXT4-fs: Ignoring removed bh option [ 111.790060][T10096] random: crng reseeded on system resumption [ 111.841962][T10094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.876023][T10094] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 385-513 which overlap fs metadata [ 111.903756][T10094] EXT4-fs (loop4): pa ffff8881072625b0: logic 16, phys. 129, len 24 [ 111.912060][T10094] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 111.970447][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.416187][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.424060][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.431992][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.439995][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.447809][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.455670][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.463672][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.471659][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.479463][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.487389][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.495183][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.503044][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.510870][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.518619][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.526403][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.534174][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.542034][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.549884][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.557641][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.565570][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.573555][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.581349][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.589166][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.597052][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.604839][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.612708][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.620519][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.628329][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.636123][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.643949][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.651734][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.659512][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.667258][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.675079][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.682852][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.690646][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.698420][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.706219][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.713993][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.721854][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.729687][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.737540][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.745310][ T9] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 112.759102][ T9] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.793733][T10159] fido_id[10159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.845784][T10167] pim6reg1: entered promiscuous mode [ 112.851212][T10167] pim6reg1: entered allmulticast mode [ 112.931784][T10193] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1961'. [ 112.946008][T10193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1961'. [ 113.058339][T10210] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 113.083838][ T3393] IPVS: starting estimator thread 0... [ 113.116571][T10223] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1968'. [ 113.130349][T10210] bond4: entered promiscuous mode [ 113.135799][T10210] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.189163][T10216] IPVS: using max 1824 ests per chain, 91200 per kthread [ 113.226903][ T3393] Process accounting resumed [ 113.241071][T10223] batadv3: entered promiscuous mode [ 113.246334][T10223] batadv3: entered allmulticast mode [ 113.263005][T10223] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 113.290666][T10223] bond4: (slave batadv3): making interface the new active one [ 113.316795][T10223] bond4: (slave batadv3): Enslaving as an active interface with an up link [ 113.476314][T10261] Process accounting resumed [ 114.208736][T10341] loop4: detected capacity change from 0 to 128 [ 114.338838][T10335] openvswitch: netlink: Message has 6 unknown bytes. [ 114.985465][T10364] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 114.992166][T10364] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.999991][T10364] vhci_hcd vhci_hcd.0: Device attached [ 115.115308][T10366] vhci_hcd: connection closed [ 115.115763][ T51] vhci_hcd: stop threads [ 115.125160][ T51] vhci_hcd: release socket [ 115.129719][ T51] vhci_hcd: disconnect device [ 115.179863][ T3391] vhci_hcd: vhci_device speed not set [ 115.432367][T10416] sd 0:0:1:0: device reset [ 115.667017][T10453] loop4: detected capacity change from 0 to 128 [ 115.839666][T10468] netlink: 'syz.0.2018': attribute type 7 has an invalid length. [ 115.847459][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 115.922788][T10472] batadv_slave_0: entered allmulticast mode [ 115.930059][T10471] batadv_slave_0: left allmulticast mode [ 115.973416][T10481] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2022'. [ 116.022139][ T3393] IPVS: starting estimator thread 0... [ 116.119140][T10486] IPVS: using max 1680 ests per chain, 84000 per kthread [ 116.430792][T10534] pim6reg1: entered promiscuous mode [ 116.436198][T10534] pim6reg1: entered allmulticast mode [ 116.508853][T10555] random: crng reseeded on system resumption [ 116.556309][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 116.556323][ T29] audit: type=1400 audit(1747326287.427:81003): avc: denied { read } for pid=10554 comm="syz.0.2034" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 116.585638][ T29] audit: type=1400 audit(1747326287.427:81004): avc: denied { open } for pid=10554 comm="syz.0.2034" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 116.615196][T10561] loop3: detected capacity change from 0 to 1024 [ 116.622982][T10561] EXT4-fs: Ignoring removed oldalloc option [ 116.628046][ T29] audit: type=1326 audit(1747326287.497:81005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.2035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7ff9c01b5927 code=0x0 [ 116.629130][T10561] EXT4-fs: Ignoring removed oldalloc option [ 116.682320][ T29] audit: type=1400 audit(1747326287.537:81006): avc: denied { create } for pid=10564 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.854551][T10561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.094757][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.185053][T10610] loop4: detected capacity change from 0 to 1024 [ 117.219640][T10610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.235125][T10610] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.338564][T10610] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2042: bg 0: block 393: padding at end of block bitmap is not set [ 117.357136][T10610] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 117.387466][T10610] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.387466][T10610] [ 117.505391][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.519927][ T29] audit: type=1400 audit(1747326288.387:81007): avc: denied { mounton } for pid=10633 comm="syz.1.2050" path="/340/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 117.634505][ T29] audit: type=1400 audit(1747326288.457:81008): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.748660][ T29] audit: type=1400 audit(1747326288.617:81009): avc: denied { create } for pid=10663 comm="syz.2.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.768861][ T29] audit: type=1400 audit(1747326288.627:81010): avc: denied { ioctl } for pid=10663 comm="syz.2.2059" path="socket:[20659]" dev="sockfs" ino=20659 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.859282][ T29] audit: type=1326 audit(1747326288.717:81011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10686 comm="syz.2.2064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x0 [ 117.980736][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 118.022256][ T29] audit: type=1400 audit(1747326288.897:81012): avc: denied { mounton } for pid=10697 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 118.046225][T10696] batman_adv: batadv0: Removing interface: team0 [ 118.065130][T10696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.073187][T10696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.326998][T10827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2075'. [ 118.353749][T10697] chnl_net:caif_netlink_parms(): no params data found [ 118.442506][T10697] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.449729][T10697] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.457271][T10697] bridge_slave_0: entered allmulticast mode [ 118.457538][T10878] netlink: 'syz.4.2078': attribute type 4 has an invalid length. [ 118.468157][T10697] bridge_slave_0: entered promiscuous mode [ 118.482054][T10697] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.488602][T10878] netlink: 'syz.4.2078': attribute type 4 has an invalid length. [ 118.490106][T10697] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.504710][T10697] bridge_slave_1: entered allmulticast mode [ 118.511599][T10697] bridge_slave_1: entered promiscuous mode [ 118.535672][T10697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.546512][T10697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.596758][T10697] team0: Port device team_slave_0 added [ 118.618283][T10697] team0: Port device team_slave_1 added [ 118.648233][T10697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.655340][T10697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.682032][T10697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.694482][T10697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.701811][T10697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.728204][T10697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.770784][T10697] hsr_slave_0: entered promiscuous mode [ 118.785802][T10697] hsr_slave_1: entered promiscuous mode [ 118.793561][T10697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.803851][T10697] Cannot create hsr debugfs directory [ 118.809482][T11005] bridge: RTM_NEWNEIGH with invalid ether address [ 118.942303][T10697] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.953358][T10697] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.976147][T10697] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.986641][T10697] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.081789][T10697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.118554][T10697] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.156807][T10697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.167271][T10697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.206055][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.213282][T10537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.223614][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.230710][T10537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.246879][T11106] loop4: detected capacity change from 0 to 512 [ 119.347498][T10697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.439666][T11106] EXT4-fs (loop4): 1 orphan inode deleted [ 119.445840][T11106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.465211][T10537] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:38: Failed to release dquot type 1 [ 119.502527][T11106] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.545946][T11102] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.616264][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.739555][T10697] veth0_vlan: entered promiscuous mode [ 119.748404][T10697] veth1_vlan: entered promiscuous mode [ 119.768031][T10697] veth0_macvtap: entered promiscuous mode [ 119.780321][T10697] veth1_macvtap: entered promiscuous mode [ 119.796238][T10697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.807540][T10697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.817486][T10697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.828056][T10697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.837994][T10697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.849216][T10697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.876691][T10697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.880801][T11141] netlink: 'syz.3.2096': attribute type 1 has an invalid length. [ 119.888695][T10697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.902315][T10697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.912863][T10697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.923459][T10697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.933314][T10697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.945059][T10697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.964575][T10697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.966414][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 120.001297][T10697] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.011004][T10697] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.019922][T10697] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.028673][T10697] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.074265][T11187] netlink: 'syz.4.2098': attribute type 39 has an invalid length. [ 120.076527][T11147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.095337][T11147] bond5: (slave batadv0): Enslaving as a backup interface with an up link [ 120.107758][T11141] bond5 (unregistering): (slave batadv0): Releasing backup interface [ 120.120905][T11141] bond5 (unregistering): Released all slaves [ 120.217905][T11227] syzkaller0: entered allmulticast mode [ 120.233009][T11227] syzkaller0: entered promiscuous mode [ 120.242006][T11227] syzkaller0 (unregistering): left promiscuous mode [ 120.248757][T11227] syzkaller0 (unregistering): left allmulticast mode [ 120.314939][T11246] xt_hashlimit: max too large, truncated to 1048576 [ 120.535138][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.544923][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.609121][T11283] Falling back ldisc for ttyS3. [ 121.357901][T11328] SELinux: failed to load policy [ 121.743141][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 121.743159][ T29] audit: type=1326 audit(1747326292.617:81315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.782469][ T29] audit: type=1326 audit(1747326292.647:81316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.806989][ T29] audit: type=1326 audit(1747326292.647:81317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.831586][ T29] audit: type=1326 audit(1747326292.647:81318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.855356][ T29] audit: type=1326 audit(1747326292.647:81319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.879664][ T29] audit: type=1326 audit(1747326292.657:81320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.903524][ T29] audit: type=1326 audit(1747326292.657:81321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.928035][ T29] audit: type=1326 audit(1747326292.657:81322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.952322][ T29] audit: type=1326 audit(1747326292.657:81323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 121.975982][ T29] audit: type=1326 audit(1747326292.657:81324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd52cefe969 code=0x7ffc0000 [ 122.361753][T11388] bridge: RTM_NEWNEIGH with invalid ether address [ 122.449016][T11402] SELinux: failed to load policy [ 122.620701][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2144'. [ 122.629952][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2144'. [ 122.639955][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2144'. [ 122.685762][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2144'. [ 122.694957][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2144'. [ 122.715112][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2144'. [ 122.745073][T11438] netlink: 'syz.3.2147': attribute type 27 has an invalid length. [ 122.762339][T11438] erspan0: left allmulticast mode [ 122.796388][T11438] veth0_vlan: left allmulticast mode [ 122.802698][T11438] bond1: left promiscuous mode [ 122.807673][T11438] batadv1: left promiscuous mode [ 122.812947][T11438] batadv1: left allmulticast mode [ 122.818081][T11438] batadv2: left promiscuous mode [ 122.823728][T11438] batadv2: left allmulticast mode [ 122.832475][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2144'. [ 122.863420][T11438] bond4: left promiscuous mode [ 122.882131][T11438] batadv3: left promiscuous mode [ 122.887150][T11438] batadv3: left allmulticast mode [ 122.910077][T11443] batadv_slave_1: entered allmulticast mode [ 122.946493][T11438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.954976][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.965807][T11438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.007904][T11433] batadv_slave_1: left allmulticast mode [ 123.238741][T11472] selinux_netlink_send: 53 callbacks suppressed [ 123.238759][T11472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11472 comm=syz.4.2157 [ 123.257749][T11472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11472 comm=syz.4.2157 [ 123.720870][T11514] __nla_validate_parse: 2 callbacks suppressed [ 123.720886][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2170'. [ 123.812657][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 124.422939][T11639] TCP: out of memory -- consider tuning tcp_mem [ 124.432571][T11639] ------------[ cut here ]------------ [ 124.438171][T11639] WARNING: CPU: 1 PID: 11639 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x430/0x440 [ 124.447861][T11639] Modules linked in: [ 124.451922][T11639] CPU: 1 UID: 0 PID: 11639 Comm: syz.3.2192 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 124.464539][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 124.474693][T11639] RIP: 0010:inet_sock_destruct+0x430/0x440 [ 124.480606][T11639] Code: 0f 0b 90 e9 d5 fe ff ff e8 ed 75 bc fc 90 0f 0b 90 e9 f2 fe ff ff e8 df 75 bc fc 90 0f 0b 90 e9 0f ff ff ff e8 d1 75 bc fc 90 <0f> 0b 90 e9 2c ff ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 124.500404][T11639] RSP: 0018:ffffc900104ffcd0 EFLAGS: 00010287 [ 124.506494][T11639] RAX: ffffffff849b26cf RBX: 0000000000040301 RCX: 0000000000080000 [ 124.514786][T11639] RDX: ffffc90004222000 RSI: 0000000000004fd0 RDI: 0000000000004fd1 [ 124.522933][T11639] RBP: 0000000080000000 R08: 0001888104a81de7 R09: 0000000000000000 [ 124.531017][T11639] R10: 0000000000000011 R11: ffffffff849b22a0 R12: ffff888104a81c80 [ 124.539151][T11639] R13: ffff8881071f7b98 R14: ffff888104a81c92 R15: ffff888104a81d10 [ 124.547164][T11639] FS: 00007fd52b5676c0(0000) GS:ffff8882aef50000(0000) knlGS:0000000000000000 [ 124.556166][T11639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.562810][T11639] CR2: 00007efd97797e9c CR3: 00000001114ce000 CR4: 00000000003506f0 [ 124.570932][T11639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.579087][T11639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 124.587203][T11639] Call Trace: [ 124.590635][T11639] [ 124.593587][T11639] ? __pfx_inet_sock_destruct+0x10/0x10 [ 124.599265][T11639] __sk_destruct+0x54/0x480 [ 124.603794][T11639] ? __sk_free+0x218/0x270 [ 124.608235][T11639] __sk_free+0x227/0x270 [ 124.612671][T11639] sk_free+0x39/0x80 [ 124.616595][T11639] tcp_close+0x8d/0xd0 [ 124.620855][T11639] inet_release+0xce/0xf0 [ 124.625377][T11639] sock_close+0x6b/0x150 [ 124.629739][T11639] ? __pfx_sock_close+0x10/0x10 [ 124.634778][T11639] __fput+0x29b/0x650 [ 124.638811][T11639] ____fput+0x1c/0x30 [ 124.642862][T11639] task_work_run+0x131/0x1a0 [ 124.647540][T11639] resume_user_mode_work+0x6a/0x70 [ 124.652768][T11639] syscall_exit_to_user_mode+0x77/0xb0 [ 124.658360][T11639] do_syscall_64+0xdd/0x1a0 [ 124.662924][T11639] ? clear_bhb_loop+0x40/0x90 [ 124.667698][T11639] ? clear_bhb_loop+0x40/0x90 [ 124.672628][T11639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.678566][T11639] RIP: 0033:0x7fd52cefe969 [ 124.683052][T11639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.702791][T11639] RSP: 002b:00007fd52b567038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 124.711354][T11639] RAX: 0000000000000000 RBX: 00007fd52d125fa0 RCX: 00007fd52cefe969 [ 124.719384][T11639] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 124.727387][T11639] RBP: 00007fd52cf80ab1 R08: 0000000000000000 R09: 0000000000000000 [ 124.735473][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.743490][T11639] R13: 0000000000000000 R14: 00007fd52d125fa0 R15: 00007ffd7cbbed38 [ 124.751567][T11639] [ 124.754671][T11639] ---[ end trace 0000000000000000 ]--- [ 124.913699][T11632] chnl_net:caif_netlink_parms(): no params data found [ 124.954938][T11632] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.962212][T11632] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.969601][T11632] bridge_slave_0: entered allmulticast mode [ 124.976346][T11632] bridge_slave_0: entered promiscuous mode [ 124.983419][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.990922][T11632] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.998201][T11632] bridge_slave_1: entered allmulticast mode [ 125.004689][T11632] bridge_slave_1: entered promiscuous mode [ 125.025866][T11632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.036803][T11632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.073226][T11632] team0: Port device team_slave_0 added [ 125.121097][T11632] team0: Port device team_slave_1 added [ 125.154754][T11632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.161802][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.187855][T11632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.258592][T11894] loop5: detected capacity change from 0 to 1024 [ 125.288746][T11894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.289186][T11872] syzkaller0: entered promiscuous mode [ 125.306349][T11872] syzkaller0: entered allmulticast mode [ 125.333050][T10697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.393244][T11632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.400342][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.427113][T11632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.458458][T11916] wg2: entered promiscuous mode [ 125.463462][T11916] wg2: entered allmulticast mode [ 125.498338][T11632] hsr_slave_0: entered promiscuous mode [ 125.518320][T11632] hsr_slave_1: entered promiscuous mode [ 125.563124][T11632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.577529][T11632] Cannot create hsr debugfs directory [ 125.664694][T10537] bridge_slave_1: left allmulticast mode [ 125.670413][T10537] bridge_slave_1: left promiscuous mode [ 125.676043][T10537] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.683964][T10537] bridge_slave_0: left allmulticast mode [ 125.689840][T10537] bridge_slave_0: left promiscuous mode [ 125.695615][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.714810][T10537] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 126.023844][T12030] ref_ctr_offset mismatch. inode: 0x8a7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 126.110843][T10537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.120661][T10537] bond_slave_0: left allmulticast mode [ 126.127043][T10537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.138883][T10537] bond_slave_1: left allmulticast mode [ 126.145169][T10537] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 126.154380][T10537] dummy0: left allmulticast mode [ 126.159549][T10537] bond0 (unregistering): Released all slaves [ 126.168571][T10537] bond1 (unregistering): (slave batadv1): Releasing active interface [ 126.177943][T10537] bond1 (unregistering): (slave batadv2): Releasing active interface [ 126.190951][T10537] bond1 (unregistering): Released all slaves [ 126.201728][T10537] bond2 (unregistering): Released all slaves [ 126.212607][T10537] bond3 (unregistering): (slave veth5): Releasing active interface [ 126.223809][T10537] bond3 (unregistering): Released all slaves [ 126.298255][T10537] hsr_slave_0: left promiscuous mode [ 126.305674][T10537] hsr_slave_1: left promiscuous mode [ 126.311538][T10537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.319501][T10537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.395232][T11632] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.404853][T11632] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.413927][T11632] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.423025][T11632] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 126.468151][T12092] pim6reg: entered allmulticast mode [ 126.501839][T11632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.535806][T11632] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.550796][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.557995][T10571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.570897][T10546] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.578040][T10546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.622369][T11632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.698130][T10537] IPVS: stop unused estimator thread 0... [ 126.730523][T11632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.751391][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 126.760530][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 126.908075][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 126.908093][ T29] audit: type=1326 audit(1747326297.777:81371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12153 comm="syz.3.2226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd52cefe969 code=0x0 [ 127.006130][T11632] veth0_vlan: entered promiscuous mode [ 127.021201][T11632] veth1_vlan: entered promiscuous mode [ 127.042493][T11632] veth0_macvtap: entered promiscuous mode [ 127.050515][T11632] veth1_macvtap: entered promiscuous mode [ 127.062580][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.073355][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.083366][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.094108][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.104003][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.114660][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.124538][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.135225][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.152880][T11632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.170017][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.180643][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.190517][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.200979][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.210853][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.221586][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.231519][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.242067][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.253171][T11632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.280057][T11632] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.289053][T11632] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.297875][T11632] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.306823][T11632] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.602302][T12118] pim6reg: left allmulticast mode [ 128.170481][T12194] netlink: 'syz.6.2230': attribute type 1 has an invalid length. [ 129.127495][T12215] netlink: 'syz.6.2235': attribute type 3 has an invalid length. [ 129.339857][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2236'. [ 130.230558][T12243] loop4: detected capacity change from 0 to 2048 [ 130.237697][T12243] EXT4-fs: Ignoring removed bh option [ 130.250594][T12243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.515974][T12247] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.534244][T12247] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 130.546634][T12247] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.546634][T12247] [ 130.556915][T12247] EXT4-fs (loop4): Total free blocks count 0 [ 130.562973][T12247] EXT4-fs (loop4): Free/Dirty block details [ 130.568880][T12247] EXT4-fs (loop4): free_blocks=2415919104 [ 130.574682][T12247] EXT4-fs (loop4): dirty_blocks=8224 [ 130.580006][T12247] EXT4-fs (loop4): Block reservation details [ 130.586093][T12247] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 130.611426][T10546] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 131.503719][T12267] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.774076][T12270] loop6: detected capacity change from 0 to 2048 [ 131.803771][T12270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.827983][T11632] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.435266][ T29] audit: type=1400 audit(1747326303.307:81372): avc: denied { read } for pid=12328 comm="syz.2.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.080980][T12358] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12358 comm=syz.3.2268 [ 133.100423][T12357] loop4: detected capacity change from 0 to 1024 [ 133.131266][T12357] EXT4-fs: Ignoring removed orlov option [ 133.137065][T12357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.154289][T12357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.180173][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.347795][ T29] audit: type=1326 audit(1747326304.217:81373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.372475][T12369] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.386842][ T29] audit: type=1326 audit(1747326304.217:81374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.411432][ T29] audit: type=1326 audit(1747326304.217:81375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.435261][ T29] audit: type=1326 audit(1747326304.217:81376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.459687][ T29] audit: type=1326 audit(1747326304.227:81377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.485341][ T29] audit: type=1326 audit(1747326304.227:81378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.509369][ T29] audit: type=1326 audit(1747326304.227:81379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.533810][ T29] audit: type=1326 audit(1747326304.247:81380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.557467][ T29] audit: type=1326 audit(1747326304.257:81381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.5.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0e0bfee969 code=0x7ffc0000 [ 133.582835][T12380] netlink: 'syz.4.2273': attribute type 1 has an invalid length. [ 133.592304][T12378] bridge: RTM_NEWNEIGH with invalid ether address [ 133.611655][T12380] bond1: entered promiscuous mode [ 133.616900][T12380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.627562][T12369] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.633004][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2273'. [ 133.651532][T12380] batadv2: entered promiscuous mode [ 133.656792][T12380] batadv2: entered allmulticast mode [ 133.663229][T12380] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 133.672106][T12380] bond1: (slave batadv2): making interface the new active one [ 133.680475][T12380] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 133.712861][T12369] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.751910][T12369] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.807011][T12369] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.818678][T12369] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.830458][T12369] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.842703][T12369] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.960342][T12435] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2275'. [ 134.109194][ C0] TCP: out of memory -- consider tuning tcp_mem [ 134.120112][T10546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.163069][T10546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.222351][T10546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.311592][T10546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.382128][T10546] bridge_slave_1: left allmulticast mode [ 134.388019][T10546] bridge_slave_1: left promiscuous mode [ 134.393859][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.427978][T10546] bridge_slave_0: left allmulticast mode [ 134.433880][T10546] bridge_slave_0: left promiscuous mode [ 134.439565][T10546] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.460246][T12464] loop5: detected capacity change from 0 to 8192 [ 134.473697][T12464] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.771785][T10546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.782439][T10546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.792177][T10546] bond0 (unregistering): Released all slaves [ 134.801223][T10546] bond1 (unregistering): (slave veth3): Releasing active interface [ 134.810453][T10546] bond1 (unregistering): Released all slaves [ 134.941562][T10546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.949770][T10546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.958518][T10546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.966114][T10546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.980467][T10546] veth1_macvtap: left promiscuous mode [ 134.986094][T10546] veth0_macvtap: left promiscuous mode [ 134.991752][T10546] veth1_vlan: left promiscuous mode [ 134.997105][T10546] veth0_vlan: left promiscuous mode [ 136.746959][T12514] hsr0: entered promiscuous mode [ 136.752626][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 136.762471][T12514] hsr_slave_0: left promiscuous mode [ 136.768200][T12514] hsr_slave_1: left promiscuous mode [ 136.774803][T12514] hsr0 (unregistering): left promiscuous mode [ 137.191174][T12523] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 137.208668][T12523] 8021q: adding VLAN 0 to HW filter on device bond5 [ 137.222061][T12523] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 137.233036][T12523] bond5 (unregistering): Released all slaves [ 137.638023][T12596] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2297'. [ 137.661665][T12596] 0ªX¹¦À: renamed from caif0 [ 137.711421][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 137.711447][ T29] audit: type=1326 audit(1747326308.577:81431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33d7e969 code=0x7ffc0000 [ 137.741304][ T29] audit: type=1326 audit(1747326308.587:81432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f8a33d7e969 code=0x7ffc0000 [ 137.764952][ T29] audit: type=1326 audit(1747326308.587:81433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33d7e969 code=0x7ffc0000 [ 137.765063][ T29] audit: type=1326 audit(1747326308.587:81434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a33d7e969 code=0x7ffc0000 [ 137.765183][ T29] audit: type=1326 audit(1747326308.587:81435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33d7e969 code=0x7ffc0000 [ 137.772312][ T29] audit: type=1326 audit(1747326308.637:81436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a33d7e969 code=0x7ffc0000 [ 137.772355][ T29] audit: type=1326 audit(1747326308.637:81437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33d7e969 code=0x7ffc0000 [ 137.772451][ T29] audit: type=1326 audit(1747326308.637:81438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a33d7d2d0 code=0x7ffc0000 [ 137.772485][ T29] audit: type=1326 audit(1747326308.637:81439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8a33d80197 code=0x7ffc0000 [ 137.772524][ T29] audit: type=1326 audit(1747326308.637:81440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.6.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a33d7e969 code=0x7ffc0000 [ 138.083310][T12596] 0ªX¹¦À: entered allmulticast mode [ 138.090618][T12596] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 138.793652][T12645] batadv_slave_1: entered promiscuous mode [ 138.811306][T12645] batadv_slave_1: left promiscuous mode [ 139.819339][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.827181][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.834999][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.842858][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.850929][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.858700][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.866523][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.874736][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.882802][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.890694][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.898538][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.906371][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.914158][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.922040][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.929819][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.937764][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.945588][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.953391][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.961197][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.969030][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.976805][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.984618][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 139.992420][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.000328][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.008149][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.016001][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.023878][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.031770][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.039801][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.047752][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.055681][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.063283][T12687] loop5: detected capacity change from 0 to 2048 [ 140.063571][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.077804][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.085687][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.093604][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.101424][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.109281][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.112259][T12687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.117112][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.132706][T12687] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.136952][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.155217][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.163170][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.171031][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.178871][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 140.190812][ T3391] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.222552][T12695] fido_id[12695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.240465][T10697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.721658][T12709] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2320'. [ 140.730726][T12709] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2320'. [ 141.134568][T12723] syz_tun: entered promiscuous mode [ 141.142972][T12723] macsec1: entered promiscuous mode [ 141.148405][T12723] macsec1: entered allmulticast mode [ 141.154249][T12723] syz_tun: entered allmulticast mode [ 141.164058][T12723] syz_tun: left allmulticast mode [ 141.170019][T12723] syz_tun: left promiscuous mode [ 143.904096][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 143.904116][ T29] audit: type=1326 audit(1747326314.777:81494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 143.934763][ T29] audit: type=1326 audit(1747326314.777:81495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 143.959055][ T29] audit: type=1326 audit(1747326314.777:81496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 143.982857][ T29] audit: type=1326 audit(1747326314.777:81497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 144.007057][ T29] audit: type=1326 audit(1747326314.777:81498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 144.031438][ T29] audit: type=1326 audit(1747326314.777:81499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 144.055211][ T29] audit: type=1326 audit(1747326314.777:81500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 144.079565][ T29] audit: type=1326 audit(1747326314.777:81501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 144.103204][ T29] audit: type=1326 audit(1747326314.777:81502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 144.127590][ T29] audit: type=1326 audit(1747326314.787:81503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 144.347127][T12762] serio: Serial port ptm0 [ 144.573530][T12774] loop5: detected capacity change from 0 to 512 [ 144.581263][T12774] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 144.592961][T12774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c129, mo2=0002] [ 144.602228][T12774] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2340: corrupted in-inode xattr: e_value size too large [ 144.617392][T12774] EXT4-fs (loop5): Remounting filesystem read-only [ 144.626870][T12774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.979194][T12784] bond_slave_1: mtu less than device minimum [ 145.169710][T12774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.439658][T12819] loop5: detected capacity change from 0 to 512 [ 145.465573][T12819] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 145.500296][T12819] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 145.515974][T12819] EXT4-fs (loop5): 1 truncate cleaned up [ 145.522963][T12819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.538091][T12819] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.565212][T10697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.653469][T12839] IPv4: Oversized IP packet from 127.202.26.0 [ 146.068594][T12841] xt_hashlimit: size too large, truncated to 1048576 [ 146.928968][T12846] loop5: detected capacity change from 0 to 512 [ 146.935893][T12846] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.942531][T12846] EXT4-fs: Ignoring removed bh option [ 146.949356][T12846] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.961036][T12846] EXT4-fs (loop5): 1 truncate cleaned up [ 146.967146][T12846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.992568][T10697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.418176][T12912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12912 comm=syz.5.2372 [ 150.747204][T12923] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.758759][T12923] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.812505][T12923] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.823000][T12923] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.861878][T12923] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.872330][T12923] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.922474][T12923] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.933498][T12923] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.988604][T12923] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.996918][T12923] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.009007][T12923] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.017306][T12923] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.029938][T12923] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.038194][T12923] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.051838][T12923] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.060231][T12923] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.668466][T12957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.677122][T12957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.934122][T12982] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2387'. [ 151.944959][T12984] serio: Serial port ptm0 [ 152.341326][T12991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2389'. [ 153.420588][T13025] netlink: 'syz.5.2398': attribute type 4 has an invalid length. [ 153.432702][T13025] netlink: 'syz.5.2398': attribute type 4 has an invalid length. [ 153.636389][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 153.636405][ T29] audit: type=1400 audit(1747326324.507:81595): avc: denied { mount } for pid=13027 comm="syz.6.2399" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 153.676743][T13033] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2401'. [ 153.708554][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2401'. [ 154.113917][T13039] loop6: detected capacity change from 0 to 512 [ 154.145175][T13039] EXT4-fs (loop6): 1 orphan inode deleted [ 154.151844][T13039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.164507][T10520] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.165218][T13039] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.175185][T10520] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 154.218110][T13039] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 154.257974][T11632] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.927846][ T29] audit: type=1326 audit(1747326325.797:81596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.2.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 154.955770][ T29] audit: type=1326 audit(1747326325.797:81597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.2.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 154.980371][ T29] audit: type=1326 audit(1747326325.797:81598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.2.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 155.004032][ T29] audit: type=1326 audit(1747326325.797:81599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.2.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 155.028479][ T29] audit: type=1326 audit(1747326325.797:81600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.2.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 155.052752][ T29] audit: type=1326 audit(1747326325.797:81601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.2.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 155.076431][ T29] audit: type=1326 audit(1747326325.797:81602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.2.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 155.100738][ T29] audit: type=1326 audit(1747326325.797:81603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.2.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c01be969 code=0x7ffc0000 [ 156.208401][ T3391] IPVS: starting estimator thread 0... [ 156.299035][T13084] IPVS: using max 2016 ests per chain, 100800 per kthread [ 156.762735][T13104] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13104 comm=syz.4.2419 [ 157.957072][T13135] bridge0: entered promiscuous mode [ 157.963298][T13135] macvlan2: entered promiscuous mode [ 157.974519][T13135] bridge0: port 3(macvlan2) entered blocking state [ 157.985062][T13135] bridge0: port 3(macvlan2) entered disabled state [ 157.993972][T13135] macvlan2: entered allmulticast mode [ 158.000221][T13135] bridge0: entered allmulticast mode [ 158.008090][T13135] macvlan2: left allmulticast mode [ 158.020974][T13135] bridge0: left allmulticast mode [ 158.028500][T13135] bridge0: left promiscuous mode [ 158.367816][T13150] random: crng reseeded on system resumption [ 158.581979][T13153] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2432'. [ 158.601523][T13155] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2433'. [ 158.800367][T13158] serio: Serial port ptm0 [ 158.864433][ T3006] ================================================================== [ 158.872704][ T3006] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 158.880234][ T3006] [ 158.882561][ T3006] write to 0xffff88810736e570 of 8 bytes by task 7433 on cpu 0: [ 158.890876][ T3006] dentry_unlink_inode+0x65/0x260 [ 158.896286][ T3006] d_delete+0x164/0x180 [ 158.900876][ T3006] d_delete_notify+0x32/0x100 [ 158.906004][ T3006] vfs_unlink+0x30b/0x420 [ 158.910550][ T3006] do_unlinkat+0x28e/0x4c0 [ 158.914987][ T3006] __x64_sys_unlink+0x2e/0x40 [ 158.919769][ T3006] x64_sys_call+0x22a6/0x2fb0 [ 158.925242][ T3006] do_syscall_64+0xd0/0x1a0 [ 158.929843][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.935935][ T3006] [ 158.938262][ T3006] read to 0xffff88810736e570 of 8 bytes by task 3006 on cpu 1: [ 158.946126][ T3006] step_into+0x122/0x820 [ 158.950388][ T3006] walk_component+0x162/0x220 [ 158.955086][ T3006] path_lookupat+0xfe/0x2a0 [ 158.959599][ T3006] filename_lookup+0x147/0x340 [ 158.964382][ T3006] do_readlinkat+0x7d/0x320 [ 158.968896][ T3006] __x64_sys_readlink+0x47/0x60 [ 158.973784][ T3006] x64_sys_call+0x2cf3/0x2fb0 [ 158.978475][ T3006] do_syscall_64+0xd0/0x1a0 [ 158.983020][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.988943][ T3006] [ 158.991291][ T3006] value changed: 0xffff88811b564368 -> 0x0000000000000000 [ 158.998396][ T3006] [ 159.000716][ T3006] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to send rpc fd=3 want=32712 sent=0 n=-1 (errno 104: Connection reset by peer) [ 159.006923][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Tainted: G W 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 159.020496][ T3006] Tainted: [W]=WARN [ 159.024645][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 159.034709][ T3006] ================================================================== [ 159.048950][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 159.048978][ T29] audit: type=1400 audit(1747326329.917:81645): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[1746]" dev="pipefs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 159.557891][T13044] bridge_slave_0: left promiscuous mode [ 159.563628][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.591135][T13044] bond2 (unregistering): (slave erspan0): Releasing active interface [ 159.691077][T13044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.700729][T13044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.714171][T13044] bond0 (unregistering): Released all slaves [ 159.723889][T13044] bond1 (unregistering): (slave batadv1): Releasing active interface [ 159.735505][T13044] bond1 (unregistering): (slave batadv2): Releasing active interface [ 159.744251][T13044] bond1 (unregistering): Released all slaves [ 159.755140][T13044] bond2 (unregistering): Released all slaves [ 159.764247][T13044] bond3 (unregistering): (slave veth3): Releasing active interface [ 159.775132][T13044] bond3 (unregistering): Released all slaves [ 159.784319][T13044] bond4 (unregistering): (slave batadv3): Releasing active interface [ 159.793386][T13044] bond4 (unregistering): Released all slaves [ 159.894070][T13044] team0 (unregistering): Port device team_slave_1 removed [ 159.904384][T13044] team0 (unregistering): Port device team_slave_0 removed [ 160.174336][T13044] IPVS: stop unused estimator thread 0... [ 160.253342][T13044] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.310710][T13044] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.370595][T13044] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.430495][T13044] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.498047][T13044] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.507975][T13044] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.560637][T13044] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.570631][T13044] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.620273][T13044] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.630164][T13044] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.680589][T13044] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.690398][T13044] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.759421][T13044] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.801626][T13044] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.861263][T13044] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.921180][T13044] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.978625][T13044] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.020246][T13044] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.080540][T13044] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.140411][T13044] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.198960][T13044] bridge_slave_1: left allmulticast mode [ 161.204687][T13044] bridge_slave_1: left promiscuous mode [ 161.210386][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.218198][T13044] bridge_slave_0: left allmulticast mode [ 161.224016][T13044] bridge_slave_0: left promiscuous mode [ 161.229768][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.238854][T13044] batadv1: left promiscuous mode [ 161.243972][T13044] bridge0: port 3(batadv1) entered disabled state [ 161.251275][T13044] bridge_slave_1: left allmulticast mode [ 161.256926][T13044] bridge_slave_1: left promiscuous mode [ 161.262670][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.270461][T13044] bridge_slave_0: left allmulticast mode [ 161.276184][T13044] bridge_slave_0: left promiscuous mode [ 161.281930][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.290597][T13044] bridge_slave_1: left allmulticast mode [ 161.296241][T13044] bridge_slave_1: left promiscuous mode [ 161.301994][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.309844][T13044] bridge_slave_0: left allmulticast mode [ 161.315497][T13044] bridge_slave_0: left promiscuous mode [ 161.321256][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.329527][T13044] bridge_slave_1: left allmulticast mode [ 161.335615][T13044] bridge_slave_1: left promiscuous mode [ 161.341352][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.349365][T13044] bridge_slave_0: left allmulticast mode [ 161.355216][T13044] bridge_slave_0: left promiscuous mode [ 161.361348][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.811531][T13044]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.820254][T13044] bond_slave_0: left promiscuous mode [ 161.826785][T13044]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.836381][T13044] bond_slave_1: left promiscuous mode [ 161.842278][T13044]  (unregistering): Released all slaves [ 161.850815][T13044] bond0 (unregistering): (slave veth3): Releasing active interface [ 161.859950][T13044] bond0 (unregistering): Released all slaves [ 161.868578][T13044] bond1 (unregistering): (slave batadv2): Releasing active interface [ 161.877784][T13044] bond1 (unregistering): Released all slaves [ 161.887251][T13044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.897022][T13044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.906691][T13044] bond0 (unregistering): Released all slaves [ 161.916087][T13044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.925843][T13044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.935193][T13044] bond0 (unregistering): Released all slaves [ 161.973023][T13044] tipc: Left network mode [ 161.981293][T13044] hsr_slave_0: left promiscuous mode [ 161.986846][T13044] hsr_slave_1: left promiscuous mode [ 161.992536][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.000154][T13044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.008077][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.015620][T13044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.024554][T13044] hsr_slave_0: left promiscuous mode [ 162.030707][T13044] hsr_slave_1: left promiscuous mode [ 162.036273][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.043781][T13044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.051465][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.058976][T13044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.068193][T13044] hsr_slave_0: left promiscuous mode [ 162.073898][T13044] hsr_slave_1: left promiscuous mode [ 162.079517][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.087161][T13044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.094729][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.102240][T13044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.111495][T13044] hsr_slave_0: left promiscuous mode [ 162.117341][T13044] hsr_slave_1: left promiscuous mode [ 162.123067][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.130669][T13044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.138302][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.145808][T13044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.162503][T13044] veth1_macvtap: left promiscuous mode [ 162.167999][T13044] veth0_macvtap: left promiscuous mode [ 162.174128][T13044] veth0_macvtap: left promiscuous mode [ 162.179822][T13044] veth1_vlan: left promiscuous mode [ 162.185081][T13044] veth0_vlan: left promiscuous mode [ 162.191241][T13044] veth1_macvtap: left promiscuous mode [ 162.196945][T13044] veth0_macvtap: left promiscuous mode [ 162.202726][T13044] veth1_vlan: left promiscuous mode [ 162.208095][T13044] veth0_vlan: left promiscuous mode [ 162.213857][T13044] veth1_macvtap: left promiscuous mode [ 162.219431][T13044] veth0_macvtap: left promiscuous mode [ 162.225066][T13044] veth1_vlan: left promiscuous mode [ 162.230351][T13044] veth0_vlan: left promiscuous mode [ 162.371503][T13044] team0 (unregistering): Port device team_slave_1 removed [ 162.381237][T13044] team0 (unregistering): Port device team_slave_0 removed [ 162.436480][T13044] team0 (unregistering): Port device team_slave_1 removed [ 162.446721][T13044] team0 (unregistering): Port device team_slave_0 removed [ 162.497147][T13044] team0 (unregistering): Port device team_slave_1 removed [ 162.507763][T13044] team0 (unregistering): Port device team_slave_0 removed [ 162.561148][T13044] team0 (unregistering): Port device team_slave_1 removed [ 162.570931][T13044] team0 (unregistering): Port device team_slave_0 removed [ 163.229014][ T10] page_pool_release_retry() stalled pool shutdown: id 30, 2 inflight 60 sec [ 163.429937][T13044] IPVS: stop unused estimator thread 0... [ 163.436086][T13044] IPVS: stop unused estimator thread 0... [ 163.442382][T13044] IPVS: stop unused estimator thread 0...