last executing test programs: 2m18.564046877s ago: executing program 3 (id=1543): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendfile(r1, r2, 0x0, 0x200) 2m18.562850717s ago: executing program 3 (id=1546): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x82044, &(0x7f0000000000)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/#&.@+/\\{$.\\\\*'}}]}, 0x1, 0x57b, &(0x7f00000005c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x400}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r1}, &(0x7f0000001b40), &(0x7f0000001b80)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2m18.509997827s ago: executing program 3 (id=1547): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000002400)) unlinkat(0xffffffffffffffff, 0x0, 0x200) 2m18.392428629s ago: executing program 3 (id=1550): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@dax_inode}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@lazytime}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000000)='./file0\x00') sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 2m18.254412961s ago: executing program 3 (id=1551): bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x6}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@mcast1, 0x59, r4}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m18.254023511s ago: executing program 3 (id=1552): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) r0 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xf095, 0x0, 0x3, 0x7fe}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), 0xffffffffffffffff) 2m18.234852652s ago: executing program 32 (id=1552): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) r0 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xf095, 0x0, 0x3, 0x7fe}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), 0xffffffffffffffff) 1.894320251s ago: executing program 2 (id=3982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 1.698378474s ago: executing program 2 (id=3986): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x9}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @mcast2}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x103d000, 0x1000, 0xe97}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1.636910755s ago: executing program 2 (id=3991): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000005c0)="e6408f51c31317c798767173224c0a10cdd52cbbd8827b71e8300ebebf385f67b8b84831f62e223a68047f8b1209e9a39248d2b923f003b4", 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r1 = syz_io_uring_setup(0x63d, &(0x7f0000000640)={0x0, 0x4d70, 0x80, 0x0, 0x2d}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 862.594747ms ago: executing program 1 (id=4007): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x9}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @mcast2}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x103d000, 0x1000, 0xe97}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 861.643057ms ago: executing program 0 (id=4008): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9001, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 811.370958ms ago: executing program 1 (id=4009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='sys_enter\x00', r0, 0x0, 0x2}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 746.942859ms ago: executing program 2 (id=4010): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x43, 0x4, 0x2}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r4 = dup3(r0, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 662.28298ms ago: executing program 2 (id=4012): eventfd2(0xce77, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="dc030000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78439c03088048000080200004000a00000000000000fe8000000000000000000000000000bb0000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff5003008006000500090000000400098024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0c03098070000080060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe80000000000000000000000000002e0500030001000000060001000a00000014000200fe880000000000000000000000000001050003000100000018010080060001000200000008000200e00000010500030002000000060001000a00000014000200fe8000000000000000000000000000220500030002000000060001000a00000014000200fc0200000000000000000000000000080500030001000000060001000a00000014000200200100000000000000000000000000020500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000a00000014000200fc02000000000000000000000000000005000300020000001c000080060001000200000008000200000000000500030001000000640000804f0001000200000008000200640101000500030003000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a0000001400020000000000000000000000ffff00000000050003000200000058000080060001000200000008000200e00000020500030000000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200ac141416050003000200000058000080060001000a00001a1400020000000000000000000000ffffac1414aa0500030001000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200e0000001050003000200000028000080060001000a00000014000200ff020000000000000000000000000001050003000300000028000080060001000a00000014000200fe880000000000000000000000000001050003000200000008000a000100000008000a000100000008000100", @ANYRES32=r4], 0x3dc}}, 0x0) 654.14657ms ago: executing program 0 (id=4023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 653.7114ms ago: executing program 1 (id=4014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) 630.86496ms ago: executing program 5 (id=4015): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001800)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 605.980281ms ago: executing program 0 (id=4016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x0) 604.265991ms ago: executing program 4 (id=4027): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x23}, 0x23) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b) 585.602751ms ago: executing program 0 (id=4017): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/207, 0xcf}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000001, 0x0) 539.990412ms ago: executing program 1 (id=4018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 539.248402ms ago: executing program 5 (id=4019): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r4}) 251.932967ms ago: executing program 4 (id=4020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x11001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0x4000000000c8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631380fc00082ce0db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 248.235627ms ago: executing program 0 (id=4032): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/207, 0xcf}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000001, 0x0) 247.578867ms ago: executing program 2 (id=4021): gettid() timer_create(0x0, 0x0, &(0x7f0000000380)) pipe2(0x0, 0x0) unshare(0x2c020400) r0 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 247.212497ms ago: executing program 5 (id=4022): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x9}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @mcast2}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x103d000, 0x1000, 0xe97}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 212.087857ms ago: executing program 5 (id=4024): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9001, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 210.995168ms ago: executing program 1 (id=4025): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 110.446318ms ago: executing program 1 (id=4026): rt_sigsuspend(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000045, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 110.130738ms ago: executing program 4 (id=4028): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000000008010300000000000000000000000a060002406558000006000240600100000600024088a2000005000300840000000600024060020000060002400011000034000480080008400000000608000340000000010800044000000004080002400000000008000940000007ff0807074000000001090001"], 0x84}}, 0x8000) 99.532999ms ago: executing program 4 (id=4029): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="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", 0x13e}, {&(0x7f0000000440)="b4462ead4cd93f40db60bf447a1a6bdf72e253d86ae256e9910dcbfb8dd7edbb6b8ae117154b30ab1c7fae42a9d398ee41d0f486ad54dc3832847d201f9a55131f9f76f2e00cf1105b10a47921f04087cb12b3d49446bcc2ec3564a6376c10f73cc539fbb8a0dd111d0c0f6ed38796250527a6e59c960b5b1219eb41a8248a4d56a5f4e20f248aa6c383ad528e822413ceeb4a5e5c3e8268662e94b56b9fd93a4175c7d9fdce4609faa21aa9f63caf1130269b9445386e4f473a0e6feb415ccf9919147f8c9f16c8be580a2363a0f66fcfac0e4311c8db2cf1f3987e1d02dfb97b", 0xe1}, {&(0x7f00000011c0)="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", 0x156}, {&(0x7f00000000c0)='w', 0x1}, {&(0x7f0000000100)="50eaf294efb9dbc1683ec70642acd52ce4beed8d81645db8f389ef432f5f8dbdd82b29cbba36d1937b70687a9dace07041401494d22e28915d4a3de2231e4125374c3bbe3649918325a7bf74c8fc4a20454c42a0e43de9488f7f820780a6fc50f6cfe676aaee751b9daf0e84fc3b3e04061718c280803e1caa4a59812abe79003d7142069f02", 0x86}, {&(0x7f0000000380)="5a825cacaa8cf456253da2f5012259929f6cec2688b954603db198bd7270c3c345f0ca07818f0090327d8645dd53f8088c84dec16dc06c34a5f14abb0b7026adda984220bc48163d2b00d037c2309b0b3f30aaa1a8a107361bcf5149b96d4b12aed7eca6e649cfc3690e22f870010762aadb9cbbcde89e59dc5d544af650918d285f0beb", 0x84}], 0x6}, 0x88d4) close_range(r0, 0xffffffffffffffff, 0x0) 66.75505ms ago: executing program 4 (id=4030): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="0ad32bfb45c9"}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 61.804479ms ago: executing program 5 (id=4031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x0) 61.119069ms ago: executing program 0 (id=4042): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/207, 0xcf}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000001, 0x0) 6.8062ms ago: executing program 4 (id=4033): eventfd2(0xce77, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="dc030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x3dc}}, 0x0) 0s ago: executing program 5 (id=4034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) kernel console output (not intermixed with test programs): 153.145800][ T9842] loop4: detected capacity change from 0 to 2048 [ 153.166777][ T9842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.202357][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.054111][ T9878] sch_fq: defrate 4294967295 ignored. [ 154.100121][ T9881] netlink: 'syz.5.2172': attribute type 7 has an invalid length. [ 154.107943][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2172'. [ 154.628468][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.644340][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.810523][ T9907] loop5: detected capacity change from 0 to 2048 [ 154.841926][ T9907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.395097][ T9918] loop0: detected capacity change from 0 to 1024 [ 155.410906][ T9918] EXT4-fs: Ignoring removed nobh option [ 155.416775][ T9918] EXT4-fs: Ignoring removed bh option [ 155.439127][ T9918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.460966][ T9918] bridge0: entered allmulticast mode [ 155.481497][ T9918] dummy0: left allmulticast mode [ 155.498838][ T9918] bridge0: port 3(dummy0) entered disabled state [ 155.507234][ T9918] bridge_slave_1: left allmulticast mode [ 155.512948][ T9918] bridge_slave_1: left promiscuous mode [ 155.518790][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.527635][ T9918] bridge_slave_0: left allmulticast mode [ 155.533409][ T9918] bridge_slave_0: left promiscuous mode [ 155.539197][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.679752][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.748730][ T7978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.749236][ T9933] lo speed is unknown, defaulting to 1000 [ 155.799133][ T9933] lo speed is unknown, defaulting to 1000 [ 155.810856][ T9933] lo speed is unknown, defaulting to 1000 [ 155.820406][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2190'. [ 155.828779][ T9933] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.873162][ T9933] lo speed is unknown, defaulting to 1000 [ 155.879594][ T9933] lo speed is unknown, defaulting to 1000 [ 155.892202][ T9933] lo speed is unknown, defaulting to 1000 [ 155.907799][ T9933] lo speed is unknown, defaulting to 1000 [ 155.917925][ T9933] lo speed is unknown, defaulting to 1000 [ 155.924955][ T9939] 9pnet: p9_errstr2errno: server reported unknown error [ 155.932948][ T9933] lo speed is unknown, defaulting to 1000 [ 155.957313][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 155.964829][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 155.972271][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.027443][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.035001][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.042600][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.050103][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.057677][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.065198][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.072634][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.080078][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.087530][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.095122][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.114972][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.122504][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.129988][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.137491][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.144939][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.152410][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.159952][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.167477][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.174928][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.182424][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.189938][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.197423][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.204870][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.212479][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.220004][ T3424] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 156.230596][ T3424] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 156.234156][ T9950] lo speed is unknown, defaulting to 1000 [ 156.382565][ T9961] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1 [ 156.391387][ T9961] ref_ctr increment failed for inode: 0x551 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810375e300 [ 156.416773][ T9960] lo speed is unknown, defaulting to 1000 [ 156.878226][ T9981] lo speed is unknown, defaulting to 1000 [ 156.938021][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 157.017888][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 157.087464][ T9997] loop4: detected capacity change from 0 to 1024 [ 157.385718][T10009] loop0: detected capacity change from 0 to 512 [ 157.392791][T10009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.410057][T10009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.423651][T10009] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.450930][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 157.450948][ T29] audit: type=1400 audit(1752810501.768:36394): avc: denied { append } for pid=10008 comm="syz.0.2222" path="/464/bus/blkio.bfq.io_service_bytes" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 157.521775][ T29] audit: type=1400 audit(1752810501.818:36395): avc: denied { module_request } for pid=10000 comm="syz.1.2219" kmod="nfct-helper-pptp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 157.535367][T10002] xt_CT: No such helper "pptp" [ 157.659325][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.690854][ T29] audit: type=1326 audit(1752810502.008:36396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 157.741994][ T29] audit: type=1326 audit(1752810502.008:36397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 157.751421][T10015] loop0: detected capacity change from 0 to 2048 [ 157.765721][ T29] audit: type=1326 audit(1752810502.008:36398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 157.795839][ T29] audit: type=1326 audit(1752810502.008:36399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 157.819483][ T29] audit: type=1326 audit(1752810502.008:36400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 157.843352][ T29] audit: type=1326 audit(1752810502.008:36401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 157.867031][ T29] audit: type=1326 audit(1752810502.008:36402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 157.890826][ T29] audit: type=1326 audit(1752810502.008:36403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 157.955574][T10015] loop0: p1 < > p4 [ 157.961123][T10015] loop0: p4 size 8388608 extends beyond EOD, truncated [ 158.008850][T10023] netlink: 'syz.0.2227': attribute type 4 has an invalid length. [ 158.025604][T10023] netlink: 'syz.0.2227': attribute type 4 has an invalid length. [ 158.036937][ T23] lo speed is unknown, defaulting to 1000 [ 158.042756][ T23] syz0: Port: 1 Link ACTIVE [ 158.054529][T10021] lo speed is unknown, defaulting to 1000 [ 158.120614][T10034] loop0: detected capacity change from 0 to 512 [ 158.128498][T10034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.162131][T10034] EXT4-fs (loop0): 1 truncate cleaned up [ 158.179152][T10034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.220740][T10044] netlink: 'syz.1.2236': attribute type 4 has an invalid length. [ 158.260715][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2238'. [ 158.339835][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.384731][T10055] pim6reg1: entered promiscuous mode [ 158.390208][T10055] pim6reg1: entered allmulticast mode [ 158.586457][T10079] loop0: detected capacity change from 0 to 128 [ 158.723469][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.723469][ T5155] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 158.755937][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2254'. [ 158.765680][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.765680][ T5155] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 158.783615][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.783615][ T5155] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 158.817829][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.817829][ T5155] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 158.851767][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.851767][ T5155] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 158.868784][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.868784][ T5155] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 158.882757][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.882757][ T5155] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 158.941453][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.941453][ T5155] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 158.963215][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 158.976089][ T5155] kworker/u8:53: attempt to access beyond end of device [ 158.976089][ T5155] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 159.002915][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 159.004451][ T5155] kworker/u8:53: attempt to access beyond end of device [ 159.004451][ T5155] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 159.063432][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'. [ 159.403613][T10104] loop0: detected capacity change from 0 to 1024 [ 159.474363][T10104] SELinux: security_context_str_to_sid () failed with errno=-22 [ 159.502269][T10104] 9pnet: p9_errstr2errno: server reported unknown error [ 160.629382][T10089] lo speed is unknown, defaulting to 1000 [ 161.433908][T10127] loop1: detected capacity change from 0 to 1024 [ 161.485142][T10127] EXT4-fs: Ignoring removed nobh option [ 161.490813][T10127] EXT4-fs: inline encryption not supported [ 161.631473][T10127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.802153][T10127] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2268: Allocating blocks 385-513 which overlap fs metadata [ 161.848700][T10112] lo speed is unknown, defaulting to 1000 [ 161.862559][T10127] EXT4-fs (loop1): pa ffff888106e951c0: logic 16, phys. 129, len 24 [ 161.870702][T10127] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 161.882473][T10127] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 161.894899][T10127] EXT4-fs (loop1): This should not happen!! Data will be lost [ 161.894899][T10127] [ 161.904674][T10127] EXT4-fs (loop1): Total free blocks count 0 [ 161.911027][T10127] EXT4-fs (loop1): Free/Dirty block details [ 161.917141][T10127] EXT4-fs (loop1): free_blocks=128 [ 161.922335][T10127] EXT4-fs (loop1): dirty_blocks=0 [ 161.927663][T10127] EXT4-fs (loop1): Block reservation details [ 161.933736][T10127] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 162.180990][T10142] loop5: detected capacity change from 0 to 512 [ 162.196489][T10142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.230540][T10142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.263457][T10142] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.397015][ T7978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.433451][T10152] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2277'. [ 162.443681][T10152] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2277'. [ 162.600208][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 162.600227][ T29] audit: type=1326 audit(1752810506.918:36477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 162.632992][ T29] audit: type=1326 audit(1752810506.918:36478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 162.656770][ T29] audit: type=1326 audit(1752810506.918:36479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb8c7c7e9e3 code=0x7ffc0000 [ 162.680290][ T29] audit: type=1326 audit(1752810506.918:36480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8c7c7d45f code=0x7ffc0000 [ 162.703925][ T29] audit: type=1326 audit(1752810506.918:36481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb8c7c7ea37 code=0x7ffc0000 [ 162.727721][ T29] audit: type=1326 audit(1752810506.928:36482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8c7c7d310 code=0x7ffc0000 [ 162.751399][ T29] audit: type=1326 audit(1752810506.928:36483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb8c7c7d60a code=0x7ffc0000 [ 162.775063][ T29] audit: type=1326 audit(1752810506.928:36484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 162.798853][ T29] audit: type=1326 audit(1752810506.928:36485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 162.822544][ T29] audit: type=1326 audit(1752810506.928:36486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 162.848425][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2282'. [ 162.856075][T10169] bridge: RTM_NEWNEIGH with invalid ether address [ 162.893401][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 163.034967][T10186] loop1: detected capacity change from 0 to 128 [ 163.130594][T10203] loop0: detected capacity change from 0 to 512 [ 163.157433][T10203] EXT4-fs (loop0): too many log groups per flexible block group [ 163.165244][T10203] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 163.191898][T10203] EXT4-fs (loop0): mount failed [ 163.211376][T10209] netlink: 'syz.1.2295': attribute type 4 has an invalid length. [ 163.247798][T10203] loop0: detected capacity change from 0 to 2048 [ 163.304745][T10203] loop0: p1 < > p4 [ 163.311146][T10203] loop0: p4 size 8388608 extends beyond EOD, truncated [ 163.370103][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2300'. [ 163.474263][T10217] loop1: detected capacity change from 0 to 128 [ 163.563224][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2305'. [ 163.687026][T10231] loop4: detected capacity change from 0 to 1024 [ 163.721165][T10230] loop0: detected capacity change from 0 to 128 [ 163.778139][T10231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.813965][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.868222][T10238] SELinux: failed to load policy [ 163.919434][T10242] syzkaller0: entered promiscuous mode [ 163.925020][T10242] syzkaller0: entered allmulticast mode [ 164.130466][T10252] loop4: detected capacity change from 0 to 4096 [ 164.140124][T10252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.158820][T10252] tipc: New replicast peer: 255.255.255.255 [ 164.165243][T10252] tipc: Enabled bearer , priority 10 [ 164.188359][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.453706][T10265] loop1: detected capacity change from 0 to 2048 [ 164.465704][T10265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.911528][T10281] tipc: New replicast peer: 255.255.255.255 [ 164.917947][T10281] tipc: Enabled bearer , priority 10 [ 165.159971][T10284] loop4: detected capacity change from 0 to 512 [ 165.179786][T10284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.200268][T10284] EXT4-fs (loop4): 1 truncate cleaned up [ 165.206546][T10284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.270025][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.356235][T10293] loop4: detected capacity change from 0 to 1024 [ 165.367045][T10293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.405006][T10293] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #19: comm syz.4.2332: missing EA_INODE flag [ 165.417183][T10293] EXT4-fs (loop4): Remounting filesystem read-only [ 165.423940][T10293] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #20: comm syz.4.2332: dec ref error=-30 [ 165.451446][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.484499][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.601604][T10316] syzkaller0: entered promiscuous mode [ 165.607196][T10316] syzkaller0: entered allmulticast mode [ 165.990810][T10347] loop0: detected capacity change from 0 to 1024 [ 166.054162][ T1036] tipc: Node number set to 3084611175 [ 166.099605][T10354] loop4: detected capacity change from 0 to 1024 [ 166.117626][T10354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.130316][T10354] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.159600][ T5151] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 166.176847][ T5151] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 166.189332][ T5151] EXT4-fs (loop4): This should not happen!! Data will be lost [ 166.189332][ T5151] [ 166.199062][ T5151] EXT4-fs (loop4): Total free blocks count 0 [ 166.205120][ T5151] EXT4-fs (loop4): Free/Dirty block details [ 166.211046][ T5151] EXT4-fs (loop4): free_blocks=4293918720 [ 166.216833][ T5151] EXT4-fs (loop4): dirty_blocks=16 [ 166.221977][ T5151] EXT4-fs (loop4): Block reservation details [ 166.228089][ T5151] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 166.236761][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.658309][T10378] loop5: detected capacity change from 0 to 512 [ 166.666231][T10378] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.679517][T10378] EXT4-fs (loop5): 1 truncate cleaned up [ 166.686444][T10378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.719683][ T7978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.683249][T10408] netlink: 'syz.4.2382': attribute type 39 has an invalid length. [ 167.794314][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 167.794332][ T29] audit: type=1400 audit(1752810512.108:36780): avc: denied { mount } for pid=10414 comm="syz.2.2385" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.830380][ T29] audit: type=1400 audit(1752810512.148:36781): avc: denied { connect } for pid=10417 comm="syz.5.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.942327][T10423] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 167.951219][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.964803][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.221734][ T29] audit: type=1400 audit(1752810512.538:36782): avc: denied { bind } for pid=10436 comm="syz.4.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.255202][ T29] audit: type=1400 audit(1752810512.578:36783): avc: denied { setopt } for pid=10436 comm="syz.4.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.348133][ T29] audit: type=1400 audit(1752810512.668:36784): avc: denied { setopt } for pid=10445 comm="syz.0.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 168.650600][T10467] loop4: detected capacity change from 0 to 1024 [ 168.663660][T10468] loop5: detected capacity change from 0 to 128 [ 168.667683][T10467] EXT4-fs: Ignoring removed orlov option [ 168.686869][T10470] loop0: detected capacity change from 0 to 512 [ 168.704983][T10468] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.722912][T10468] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.723741][T10467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.748001][T10470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.770882][T10470] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.816729][ T29] audit: type=1400 audit(1752810513.138:36785): avc: denied { map } for pid=10465 comm="syz.5.2408" path="/162/mnt/cgroup.controllers" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.911355][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.968871][ T7978] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.992806][T10484] sch_tbf: burst 4398 is lower than device lo mtu (39799) ! [ 169.149938][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.180050][ T1036] Process accounting resumed [ 169.282007][T10463] lo speed is unknown, defaulting to 1000 [ 169.544636][T10507] loop1: detected capacity change from 0 to 128 [ 169.551585][T10507] EXT4-fs: Ignoring removed nobh option [ 169.560890][T10507] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.573532][T10507] ext4 filesystem being mounted at /492/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.591842][ T29] audit: type=1400 audit(1752810513.908:36786): avc: denied { mounton } for pid=10506 comm="syz.1.2422" path="/492/mnt/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 169.614945][ T29] audit: type=1400 audit(1752810513.908:36787): avc: denied { unmount } for pid=10506 comm="syz.1.2422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.763529][T10514] loop4: detected capacity change from 0 to 512 [ 169.772186][T10514] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 169.797341][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.816808][T10517] loop4: detected capacity change from 0 to 164 [ 169.824171][T10517] Unable to read rock-ridge attributes [ 169.829876][ T29] audit: type=1400 audit(1752810514.148:36788): avc: denied { write } for pid=10516 comm="syz.1.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.850335][ T29] audit: type=1400 audit(1752810514.168:36789): avc: denied { mount } for pid=10515 comm="syz.4.2426" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 169.888244][T10518] netlink: 'syz.1.2425': attribute type 10 has an invalid length. [ 169.938526][T10522] atomic_op ffff88812a7d3528 conn xmit_atomic 0000000000000000 [ 169.970792][T10526] Unable to read rock-ridge attributes [ 169.985743][T10526] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 170.574782][T10544] loop1: detected capacity change from 0 to 4096 [ 170.597496][T10544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.662613][T10544] SELinux: ebitmap: truncated map [ 170.679959][T10544] SELinux: failed to load policy [ 170.697279][T10544] tipc: New replicast peer: 255.255.255.255 [ 170.703417][T10544] tipc: Enabled bearer , priority 10 [ 170.755158][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.834335][T10550] IPVS: Error connecting to the multicast addr [ 170.881984][T10553] bond1: left promiscuous mode [ 170.886863][T10553] bridge3: left promiscuous mode [ 170.892023][T10553] bond1: left allmulticast mode [ 170.896929][T10553] bridge3: left allmulticast mode [ 171.033167][T10532] lo speed is unknown, defaulting to 1000 [ 171.173675][T10572] rdma_rxe: rxe_newlink: failed to add bridge0 [ 171.394759][T10594] loop4: detected capacity change from 0 to 512 [ 171.445598][T10594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.471855][T10594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.519750][T10594] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.720436][ T1036] tipc: Node number set to 2155021644 [ 171.813724][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.851692][T10614] loop4: detected capacity change from 0 to 256 [ 172.209574][T10629] loop1: detected capacity change from 0 to 8192 [ 172.274464][T10584] lo speed is unknown, defaulting to 1000 [ 172.320064][T10632] veth0: entered promiscuous mode [ 172.326173][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 172.389015][T10633] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 172.396674][T10633] FAT-fs (loop1): Filesystem has been set read-only [ 172.414195][T10632] veth0 (unregistering): left promiscuous mode [ 172.422215][T10629] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2075) [ 172.430917][T10629] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 172.441821][T10629] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 172.515031][T10638] rdma_rxe: rxe_newlink: failed to add bridge0 [ 172.616845][T10646] loop1: detected capacity change from 0 to 1024 [ 172.623692][T10646] EXT4-fs: Ignoring removed orlov option [ 172.650374][T10646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.678275][T10643] syzkaller0: entered promiscuous mode [ 172.683982][T10643] syzkaller0: entered allmulticast mode [ 172.733753][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.856994][T10655] netlink: 'syz.1.2474': attribute type 7 has an invalid length. [ 172.865053][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'. [ 172.907998][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2475'. [ 172.954524][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 172.954540][ T29] audit: type=1400 audit(1752810517.278:36874): avc: denied { mount } for pid=10658 comm="syz.1.2476" name="/" dev="ramfs" ino=31473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 173.418173][T10677] loop4: detected capacity change from 0 to 8192 [ 173.552432][ T29] audit: type=1400 audit(1752810517.868:36875): avc: denied { create } for pid=10678 comm="syz.5.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.572173][ T29] audit: type=1400 audit(1752810517.868:36876): avc: denied { setopt } for pid=10678 comm="syz.5.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.609133][T10680] lo speed is unknown, defaulting to 1000 [ 173.633978][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'. [ 173.678686][T10679] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 173.686419][T10679] FAT-fs (loop4): Filesystem has been set read-only [ 173.699056][T10686] team0: entered promiscuous mode [ 173.702373][T10677] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 173.704311][T10686] team0: entered allmulticast mode [ 173.713313][T10677] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 173.729615][T10677] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 173.778117][T10689] loop0: detected capacity change from 0 to 1024 [ 173.785007][T10689] EXT4-fs: Ignoring removed orlov option [ 173.797728][T10689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.799986][ T29] audit: type=1400 audit(1752810518.118:36877): avc: denied { bind } for pid=10690 comm="syz.5.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.849614][ T29] audit: type=1400 audit(1752810518.168:36878): avc: denied { listen } for pid=10690 comm="syz.5.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.023994][ T29] audit: type=1400 audit(1752810518.338:36879): avc: denied { read } for pid=10703 comm="syz.1.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 174.090888][T10711] netlink: 'syz.2.2496': attribute type 7 has an invalid length. [ 174.098806][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 174.150068][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.167955][T10714] bond3: entered promiscuous mode [ 174.173122][T10714] bond3: entered allmulticast mode [ 174.179150][T10714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.193481][T10714] bond3 (unregistering): Released all slaves [ 174.797823][ T29] audit: type=1400 audit(1752810519.118:36880): avc: denied { read } for pid=10732 comm="syz.1.2516" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 174.822358][ T29] audit: type=1400 audit(1752810519.118:36881): avc: denied { open } for pid=10732 comm="syz.1.2516" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 174.851985][ T29] audit: type=1326 audit(1752810519.148:36882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 174.875749][ T29] audit: type=1326 audit(1752810519.148:36883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 174.883107][T10741] netlink: 'syz.4.2509': attribute type 7 has an invalid length. [ 174.904007][T10742] atomic_op ffff88815f079d28 conn xmit_atomic 0000000000000000 [ 174.907850][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2509'. [ 174.925300][T10734] relay: one or more items not logged [item size (56) > sub-buffer size (16)] [ 175.002407][T10750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10750 comm=syz.5.2513 [ 175.016395][T10750] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2513'. [ 175.025996][T10750] hsr_slave_0: left promiscuous mode [ 175.031896][T10750] hsr_slave_1: left promiscuous mode [ 175.055250][T10754] tipc: Enabling of bearer rejected, already enabled [ 175.113604][T10763] netlink: 'syz.5.2518': attribute type 10 has an invalid length. [ 175.189660][T10771] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2532'. [ 175.200652][T10771] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2532'. [ 175.260794][T10776] atomic_op ffff88815f07bd28 conn xmit_atomic 0000000000000000 [ 175.298031][T10777] SELinux: ebitmap: truncated map [ 175.303571][T10777] SELinux: failed to load policy [ 175.319338][T10777] tipc: New replicast peer: 255.255.255.255 [ 175.325514][T10777] tipc: Enabled bearer , priority 10 [ 175.332647][T10783] netlink: 'syz.5.2525': attribute type 1 has an invalid length. [ 175.352038][T10783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.362248][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2525'. [ 175.375039][T10783] vlan0: entered promiscuous mode [ 175.380133][T10783] bond2: entered promiscuous mode [ 175.396363][T10783] dummy0: entered promiscuous mode [ 175.415275][T10783] bond2: (slave dummy0): making interface the new active one [ 175.437982][T10783] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 175.492097][T10792] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.876482][T10809] loop4: detected capacity change from 0 to 4096 [ 175.927107][T10809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.007017][T10816] loop5: detected capacity change from 0 to 128 [ 176.052636][T10815] lo speed is unknown, defaulting to 1000 [ 176.193247][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.323455][T10812] bio_check_eod: 57 callbacks suppressed [ 176.323474][T10812] syz.5.2541: attempt to access beyond end of device [ 176.323474][T10812] loop5: rw=524288, sector=353, nr_sectors = 24 limit=128 [ 176.373043][T10812] syz.5.2541: attempt to access beyond end of device [ 176.373043][T10812] loop5: rw=0, sector=353, nr_sectors = 8 limit=128 [ 176.387149][T10812] syz.5.2541: attempt to access beyond end of device [ 176.387149][T10812] loop5: rw=0, sector=353, nr_sectors = 8 limit=128 [ 176.417858][T10812] syz.5.2541: attempt to access beyond end of device [ 176.417858][T10812] loop5: rw=0, sector=353, nr_sectors = 8 limit=128 [ 177.157642][T10849] loop4: detected capacity change from 0 to 256 [ 177.192230][T10851] loop5: detected capacity change from 0 to 512 [ 177.241751][T10851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.264625][T10851] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.304231][ T7978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.439480][T10861] loop4: detected capacity change from 0 to 1024 [ 177.489544][T10864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10864 comm=syz.2.2558 [ 177.502249][T10864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10864 comm=syz.2.2558 [ 177.525573][T10861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.604003][T10861] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2557: Allocating blocks 449-513 which overlap fs metadata [ 177.650434][T10859] EXT4-fs (loop4): pa ffff888106d767e0: logic 48, phys. 177, len 21 [ 177.658580][T10859] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 177.719039][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.750830][T10875] loop4: detected capacity change from 0 to 512 [ 177.764497][T10875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.797386][T10875] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 177.824739][T10875] EXT4-fs (loop4): 1 truncate cleaned up [ 177.870156][T10875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.965162][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.139713][T10897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10897 comm=syz.4.2570 [ 178.155537][T10897] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2570'. [ 178.168844][T10897] hsr_slave_0: left promiscuous mode [ 178.176886][T10897] hsr_slave_1: left promiscuous mode [ 178.185219][T10895] SELinux: failed to load policy [ 178.210299][T10901] netlink: 'syz.1.2572': attribute type 10 has an invalid length. [ 178.219958][T10901] team0: Port device dummy0 added [ 178.226877][T10901] netlink: 'syz.1.2572': attribute type 10 has an invalid length. [ 178.235828][T10901] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.246475][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 178.246490][ T29] audit: type=1400 audit(1752810522.568:37082): avc: denied { associate } for pid=10898 comm="syz.2.2571" name="cgroup.controllers" dev="tmpfs" ino=2777 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 178.279119][T10901] team0: Failed to send options change via netlink (err -105) [ 178.286847][T10901] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.316374][T10901] team0: Port device dummy0 removed [ 178.329106][ T29] audit: type=1400 audit(1752810522.648:37083): avc: denied { bind } for pid=10905 comm="syz.5.2574" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.331980][T10901] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 178.365235][ T29] audit: type=1400 audit(1752810522.648:37084): avc: denied { node_bind } for pid=10905 comm="syz.5.2574" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 178.388066][T10906] futex_wake_op: syz.5.2574 tries to shift op by -1; fix this program [ 178.438011][T10908] netlink: 'syz.5.2575': attribute type 7 has an invalid length. [ 178.445861][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'. [ 178.503604][ T29] audit: type=1326 audit(1752810522.818:37085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.1.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 178.527535][ T29] audit: type=1326 audit(1752810522.818:37086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.1.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 178.551173][ T29] audit: type=1326 audit(1752810522.818:37087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.1.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 178.574894][ T29] audit: type=1326 audit(1752810522.818:37088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.1.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 178.598594][ T29] audit: type=1326 audit(1752810522.818:37089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.1.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 178.622565][ T29] audit: type=1326 audit(1752810522.818:37090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.1.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 178.646702][ T29] audit: type=1326 audit(1752810522.818:37091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.1.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 178.777396][T10926] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2583'. [ 178.943697][T10931] lo speed is unknown, defaulting to 1000 [ 178.999768][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 179.091473][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 179.209857][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 179.328817][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 179.339593][T10962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.348507][T10962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.615232][T10975] loop1: detected capacity change from 0 to 164 [ 179.646264][T10975] Unable to read rock-ridge attributes [ 179.676640][T10975] Unable to read rock-ridge attributes [ 179.712063][T10975] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 180.154393][T11008] futex_wake_op: syz.2.2620 tries to shift op by -1; fix this program [ 180.377042][T10971] lo speed is unknown, defaulting to 1000 [ 181.139312][T11049] futex_wake_op: syz.4.2635 tries to shift op by -1; fix this program [ 181.182263][T11047] lo speed is unknown, defaulting to 1000 [ 181.214428][T11054] netlink: 'syz.4.2637': attribute type 39 has an invalid length. [ 181.410629][T11058] loop4: detected capacity change from 0 to 8192 [ 181.577179][T11069] lo speed is unknown, defaulting to 1000 [ 181.626637][T11071] lo speed is unknown, defaulting to 1000 [ 182.030950][T11098] loop1: detected capacity change from 0 to 128 [ 182.111340][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2659'. [ 182.138572][T11102] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11102 comm=syz.4.2659 [ 182.216283][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2662'. [ 182.438211][T11115] lo speed is unknown, defaulting to 1000 [ 183.013048][T11146] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2677'. [ 183.101335][T11157] netlink: '¬í': attribute type 10 has an invalid length. [ 183.122936][T11157] bond2: (slave dummy0): Releasing active interface [ 183.134607][T11157] dummy0: left promiscuous mode [ 183.152048][T11157] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.161716][T11162] netlink: 'syz.5.2682': attribute type 10 has an invalid length. [ 183.171106][T11155] loop4: detected capacity change from 0 to 8192 [ 183.177790][T11157] team0: Failed to send options change via netlink (err -105) [ 183.185336][T11157] team0: Port device dummy0 added [ 183.191816][T11162] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.202432][T11162] team0: Failed to send options change via netlink (err -105) [ 183.210535][T11162] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.225670][T11162] team0: Port device dummy0 removed [ 183.356360][T11172] loop1: detected capacity change from 0 to 164 [ 183.369025][T11172] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 183.617037][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 183.617073][ T29] audit: type=1326 audit(1752810527.918:37372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 183.646968][ T29] audit: type=1326 audit(1752810527.918:37373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 183.670878][ T29] audit: type=1326 audit(1752810527.918:37374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 183.694533][ T29] audit: type=1326 audit(1752810527.918:37375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 183.718170][ T29] audit: type=1326 audit(1752810527.918:37376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 183.741878][ T29] audit: type=1326 audit(1752810527.928:37377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61cee2d310 code=0x7ffc0000 [ 183.765551][ T29] audit: type=1326 audit(1752810527.928:37378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 183.789245][ T29] audit: type=1326 audit(1752810527.928:37379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 183.812920][ T29] audit: type=1326 audit(1752810527.928:37380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 183.836724][ T29] audit: type=1326 audit(1752810527.928:37381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.5.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 184.078948][T11194] lo speed is unknown, defaulting to 1000 [ 184.400306][T11209] 9pnet: p9_errstr2errno: server reported unknown error [ 184.506294][T11219] loop1: detected capacity change from 0 to 128 [ 184.547469][T11222] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 184.547469][T11222] The task syz.2.2703 (11222) triggered the difference, watch for misbehavior. [ 185.617826][T11250] 9pnet_fd: Insufficient options for proto=fd [ 185.641082][T11252] tipc: Enabled bearer , priority 0 [ 185.685595][T11251] tipc: Disabling bearer [ 185.809627][T11250] lo speed is unknown, defaulting to 1000 [ 186.180837][T11255] lo speed is unknown, defaulting to 1000 [ 186.189360][T11234] lo speed is unknown, defaulting to 1000 [ 186.245379][T11264] lo speed is unknown, defaulting to 1000 [ 186.370210][T11266] lo speed is unknown, defaulting to 1000 [ 186.412464][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2728'. [ 186.522803][T11271] lo speed is unknown, defaulting to 1000 [ 186.748110][T11289] loop1: detected capacity change from 0 to 764 [ 187.166025][T11303] lo speed is unknown, defaulting to 1000 [ 187.277525][T11311] loop4: detected capacity change from 0 to 512 [ 187.308215][T11311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.325170][T11311] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.388408][T11313] lo speed is unknown, defaulting to 1000 [ 187.397372][ T5881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.527306][T11326] lo speed is unknown, defaulting to 1000 [ 187.584080][ T3424] page_pool_release_retry() stalled pool shutdown: id 82, 1 inflight 60 sec [ 187.919866][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2754'. [ 188.397899][T11353] lo speed is unknown, defaulting to 1000 [ 188.590414][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 188.663343][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 188.663362][ T29] audit: type=1400 audit(1752810532.978:37547): avc: denied { watch } for pid=11372 comm="syz.4.2765" path="/394/file0" dev="tmpfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.706425][T11368] lo speed is unknown, defaulting to 1000 [ 188.806488][T11377] loop1: detected capacity change from 0 to 128 [ 189.029456][T11377] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.042291][T11377] ext4 filesystem being mounted at /577/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.187605][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.216636][ T29] audit: type=1326 audit(1752810533.538:37548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.1.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 189.240370][ T29] audit: type=1326 audit(1752810533.538:37549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.1.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 189.289770][ T29] audit: type=1326 audit(1752810533.598:37550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.1.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 189.313769][ T29] audit: type=1326 audit(1752810533.598:37551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.1.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 189.567637][ T29] audit: type=1400 audit(1752810533.888:37552): avc: denied { read } for pid=11413 comm="syz.1.2778" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 189.590911][ T29] audit: type=1400 audit(1752810533.888:37553): avc: denied { open } for pid=11413 comm="syz.1.2778" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 189.657074][ T29] audit: type=1400 audit(1752810533.888:37554): avc: denied { firmware_load } for pid=5132 comm="kworker/u8:30" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 189.728829][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2780'. [ 189.767448][T11414] lo speed is unknown, defaulting to 1000 [ 189.853782][T11429] tipc: Enabling of bearer rejected, failed to enable media [ 190.022847][ T29] audit: type=1400 audit(1752810534.338:37555): avc: denied { read } for pid=11433 comm="syz.4.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.050767][T11441] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2791'. [ 190.102189][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2791'. [ 190.266764][ T29] audit: type=1326 audit(1752810534.588:37556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.0.2795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 190.508856][T11467] syzkaller0: entered allmulticast mode [ 190.514898][T11467] syzkaller0: entered promiscuous mode [ 190.522041][T11467] syzkaller0 (unregistering): left allmulticast mode [ 190.528921][T11467] syzkaller0 (unregistering): left promiscuous mode [ 190.646693][T11469] lo speed is unknown, defaulting to 1000 [ 190.996110][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2812'. [ 191.005173][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2812'. [ 191.014333][T11493] netlink: 'syz.4.2812': attribute type 4 has an invalid length. [ 191.044733][T11497] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 191.102614][T11502] netlink: 'syz.2.2825': attribute type 4 has an invalid length. [ 191.110690][T11502] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2825'. [ 191.182859][T11508] lo speed is unknown, defaulting to 1000 [ 191.202240][T11510] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 191.464568][T11518] lo speed is unknown, defaulting to 1000 [ 191.622945][T11528] lo speed is unknown, defaulting to 1000 [ 191.630897][T11536] serio: Serial port ptm0 [ 191.987880][T11559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.995761][T11559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.006590][T11559] team0: Mode changed to "activebackup" [ 192.080676][T11564] lo speed is unknown, defaulting to 1000 [ 192.271392][T11577] bridge: RTM_NEWNEIGH with invalid ether address [ 193.170200][T11614] loop1: detected capacity change from 0 to 128 [ 193.366984][T11611] syz.1.2855: attempt to access beyond end of device [ 193.366984][T11611] loop1: rw=524288, sector=353, nr_sectors = 256 limit=128 [ 193.381491][T11611] syz.1.2855: attempt to access beyond end of device [ 193.381491][T11611] loop1: rw=524288, sector=609, nr_sectors = 256 limit=128 [ 193.400794][T11611] syz.1.2855: attempt to access beyond end of device [ 193.400794][T11611] loop1: rw=0, sector=353, nr_sectors = 8 limit=128 [ 193.476814][T11627] siw: device registration error -23 [ 193.499926][T11631] __nla_validate_parse: 1 callbacks suppressed [ 193.499944][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2865'. [ 193.533509][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2865'. [ 193.713205][T11625] team0: Port device netdevsim0 removed [ 194.024906][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 194.024925][ T29] audit: type=1326 audit(1752810539.337:37713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 194.054848][ T29] audit: type=1326 audit(1752810539.337:37714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 194.078379][ T29] audit: type=1326 audit(1752810539.337:37715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 194.102291][ T29] audit: type=1326 audit(1752810539.337:37716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 194.126291][ T29] audit: type=1326 audit(1752810539.337:37717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 194.149911][ T29] audit: type=1326 audit(1752810539.337:37718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 194.173774][ T29] audit: type=1326 audit(1752810539.337:37719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 194.197628][ T29] audit: type=1326 audit(1752810539.337:37720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 194.221568][ T29] audit: type=1326 audit(1752810539.337:37721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f333ca2e9e3 code=0x7ffc0000 [ 194.245155][ T29] audit: type=1326 audit(1752810539.337:37722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f333ca2d45f code=0x7ffc0000 [ 194.355498][T11663] IPVS: Error connecting to the multicast addr [ 194.390435][T11665] wireguard0: entered promiscuous mode [ 194.396297][T11665] wireguard0: entered allmulticast mode [ 195.141582][T11705] netlink: 'syz.5.2895': attribute type 7 has an invalid length. [ 195.149515][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2895'. [ 195.169315][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.178094][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.590929][T11729] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2904'. [ 195.600214][T11729] C: renamed from team_slave_0 [ 195.622508][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2905'. [ 195.638867][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2905'. [ 195.745316][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2907'. [ 195.850082][T11748] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.881781][T11754] veth0: entered promiscuous mode [ 195.887601][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 195.897568][T11754] veth0 (unregistering): left promiscuous mode [ 196.203196][T11803] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 196.347772][T11826] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11826 comm=syz.2.2921 [ 197.273826][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2932'. [ 197.290745][T11899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.308355][T11899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.315719][T11899] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 197.327491][T11899] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 197.358803][T11909] macvlan1: entered promiscuous mode [ 197.364727][T11909] macvlan1: entered allmulticast mode [ 197.373821][T11909] bond3: (slave macvlan1): Error -98 calling set_mac_address [ 197.654539][T11925] netlink: 'syz.1.2940': attribute type 4 has an invalid length. [ 197.662827][T11925] netlink: 'syz.1.2940': attribute type 4 has an invalid length. [ 197.747218][T11931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2942'. [ 197.901475][T11937] loop1: detected capacity change from 0 to 1024 [ 197.917417][T11937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.945207][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.024691][T11948] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.033143][T11948] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.041517][T11948] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.049845][T11948] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.058237][T11948] vxlan1: entered promiscuous mode [ 198.063986][T11950] netlink: 'syz.2.2949': attribute type 14 has an invalid length. [ 198.108709][T11952] netlink: 'syz.2.2950': attribute type 2 has an invalid length. [ 198.116667][T11952] netlink: 'syz.2.2950': attribute type 1 has an invalid length. [ 198.221182][T11968] team0: Port device vlan0 added [ 198.228319][T11968] tipc: Started in network mode [ 198.233264][T11968] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 198.240472][T11968] tipc: Enabled bearer , priority 0 [ 198.412119][T11975] lo speed is unknown, defaulting to 1000 [ 198.742761][T11989] batman_adv: batadv0: Adding interface: ipvlan0 [ 198.749264][T11989] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.784184][T11989] batman_adv: batadv0: Interface activated: ipvlan0 [ 199.120697][T11995] lo speed is unknown, defaulting to 1000 [ 199.126603][T11996] bridge0: port 3(team0) entered blocking state [ 199.133000][T11996] bridge0: port 3(team0) entered disabled state [ 199.203585][T11996] team0: entered allmulticast mode [ 199.208865][T11996] team_slave_0: entered allmulticast mode [ 199.214711][T11996] team_slave_1: entered allmulticast mode [ 199.234322][ T36] tipc: Node number set to 11578026 [ 199.237892][T11996] team0: entered promiscuous mode [ 199.245123][T11996] team_slave_0: entered promiscuous mode [ 199.250856][T11996] team_slave_1: entered promiscuous mode [ 199.410939][T11973] syz.4.2959 (11973) used greatest stack depth: 6952 bytes left [ 199.494422][T12007] __nla_validate_parse: 2 callbacks suppressed [ 199.494444][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2971'. [ 199.509669][T12007] bridge_slave_1: left allmulticast mode [ 199.515675][T12007] bridge_slave_1: left promiscuous mode [ 199.521447][T12007] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.529327][T12007] bridge_slave_0: left allmulticast mode [ 199.535147][T12007] bridge_slave_0: left promiscuous mode [ 199.540906][T12007] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.159195][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 200.159215][ T29] audit: type=1326 audit(1752810545.477:37879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.191783][ T29] audit: type=1326 audit(1752810545.477:37880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.215565][ T29] audit: type=1326 audit(1752810545.517:37881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.239834][ T29] audit: type=1400 audit(1752810545.517:37882): avc: denied { wake_alarm } for pid=12015 comm="syz.1.2974" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 200.262032][ T29] audit: type=1326 audit(1752810545.567:37883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.285748][ T29] audit: type=1326 audit(1752810545.567:37884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.309497][T12016] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2975'. [ 200.320862][ T29] audit: type=1326 audit(1752810545.587:37885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.344646][ T29] audit: type=1326 audit(1752810545.587:37886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.368483][ T29] audit: type=1326 audit(1752810545.587:37887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.392132][ T29] audit: type=1326 audit(1752810545.637:37888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 200.417123][T12018] loop1: detected capacity change from 0 to 128 [ 200.435679][T12018] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.448115][T12018] ext4 filesystem being mounted at /620/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.507633][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.615159][T12034] loop1: detected capacity change from 0 to 8192 [ 200.622105][T12034] vfat: Unknown parameter '0xffffffffffffffff' [ 200.716476][T12034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2981'. [ 200.954361][T12065] tipc: Enabled bearer , priority 0 [ 201.049423][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2997'. [ 201.190559][T12074] lo speed is unknown, defaulting to 1000 [ 202.310942][T12136] loop1: detected capacity change from 0 to 2048 [ 202.345318][T12136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.375388][T12143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3026'. [ 202.418859][T12136] EXT4-fs (loop1): shut down requested (0) [ 202.450132][T12136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 202.472493][T12136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 202.486276][T12136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 202.501359][T12136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 202.512784][T12136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 202.521923][T12136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 202.533905][T12136] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 202.546671][T12150] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 202.566907][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.641869][T12152] lo speed is unknown, defaulting to 1000 [ 203.115225][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3046'. [ 203.277941][T12206] netlink: 'syz.1.3054': attribute type 10 has an invalid length. [ 203.321500][T12206] bond0: (slave dummy0): Releasing backup interface [ 203.335242][T12206] dummy0: entered promiscuous mode [ 203.344409][T12206] dummy0: entered allmulticast mode [ 203.354479][T12206] team0: Port device dummy0 added [ 203.497222][T12208] lo speed is unknown, defaulting to 1000 [ 203.597249][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.684244][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.721985][T12222] netlink: 'syz.0.3069': attribute type 27 has an invalid length. [ 203.751664][T12222] dummy0: left promiscuous mode [ 203.757289][T12222] wg2: left promiscuous mode [ 203.761900][T12222] wg2: left allmulticast mode [ 203.768697][T12222] ip6gre1: left allmulticast mode [ 203.774198][T12222] vxlan0: left promiscuous mode [ 203.798283][T12222] team0: left promiscuous mode [ 203.811445][T12222] team0: left allmulticast mode [ 203.826624][T12222] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 203.864194][ T3424] lo speed is unknown, defaulting to 1000 [ 203.867956][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3059'. [ 203.869953][ T3424] syz0: Port: 1 Link DOWN [ 203.925128][T12226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.941135][ T3394] lo speed is unknown, defaulting to 1000 [ 203.947272][ T3394] syz0: Port: 1 Link ACTIVE [ 204.704528][T12251] sch_fq: defrate 4294967295 ignored. [ 205.278311][T12268] lo speed is unknown, defaulting to 1000 [ 205.644132][T12276] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3079'. [ 205.711881][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 205.784467][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3081'. [ 205.807315][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 205.807334][ T29] audit: type=1326 audit(1752810551.127:38211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 205.837289][ T29] audit: type=1326 audit(1752810551.127:38212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 205.860849][ T29] audit: type=1326 audit(1752810551.127:38213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 206.014821][ T29] audit: type=1326 audit(1752810551.127:38214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 206.038612][ T29] audit: type=1326 audit(1752810551.157:38215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61cee2e9e3 code=0x7ffc0000 [ 206.062130][ T29] audit: type=1326 audit(1752810551.157:38216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61cee2e9e3 code=0x7ffc0000 [ 206.085616][ T29] audit: type=1326 audit(1752810551.157:38217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 206.109439][ T29] audit: type=1326 audit(1752810551.157:38218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 206.133238][ T29] audit: type=1326 audit(1752810551.157:38219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 206.156921][ T29] audit: type=1326 audit(1752810551.157:38220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x7ffc0000 [ 206.293084][T12299] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 206.332456][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3087'. [ 206.747587][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'. [ 206.771640][T12322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.800673][T12322] vlan0: entered allmulticast mode [ 206.805918][T12322] bond2: entered allmulticast mode [ 207.023030][T12332] bond0: (slave bond_slave_0): Releasing backup interface [ 207.031684][T12332] team0: Port device team_slave_0 removed [ 207.039002][T12332] team0: Port device team_slave_1 removed [ 208.058872][T12397] team0: left allmulticast mode [ 208.063791][T12397] team_slave_0: left allmulticast mode [ 208.069443][T12397] team_slave_1: left allmulticast mode [ 208.076424][T12397] dummy0: left allmulticast mode [ 208.081407][T12397] team0: left promiscuous mode [ 208.086348][T12397] team_slave_0: left promiscuous mode [ 208.091889][T12397] team_slave_1: left promiscuous mode [ 208.098648][T12397] dummy0: left promiscuous mode [ 208.103810][T12397] bridge0: port 3(team0) entered disabled state [ 208.125608][T12397] team0: Port device dummy0 removed [ 208.138199][T12397] bridge_slave_0: left allmulticast mode [ 208.143928][T12397] bridge_slave_0: left promiscuous mode [ 208.150453][T12397] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.160461][T12397] bridge_slave_1: left allmulticast mode [ 208.166357][T12397] bridge_slave_1: left promiscuous mode [ 208.172558][T12397] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.183451][T12397] bond0: (slave 5@ÿ): Releasing backup interface [ 208.191611][T12397] bond0: (slave bond_slave_1): Releasing backup interface [ 208.201600][T12397] team0: Failed to send options change via netlink (err -105) [ 208.210250][T12397] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 208.221398][T12397] team0: Port device team_slave_0 removed [ 208.228579][T12397] team0: Failed to send options change via netlink (err -105) [ 208.238381][T12397] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 208.248173][T12397] team0: Port device team_slave_1 removed [ 208.256039][T12397] bond1: (slave bridge3): Removing an active aggregator [ 208.263472][T12397] bond1: (slave bridge3): Releasing backup interface [ 208.272672][T12398] team0: Failed to send options change via netlink (err -105) [ 208.280348][T12398] team0: Mode changed to "activebackup" [ 208.693282][T12414] lo speed is unknown, defaulting to 1000 [ 208.910295][T12419] lo speed is unknown, defaulting to 1000 [ 209.440467][T12424] lo speed is unknown, defaulting to 1000 [ 209.541596][T12433] bond0: (slave dummy0): Releasing backup interface [ 209.924824][T12445] wireguard0: entered promiscuous mode [ 209.930364][T12445] wireguard0: entered allmulticast mode [ 210.020234][T12451] loop1: detected capacity change from 0 to 1024 [ 210.049437][T12451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.146415][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 210.200134][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 210.367690][T12451] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3146: Allocating blocks 481-513 which overlap fs metadata [ 210.368399][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 210.471593][T12462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.490734][T12464] vlan0: entered allmulticast mode [ 210.496685][T12464] bond2: entered allmulticast mode [ 210.698158][T12459] EXT4-fs (loop1): pa ffff888106d76700: logic 352, phys. 465, len 3 [ 210.707016][T12459] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 2 [ 210.743591][T12466] wg2: entered promiscuous mode [ 210.749344][T12466] wg2: entered allmulticast mode [ 210.816016][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.887567][T12474] sch_tbf: burst 4398 is lower than device lo mtu (39799) ! [ 210.901794][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3164'. [ 210.989048][T12481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3157'. [ 211.013830][T12481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3157'. [ 211.105030][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 211.105047][ T29] audit: type=1400 audit(1752810556.427:38354): avc: denied { ioctl } for pid=12492 comm="syz.0.3161" path="socket:[38974]" dev="sockfs" ino=38974 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.139488][T12493] tipc: Enabled bearer , priority 0 [ 211.148493][T12492] tipc: Resetting bearer [ 211.167655][T12492] tipc: Disabling bearer [ 211.232275][T12498] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3163'. [ 211.242231][T12498] C: renamed from team_slave_0 [ 211.778528][T12517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3172'. [ 211.790848][T12517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3172'. [ 212.077073][T12529] tipc: Enabling of bearer rejected, already enabled [ 212.187450][T12533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3177'. [ 212.222432][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3177'. [ 212.268430][ T29] audit: type=1326 audit(1752810557.587:38355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.298601][ T29] audit: type=1326 audit(1752810557.617:38356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.323753][ T29] audit: type=1326 audit(1752810557.617:38357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.348845][ T29] audit: type=1326 audit(1752810557.617:38358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.372475][ T29] audit: type=1326 audit(1752810557.617:38359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.397573][ T29] audit: type=1326 audit(1752810557.617:38360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.421494][ T29] audit: type=1326 audit(1752810557.617:38361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.446747][ T29] audit: type=1326 audit(1752810557.617:38362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.470436][ T29] audit: type=1326 audit(1752810557.617:38363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 212.949678][T12547] loop1: detected capacity change from 0 to 1024 [ 212.981460][T12548] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 212.995952][T12547] EXT4-fs: Ignoring removed orlov option [ 213.013672][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3181'. [ 213.047768][T12547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.220641][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.236836][T12557] netlink: 'syz.4.3187': attribute type 1 has an invalid length. [ 213.692834][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3196'. [ 213.757167][T12607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12607 comm=syz.4.3197 [ 213.831429][T12616] batadv_slave_1: entered promiscuous mode [ 213.846843][T12616] batadv_slave_1: left promiscuous mode [ 213.895355][T12620] lo speed is unknown, defaulting to 1000 [ 214.022475][T12644] batman_adv: batadv0: Removing interface: ipvlan0 [ 215.596451][T12786] lo speed is unknown, defaulting to 1000 [ 216.019868][T12847] bridge_slave_0: left allmulticast mode [ 216.025912][T12847] bridge_slave_0: left promiscuous mode [ 216.031722][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.041847][T12847] bridge_slave_1: left allmulticast mode [ 216.042155][T12849] __nla_validate_parse: 4 callbacks suppressed [ 216.042173][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3244'. [ 216.047617][T12847] bridge_slave_1: left promiscuous mode [ 216.047831][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.079559][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3234'. [ 216.092884][T12847] bond0: (slave 0@ÿ): Releasing backup interface [ 216.101027][T12847] bond0: (slave bond_slave_1): Releasing backup interface [ 216.110261][T12847] team0: Port device C removed [ 216.120660][T12847] team0: Port device team_slave_1 removed [ 216.128166][T12847] bond1: (slave batadv1): Releasing active interface [ 216.142040][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3234'. [ 216.153457][T12847] team0: Port device vlan0 removed [ 216.178956][T12844] lo speed is unknown, defaulting to 1000 [ 216.196082][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3244'. [ 216.431817][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3236'. [ 216.706915][T12895] tipc: New replicast peer: 255.255.255.83 [ 216.712905][T12895] tipc: Enabled bearer , priority 10 [ 216.835749][T12907] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.844470][T12907] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.852868][T12907] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.862036][T12907] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.116078][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3249'. [ 217.126742][T12937] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3249'. [ 217.377004][T12944] lo speed is unknown, defaulting to 1000 [ 217.563573][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3262'. [ 217.724989][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3262'. [ 218.311059][T12999] lo speed is unknown, defaulting to 1000 [ 219.035669][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 219.035687][ T29] audit: type=1400 audit(1752810564.357:38437): avc: denied { ioctl } for pid=13082 comm="syz.0.3269" path="socket:[40226]" dev="sockfs" ino=40226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.418621][T13149] netlink: 'syz.4.3272': attribute type 4 has an invalid length. [ 219.499627][T13149] netlink: 'syz.4.3272': attribute type 4 has an invalid length. [ 219.545844][T13148] lo speed is unknown, defaulting to 1000 [ 219.870282][T13161] lo speed is unknown, defaulting to 1000 [ 220.011257][ T29] audit: type=1326 audit(1752810565.327:38438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.5.3275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61cee2e9a9 code=0x0 [ 220.062778][T13163] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.075610][T13179] xt_hashlimit: size too large, truncated to 1048576 [ 220.393306][T13198] netlink: 'syz.0.3291': attribute type 1 has an invalid length. [ 220.501496][T13203] lo speed is unknown, defaulting to 1000 [ 220.532660][T13208] batadv_slave_1: entered promiscuous mode [ 220.564151][T13208] batadv_slave_1: left promiscuous mode [ 220.660259][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3298'. [ 220.729539][T13219] vlan1: entered allmulticast mode [ 220.736360][T13219] dummy0: entered allmulticast mode [ 221.118534][T13227] batadv_slave_0: entered promiscuous mode [ 221.722790][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3301'. [ 221.883670][ T29] audit: type=1400 audit(1752810567.197:38439): avc: denied { accept } for pid=13233 comm="syz.0.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.948882][T13225] batadv_slave_0: left promiscuous mode [ 222.212403][ T29] audit: type=1400 audit(1752810567.527:38440): avc: denied { execute } for pid=13257 comm="syz.0.3312" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 222.828589][T13274] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20002 [ 223.088495][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'. [ 223.286889][ T29] audit: type=1400 audit(1752810568.607:38441): avc: denied { getopt } for pid=13294 comm="syz.0.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.395321][ T3424] lo speed is unknown, defaulting to 1000 [ 223.401261][ T3424] syz0: Port: 1 Link DOWN [ 223.433560][T13312] bridge_slave_1: entered promiscuous mode [ 223.838269][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3336'. [ 223.988812][T13280] syz.4.3322 (13280) used greatest stack depth: 5880 bytes left [ 224.077340][T13332] tipc: Enabling of bearer rejected, failed to enable media [ 224.088935][ T29] audit: type=1326 audit(1752810569.407:38442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.117781][ T29] audit: type=1326 audit(1752810569.407:38443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.142587][ T29] audit: type=1326 audit(1752810569.407:38444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.166409][ T29] audit: type=1326 audit(1752810569.407:38445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.191668][ T29] audit: type=1326 audit(1752810569.407:38446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.209775][T13339] netlink: 'syz.1.3345': attribute type 10 has an invalid length. [ 224.217006][ T29] audit: type=1326 audit(1752810569.407:38447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.230696][T13339] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 224.251132][ T29] audit: type=1326 audit(1752810569.407:38448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.262351][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 224.284596][ T29] audit: type=1326 audit(1752810569.407:38449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.318700][ T29] audit: type=1326 audit(1752810569.437:38450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.342511][ T29] audit: type=1326 audit(1752810569.437:38451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13328 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ca2e9a9 code=0x7ffc0000 [ 224.396165][T13340] bond0: (slave bridge0): Releasing backup interface [ 224.502303][T13342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13342 comm=syz.5.3347 [ 224.619150][T13363] netlink: 'syz.2.3356': attribute type 27 has an invalid length. [ 224.627301][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3355'. [ 224.639386][T13363] ip6gre1: left allmulticast mode [ 224.708783][T13363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.746981][T13363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.794248][T13376] netlink: 'syz.1.3360': attribute type 7 has an invalid length. [ 224.802220][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'. [ 224.896368][T13387] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3364'. [ 224.946057][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3366'. [ 224.970379][T13392] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.984722][T13392] vlan0: entered allmulticast mode [ 224.989988][T13392] bond4: entered allmulticast mode [ 225.009426][T13395] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3367'. [ 225.075739][T13401] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3370'. [ 225.356429][T13413] 9pnet: p9_errstr2errno: server reported unknown error [ 225.966404][T13436] lo speed is unknown, defaulting to 1000 [ 226.149961][T13445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.158756][T13445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.170132][T13445] netlink: 'syz.1.3384': attribute type 27 has an invalid length. [ 226.181118][T13445] bridge_slave_1: left promiscuous mode [ 226.192204][T13445] vxlan1: left promiscuous mode [ 226.251918][T13445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.261686][T13445] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.269479][T13445] tipc: Resetting bearer [ 226.276307][T13445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.774471][T13454] netlink: 'syz.2.3389': attribute type 7 has an invalid length. [ 226.782283][T13454] __nla_validate_parse: 2 callbacks suppressed [ 226.782295][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 226.845603][T13452] lo speed is unknown, defaulting to 1000 [ 226.923923][T13466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13466 comm=syz.4.3394 [ 227.023248][T13472] 9pnet_fd: p9_fd_create_tcp (13472): problem connecting socket to 127.0.0.1 [ 227.042760][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3396'. [ 227.110789][T13485] netlink: 'syz.5.3404': attribute type 27 has an invalid length. [ 227.121664][T13485] wg2: left promiscuous mode [ 227.126395][T13485] wg2: left allmulticast mode [ 227.138284][T13485] bond1: left promiscuous mode [ 227.143959][T13485] batadv1: left promiscuous mode [ 227.149917][T13485] batadv1: left allmulticast mode [ 227.172178][T13485] vlan0: left promiscuous mode [ 227.177144][T13485] bond2: left promiscuous mode [ 227.207798][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.226695][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.247465][T13486] tipc: Resetting bearer [ 227.273744][T13486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.377480][T13502] lo speed is unknown, defaulting to 1000 [ 227.607050][T13516] random: crng reseeded on system resumption [ 227.867870][T13536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3419'. [ 227.915184][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3419'. [ 228.092919][T13550] netlink: 'syz.5.3426': attribute type 3 has an invalid length. [ 228.101476][T13550] netlink: 'syz.5.3426': attribute type 1 has an invalid length. [ 228.122218][T13557] netlink: 'syz.1.3428': attribute type 13 has an invalid length. [ 228.155284][T13557] tipc: Resetting bearer [ 228.161837][T13557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.182748][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 228.203186][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 228.227936][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 228.238434][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 228.261822][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 228.271996][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 228.878989][T13579] netlink: 'syz.4.3432': attribute type 27 has an invalid length. [ 228.900928][T13579] macsec0: left promiscuous mode [ 228.988854][T13579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.008410][T13579] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.037499][T13579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.361796][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 229.361812][ T29] audit: type=1400 audit(1752810574.657:38626): avc: denied { ioctl } for pid=13598 comm="syz.2.3442" path="socket:[41144]" dev="sockfs" ino=41144 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 229.535270][ T29] audit: type=1400 audit(1752810574.857:38627): avc: denied { write } for pid=13598 comm="syz.2.3442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 229.555946][ T29] audit: type=1400 audit(1752810574.857:38628): avc: denied { read } for pid=13598 comm="syz.2.3442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 229.674654][T13622] futex_wake_op: syz.1.3452 tries to shift op by -1; fix this program [ 229.907510][ T29] audit: type=1400 audit(1752810575.227:38629): avc: denied { create } for pid=13634 comm="syz.0.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.993708][ T29] audit: type=1400 audit(1752810575.307:38630): avc: denied { mount } for pid=13646 comm="syz.0.3462" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 230.037826][ T29] audit: type=1400 audit(1752810575.357:38631): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 230.105209][T13657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.115647][T13655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.124271][T13655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.133323][T13655] netlink: 'syz.0.3464': attribute type 27 has an invalid length. [ 230.158802][T13655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.175887][ T3394] lo speed is unknown, defaulting to 1000 [ 230.181818][ T3394] syz0: Port: 1 Link ACTIVE [ 230.194430][T13666] blktrace: Concurrent blktraces are not allowed on loop3 [ 230.195040][T13657] vlan0: entered allmulticast mode [ 230.206817][T13657] bond3: entered allmulticast mode [ 230.251838][T13669] netlink: 'syz.1.3470': attribute type 13 has an invalid length. [ 230.261741][ T29] audit: type=1326 audit(1752810575.577:38632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13667 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 230.358787][ T29] audit: type=1326 audit(1752810575.617:38633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13667 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 230.383230][ T29] audit: type=1326 audit(1752810575.617:38634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13667 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 230.407850][ T29] audit: type=1326 audit(1752810575.617:38635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13667 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe973e9a9 code=0x7ffc0000 [ 230.526437][T13688] : renamed from bond0 (while UP) [ 231.609467][T13721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.616803][T13721] IPv6: NLM_F_CREATE should be set when creating new route [ 232.352303][T13747] __nla_validate_parse: 9 callbacks suppressed [ 232.352340][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 232.765421][T13769] netlink: 'syz.2.3509': attribute type 4 has an invalid length. [ 232.969267][T13784] netlink: 'syz.2.3513': attribute type 7 has an invalid length. [ 232.977848][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 233.870731][T13801] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3521'. [ 234.145762][T13818] IPv6: Can't replace route, no match found [ 234.531717][T13845] macvlan0: entered promiscuous mode [ 234.537888][T13845] bond0: entered promiscuous mode [ 234.543105][T13845] macvlan0: entered allmulticast mode [ 234.548536][T13845] bond0: entered allmulticast mode [ 234.561184][T13845] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 234.570309][T13845] bond0: left allmulticast mode [ 234.575256][T13845] bond0: left promiscuous mode [ 234.621772][T13848] sit0: entered allmulticast mode [ 234.672849][T13848] sit0: entered promiscuous mode [ 235.640864][T13884] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3553'. [ 236.447598][T13912] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3564'. [ 236.467463][T13912] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3564'. [ 236.631461][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 236.631522][ T29] audit: type=1326 audit(1752810581.937:38757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.662972][ T29] audit: type=1326 audit(1752810581.937:38758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.687989][ T29] audit: type=1326 audit(1752810581.937:38759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.711668][ T29] audit: type=1326 audit(1752810581.937:38760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.736710][ T29] audit: type=1326 audit(1752810581.937:38761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.760359][ T29] audit: type=1326 audit(1752810581.937:38762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.778368][T13920] netlink: 'syz.0.3569': attribute type 4 has an invalid length. [ 236.785515][ T29] audit: type=1326 audit(1752810581.937:38763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.792487][T13920] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3569'. [ 236.816794][ T29] audit: type=1326 audit(1752810581.937:38764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.850190][ T29] audit: type=1326 audit(1752810581.937:38765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.873961][ T29] audit: type=1326 audit(1752810581.937:38766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 236.979962][T13929] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3572'. [ 237.357558][T13943] lo speed is unknown, defaulting to 1000 [ 237.528087][T13950] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3579'. [ 237.632091][T13950] 0ªX¹¦À: renamed from caif0 [ 237.690849][T13950] 0ªX¹¦À: entered allmulticast mode [ 237.696230][T13950] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 238.245679][T13973] netlink: '+}[@': attribute type 13 has an invalid length. [ 238.298065][T13973] tipc: Resetting bearer [ 238.444653][T13989] vlan0: entered allmulticast mode [ 238.453428][T13989] dummy0: entered allmulticast mode [ 238.531154][T13993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.539931][T13993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.549823][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3597'. [ 239.174836][T14006] netlink: 33912 bytes leftover after parsing attributes in process `syz.4.3602'. [ 239.203405][T14010] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 239.218692][T14010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.239399][T14010] bond0: (slave veth3): Enslaving as an active interface with a down link [ 239.248117][T14013] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3604'. [ 239.275278][T14010] vlan0: entered allmulticast mode [ 239.280482][T14010] bond0: entered allmulticast mode [ 239.315707][T14010] bond0: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 239.510491][T14038] tipc: New replicast peer: 10.1.1.2 [ 239.516656][T14038] tipc: Enabled bearer , priority 10 [ 240.043724][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 240.052857][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3620'. [ 240.066721][T14054] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.075032][T14054] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.083256][T14054] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.092238][T14054] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.104129][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 240.113111][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3620'. [ 240.271485][T14071] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.280066][T14071] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.288597][T14071] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.297717][T14071] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.390591][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 240.399361][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 240.405763][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 240.444884][T14079] infiniband syz2: set down [ 240.449552][T14079] infiniband syz2: added vxcan1 [ 240.455266][ T1036] vxcan1 speed is unknown, defaulting to 1000 [ 240.462168][T14079] RDS/IB: syz2: added [ 240.466196][T14079] smc: adding ib device syz2 with port count 1 [ 240.472409][T14079] smc: ib device syz2 port 1 has pnetid [ 240.478375][ T1036] vxcan1 speed is unknown, defaulting to 1000 [ 240.485180][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 240.525014][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 240.567983][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 240.612363][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 240.646744][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 240.717693][T14099] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3638'. [ 240.876943][T14108] lo speed is unknown, defaulting to 1000 [ 240.883370][T14113] rdma_op ffff88810ae75980 conn xmit_rdma 0000000000000000 [ 240.893838][T14108] vxcan1 speed is unknown, defaulting to 1000 [ 241.006844][T14128] tipc: Enabling of bearer rejected, failed to enable media [ 241.035544][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3647'. [ 241.190399][T14153] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.799901][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 241.799944][ T29] audit: type=1326 audit(1752810587.117:38862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 241.830088][ T29] audit: type=1326 audit(1752810587.117:38863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 241.854811][ T29] audit: type=1326 audit(1752810587.117:38864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 241.878440][ T29] audit: type=1326 audit(1752810587.117:38865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 241.902685][ T29] audit: type=1326 audit(1752810587.117:38866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 241.926979][ T29] audit: type=1326 audit(1752810587.127:38867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 241.950631][ T29] audit: type=1326 audit(1752810587.127:38868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 241.975072][ T29] audit: type=1326 audit(1752810587.127:38869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 241.998772][ T29] audit: type=1326 audit(1752810587.127:38870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 242.022962][ T29] audit: type=1326 audit(1752810587.127:38871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14173 comm="syz.2.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 242.083729][T14183] netlink: 'syz.5.3674': attribute type 4 has an invalid length. [ 242.093954][T14183] netlink: 'syz.5.3674': attribute type 4 has an invalid length. [ 242.813874][T14245] __nla_validate_parse: 2 callbacks suppressed [ 242.813891][T14245] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3694'. [ 242.830864][T14245] gretap0: entered promiscuous mode [ 242.838825][T14245] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3694'. [ 242.848975][T14245] 0ªî{X¹¦: renamed from gretap0 [ 242.856885][T14245] 0ªî{X¹¦: left promiscuous mode [ 242.861994][T14245] 0ªî{X¹¦: entered allmulticast mode [ 242.868444][T14245] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 243.386066][T14276] 9pnet_fd: p9_fd_create_tcp (14276): problem connecting socket to 127.0.0.1 [ 243.501211][T14286] $Hÿ: renamed from bond0 (while UP) [ 243.508793][T14286] $Hÿ: entered promiscuous mode [ 243.681361][T14299] dvmrp1: entered allmulticast mode [ 243.765171][T14299] dvmrp1: left allmulticast mode [ 244.034100][T14328] netlink: 'syz.4.3731': attribute type 7 has an invalid length. [ 244.041927][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 244.078795][T14325] netlink: 'syz.1.3730': attribute type 13 has an invalid length. [ 244.093453][T14325] tipc: Resetting bearer [ 244.100173][T14325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.536211][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3739'. [ 244.554636][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3739'. [ 244.597219][T14347] lo speed is unknown, defaulting to 1000 [ 244.603522][T14347] vxcan1 speed is unknown, defaulting to 1000 [ 245.186122][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3749'. [ 245.522952][T14399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3757'. [ 245.539564][T14399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.553335][T14399] vlan0: entered allmulticast mode [ 245.559360][T14399] bond5: entered allmulticast mode [ 245.663456][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3760'. [ 245.696895][T14411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.713972][T14411] vlan0: entered allmulticast mode [ 245.719183][T14411] bond4: entered allmulticast mode [ 246.243333][T14459] pim6reg: entered allmulticast mode [ 246.284687][T14459] pim6reg: left allmulticast mode [ 246.565871][T14467] lo speed is unknown, defaulting to 1000 [ 246.571978][T14467] vxcan1 speed is unknown, defaulting to 1000 [ 246.804945][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 246.804965][ T29] audit: type=1400 audit(1752810592.127:39010): avc: denied { setopt } for pid=14483 comm="syz.2.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 246.884253][ T29] audit: type=1326 audit(1752810592.207:39011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 246.908732][ T29] audit: type=1326 audit(1752810592.207:39012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 246.945305][T14494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3788'. [ 246.986943][T14496] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3793'. [ 247.027444][ T29] audit: type=1326 audit(1752810592.247:39013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8c7c7d45f code=0x7ffc0000 [ 247.051741][ T29] audit: type=1326 audit(1752810592.247:39014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 247.076258][ T29] audit: type=1326 audit(1752810592.247:39015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 247.100028][ T29] audit: type=1326 audit(1752810592.247:39016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 247.123674][ T29] audit: type=1326 audit(1752810592.247:39017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 247.148089][ T29] audit: type=1326 audit(1752810592.247:39018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 247.171799][ T29] audit: type=1326 audit(1752810592.247:39019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14489 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8c7c7e9a9 code=0x7ffc0000 [ 247.255349][T14514] bridge0: port 1(macsec1) entered blocking state [ 247.262040][T14514] bridge0: port 1(macsec1) entered disabled state [ 247.280265][T14514] macsec1: entered allmulticast mode [ 247.285783][T14514] bridge0: entered allmulticast mode [ 247.321953][T14514] macsec1: left allmulticast mode [ 247.327195][T14514] bridge0: left allmulticast mode [ 247.532230][T14531] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 247.568808][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.619723][T14536] vlan0: entered allmulticast mode [ 247.624965][T14536] bond0: entered allmulticast mode [ 248.552041][T14579] __nla_validate_parse: 4 callbacks suppressed [ 248.552060][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3829'. [ 248.568255][T14579] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3829'. [ 248.607466][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3831'. [ 248.618938][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3831'. [ 248.682600][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 249.252938][T14614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3844'. [ 249.262040][T14614] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3844'. [ 249.438039][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3849'. [ 249.470194][T14633] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.479444][T14633] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.487715][T14633] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.495959][T14633] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.564923][T14633] vxlan1: entered promiscuous mode [ 249.705931][T14640] hub 9-0:1.0: USB hub found [ 249.710839][T14640] hub 9-0:1.0: 8 ports detected [ 250.110444][T14680] xt_CONNSECMARK: invalid mode: 0 [ 250.200963][T14686] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3873'. [ 250.212415][T14686] netlink: 'syz.1.3873': attribute type 4 has an invalid length. [ 250.221018][T14686] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3873'. [ 251.268012][T14734] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.276525][T14734] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.285136][T14734] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.293766][T14734] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.943654][T14773] lo speed is unknown, defaulting to 1000 [ 251.955889][T14773] vxcan1 speed is unknown, defaulting to 1000 [ 252.250394][T14792] tipc: New replicast peer: 255.255.255.83 [ 252.256385][T14792] tipc: Enabled bearer , priority 10 [ 252.992819][T14814] netlink: 'syz.5.3926': attribute type 39 has an invalid length. [ 253.033956][T14819] netlink: 'syz.0.3928': attribute type 13 has an invalid length. [ 253.095082][ T1036] lo speed is unknown, defaulting to 1000 [ 253.100901][ T1036] syz0: Port: 1 Link DOWN [ 253.337673][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 253.337693][ T29] audit: type=1400 audit(1752810598.657:39233): avc: denied { accept } for pid=14832 comm="syz.0.3945" path="socket:[46082]" dev="sockfs" ino=46082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.570713][ T29] audit: type=1326 audit(1752810598.887:39234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 253.595243][ T29] audit: type=1326 audit(1752810598.887:39235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 253.620337][ T29] audit: type=1326 audit(1752810598.887:39236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 253.645012][ T29] audit: type=1326 audit(1752810598.887:39237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 253.668926][ T29] audit: type=1326 audit(1752810598.897:39238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 253.693738][T14846] __nla_validate_parse: 15 callbacks suppressed [ 253.693752][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3950'. [ 253.716884][T14846] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.725233][T14846] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.733579][T14846] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.741912][T14846] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.762382][T14846] vxlan1: entered promiscuous mode [ 253.768845][ T29] audit: type=1326 audit(1752810599.027:39239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 253.793329][ T29] audit: type=1326 audit(1752810599.027:39240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 253.817808][ T29] audit: type=1326 audit(1752810599.067:39241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 253.841506][ T29] audit: type=1326 audit(1752810599.067:39242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e114ee9a9 code=0x7ffc0000 [ 254.143273][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3942'. [ 254.730440][T14879] netlink: 'syz.2.3956': attribute type 4 has an invalid length. [ 254.776296][T14879] netlink: 'syz.2.3956': attribute type 4 has an invalid length. [ 255.235873][T14922] netlink: 'syz.5.3974': attribute type 4 has an invalid length. [ 255.279847][T14922] netlink: 'syz.5.3974': attribute type 4 has an invalid length. [ 255.797375][T14928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14928 comm=syz.2.3977 [ 256.181623][T14956] xt_hashlimit: size too large, truncated to 1048576 [ 256.227849][T14958] netlink: 'syz.0.3990': attribute type 10 has an invalid length. [ 256.235879][T14958] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3990'. [ 256.467199][T14978] netlink: 'syz.1.3997': attribute type 1 has an invalid length. [ 256.478797][T14979] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3999'. [ 256.628956][T14989] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.180049][T15012] netlink: 'syz.2.4012': attribute type 1 has an invalid length. [ 257.272296][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4018'. [ 257.608955][T15043] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4025'. [ 257.758148][T15056] batadv_slave_1: entered promiscuous mode [ 257.767388][T15056] batadv_slave_1: left promiscuous mode [ 257.797335][T15053] ================================================================== [ 257.805484][T15053] BUG: KCSAN: data-race in tipc_group_create / tipc_poll [ 257.812556][T15053] [ 257.814907][T15053] write to 0xffff8881035b77f8 of 1 bytes by task 15058 on cpu 1: [ 257.822644][T15053] tipc_group_create+0x21b/0x290 [ 257.827609][T15053] tipc_sk_join+0x130/0x2e0 [ 257.832134][T15053] tipc_setsockopt+0x598/0x620 [ 257.836949][T15053] __sys_setsockopt+0x184/0x200 [ 257.841827][T15053] __x64_sys_setsockopt+0x64/0x80 [ 257.846875][T15053] x64_sys_call+0x2bd5/0x2fb0 [ 257.851596][T15053] do_syscall_64+0xd2/0x200 [ 257.856112][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.862024][T15053] [ 257.864355][T15053] read to 0xffff8881035b77f8 of 1 bytes by task 15053 on cpu 0: [ 257.872083][T15053] tipc_poll+0x12a/0x350 [ 257.876347][T15053] sock_poll+0x218/0x240 [ 257.880645][T15053] __io_arm_poll_handler+0x1ee/0xb70 [ 257.885966][T15053] io_arm_poll_handler+0x427/0x590 [ 257.891105][T15053] io_queue_async+0x60/0x3a0 [ 257.895725][T15053] io_submit_sqes+0xa25/0xfd0 [ 257.900431][T15053] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 257.906006][T15053] __x64_sys_io_uring_enter+0x78/0x90 [ 257.911405][T15053] x64_sys_call+0x28c8/0x2fb0 [ 257.916102][T15053] do_syscall_64+0xd2/0x200 [ 257.920618][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.926530][T15053] [ 257.928873][T15053] value changed: 0x01 -> 0x00 [ 257.933561][T15053] [ 257.935901][T15053] Reported by Kernel Concurrency Sanitizer on: [ 257.942076][T15053] CPU: 0 UID: 0 PID: 15053 Comm: syz.0.4042 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 257.954601][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.964690][T15053] ================================================================== [ 257.993848][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4034'. [ 258.018591][T15061] netlink: 'syz.4.4033': attribute type 1 has an invalid length.