last executing test programs: 1m3.003692929s ago: executing program 4 (id=703): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x4, 0x8406, 0x3, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 1m2.860079383s ago: executing program 4 (id=707): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) futex(&(0x7f0000000080), 0x10b, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1142, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) 1m1.942253977s ago: executing program 4 (id=732): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2$9p(0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa43, 0x8000000000000001], 0x1, 0x0, 0x0, [{}]}, 0x88) 1m1.90636849s ago: executing program 4 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000180)={0x1d, r4}, 0x10) bind$can_raw(r3, &(0x7f0000000040), 0x10) 1m1.846418027s ago: executing program 4 (id=736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m1.762297645s ago: executing program 4 (id=738): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r2, 0x0, 0x0) 46.6783731s ago: executing program 32 (id=738): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r2, 0x0, 0x0) 2.027860993s ago: executing program 0 (id=2143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 1.942147112s ago: executing program 0 (id=2156): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 1.856577911s ago: executing program 0 (id=2159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) unshare(0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.758518051s ago: executing program 5 (id=2150): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/157}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x61b) socketpair(0x22, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x56, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) close(r0) 1.753954381s ago: executing program 0 (id=2162): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) utimes(&(0x7f0000000200)='./file1\x00', 0x0) 1.709575746s ago: executing program 5 (id=2152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x810) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.66379262s ago: executing program 0 (id=2153): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r2, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x1d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 1.657826491s ago: executing program 5 (id=2155): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xfffffffffffffd05, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x82}], 0x2}, 0x1}], 0x2, 0x0, 0x0) 1.635322263s ago: executing program 2 (id=2157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0x7a) 1.591692378s ago: executing program 2 (id=2160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) 806.327908ms ago: executing program 0 (id=2175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x200}}, 0x0, 0x0, 0x4c, 0x0, "31147913b33c3a73b15671127ff6f31689cad56b325f545024f1a12f45542d0fffccc86fa580e196d48631b7e928ee1ac1b7c95fea0403b7e2594df579b15de0dec74cafbd20cb332feff5a895e19408"}, 0xd8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 793.205479ms ago: executing program 5 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 722.366036ms ago: executing program 2 (id=2184): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 722.000976ms ago: executing program 5 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r0}, &(0x7f0000001cc0), &(0x7f0000001d00)=r1}, 0x20) 622.737376ms ago: executing program 2 (id=2189): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x2) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000008c0)=""/239, 0x40000, 0x0, 0x0, 0x0) 614.409057ms ago: executing program 1 (id=2190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c50bae528248d5552bff00", "7e25837b", "360000000002005f"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r1, 0x0) 575.995451ms ago: executing program 1 (id=2191): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 575.846691ms ago: executing program 3 (id=2192): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r2, 0xffffffffffffffff, 0x0) 551.168713ms ago: executing program 2 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r2, 0x0, 0x11, 0x9) 534.268555ms ago: executing program 3 (id=2194): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) rename(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) 523.001977ms ago: executing program 1 (id=2195): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x6c5, &(0x7f0000000080)={0x0, 0x4078, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 441.188995ms ago: executing program 3 (id=2196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20002017}) close_range(r2, 0xffffffffffffffff, 0x0) 368.811802ms ago: executing program 3 (id=2197): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 311.546088ms ago: executing program 5 (id=2198): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x9, 0x5, 0x2, 0x4, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 178.664511ms ago: executing program 3 (id=2199): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 168.144142ms ago: executing program 1 (id=2200): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(0x0, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 123.294957ms ago: executing program 1 (id=2201): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 14.512358ms ago: executing program 1 (id=2202): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) 9.763459ms ago: executing program 2 (id=2203): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000300)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) 0s ago: executing program 3 (id=2204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): ort device team_slave_0 added [ 51.012499][ T4168] team0: Port device team_slave_1 added [ 51.041901][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.048975][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.074926][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.111330][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.118626][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.144675][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.162307][ T4217] block device autoloading is deprecated and will be removed. [ 51.229807][ T4168] hsr_slave_0: entered promiscuous mode [ 51.236031][ T4168] hsr_slave_1: entered promiscuous mode [ 51.247191][ T4168] debugfs: 'hsr0' already exists in 'hsr' [ 51.252986][ T4168] Cannot create hsr debugfs directory [ 51.425047][ T4168] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.496394][ T4168] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.546809][ T4168] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.586416][ T4168] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.683439][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.705669][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.722367][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.744397][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.819469][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.846339][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.862516][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.869775][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.882807][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.889952][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.966390][ T123] bridge_slave_1: left allmulticast mode [ 51.972184][ T123] bridge_slave_1: left promiscuous mode [ 51.977990][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.013699][ T123] bridge_slave_0: left allmulticast mode [ 52.019548][ T123] bridge_slave_0: left promiscuous mode [ 52.025458][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.177197][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.187976][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.201353][ T123] bond0 (unregistering): Released all slaves [ 52.240459][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.280104][ T123] hsr_slave_0: left promiscuous mode [ 52.292587][ T123] hsr_slave_1: left promiscuous mode [ 52.301470][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.308999][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.317239][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.324825][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.334278][ T4287] xt_hashlimit: max too large, truncated to 1048576 [ 52.341215][ T123] veth1_macvtap: left promiscuous mode [ 52.347128][ T123] veth0_macvtap: left promiscuous mode [ 52.351571][ T4290] loop0: detected capacity change from 0 to 1024 [ 52.359073][ T123] veth1_vlan: left promiscuous mode [ 52.376047][ T123] veth0_vlan: left promiscuous mode [ 52.398873][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.416522][ T4290] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.535792][ T123] team0 (unregistering): Port device team_slave_1 removed [ 52.554648][ T123] team0 (unregistering): Port device team_slave_0 removed [ 52.609757][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.678419][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 52.725562][ T4168] veth0_vlan: entered promiscuous mode [ 52.750624][ T4168] veth1_vlan: entered promiscuous mode [ 52.835301][ T4168] veth0_macvtap: entered promiscuous mode [ 52.851276][ T4168] veth1_macvtap: entered promiscuous mode [ 52.890649][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.916473][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 52.925679][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 52.947700][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 52.956724][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 52.991556][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.000931][ T4338] loop0: detected capacity change from 0 to 512 [ 53.009487][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.024747][ T4338] EXT4-fs: Ignoring removed nobh option [ 53.048854][ T4338] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.060622][ T4338] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 53.070755][ T4338] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.326: Corrupt directory, running e2fsck is recommended [ 53.084134][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.093151][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.102085][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.111197][ T4338] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 53.135634][ T4338] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.326: corrupted in-inode xattr: invalid ea_ino [ 53.149269][ T4338] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.326: couldn't read orphan inode 15 (err -117) [ 53.162053][ T4338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.178411][ T4338] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.190007][ T4338] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 53.200323][ T4338] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.326: Corrupt directory, running e2fsck is recommended [ 53.216233][ T4338] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.227806][ T4338] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 53.237992][ T4338] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.326: Corrupt directory, running e2fsck is recommended [ 53.257103][ T4338] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.268735][ T4338] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 53.278893][ T4338] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.326: Corrupt directory, running e2fsck is recommended [ 53.314137][ T4338] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.358514][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.398187][ T4358] syzkaller1: entered promiscuous mode [ 53.403730][ T4358] syzkaller1: entered allmulticast mode [ 53.792989][ T4391] bridge0: entered promiscuous mode [ 53.806882][ T4391] bridge0: port 3(macvtap1) entered blocking state [ 53.813502][ T4391] bridge0: port 3(macvtap1) entered disabled state [ 53.823059][ T4391] macvtap1: entered allmulticast mode [ 53.828649][ T4391] bridge0: entered allmulticast mode [ 53.835436][ T4391] macvtap1: left allmulticast mode [ 53.840607][ T4391] bridge0: left allmulticast mode [ 53.847195][ T4391] bridge0: left promiscuous mode [ 53.862242][ T4400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 54.010725][ T4413] loop4: detected capacity change from 0 to 128 [ 54.045191][ T4413] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.131133][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 54.150540][ T4413] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.208593][ T4420] team1: entered promiscuous mode [ 54.213683][ T4420] team1: entered allmulticast mode [ 54.221435][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.235339][ T4420] 8021q: adding VLAN 0 to HW filter on device team1 [ 54.381096][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 54.381116][ T29] audit: type=1400 audit(1768180708.202:698): avc: denied { mount } for pid=4433 comm="syz.1.366" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.430728][ T29] audit: type=1400 audit(1768180708.252:699): avc: denied { module_load } for pid=4434 comm="syz.3.367" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 54.489105][ T29] audit: type=1400 audit(1768180708.312:700): avc: denied { map } for pid=4440 comm="syz.2.370" path="socket:[12066]" dev="sockfs" ino=12066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 54.612393][ T4444] SELinux: ebitmap: truncated map [ 54.618568][ T4444] SELinux: failed to load policy [ 54.654605][ T4453] loop4: detected capacity change from 0 to 512 [ 54.676240][ T4453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.696957][ T4453] EXT4-fs (loop4): 1 truncate cleaned up [ 54.705368][ T4453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.825636][ T4465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 54.836001][ T29] audit: type=1400 audit(1768180708.642:701): avc: denied { read write } for pid=4452 comm="syz.4.375" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.858697][ T29] audit: type=1400 audit(1768180708.642:702): avc: denied { open } for pid=4452 comm="syz.4.375" path="/67/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.946961][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.994726][ T29] audit: type=1400 audit(1768180708.822:703): avc: denied { bind } for pid=4472 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.067639][ T4480] serio: Serial port ttyS3 [ 55.071490][ T29] audit: type=1400 audit(1768180708.822:704): avc: denied { name_bind } for pid=4472 comm="syz.4.382" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 55.092895][ T29] audit: type=1400 audit(1768180708.822:705): avc: denied { node_bind } for pid=4472 comm="syz.4.382" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 55.115144][ T29] audit: type=1400 audit(1768180708.822:706): avc: denied { name_bind } for pid=4472 comm="syz.4.382" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.136677][ T29] audit: type=1400 audit(1768180708.822:707): avc: denied { listen } for pid=4472 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.493298][ T4518] loop1: detected capacity change from 0 to 512 [ 55.505129][ T4521] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 55.519845][ T4521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.528785][ T4518] ext4: Bad value for 'max_dir_size_kb' [ 55.559570][ T4521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.578441][ T4521] bond1: (slave batadv1): making interface the new active one [ 55.633345][ T4521] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 55.728268][ T4536] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.407'. [ 55.773683][ T4539] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 55.782300][ T4539] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 55.905563][ T4547] loop4: detected capacity change from 0 to 512 [ 55.933893][ T4547] ext4: Unknown parameter 'noacl' [ 56.017907][ T4553] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 56.360504][ T4571] syzkaller1: entered promiscuous mode [ 56.366200][ T4571] syzkaller1: entered allmulticast mode [ 56.440624][ T4579] netlink: 19 bytes leftover after parsing attributes in process `syz.0.428'. [ 56.736507][ T4597] netlink: 'syz.0.434': attribute type 4 has an invalid length. [ 56.895550][ T4599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4599 comm=syz.4.435 [ 57.026929][ T4607] syz.4.439 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.139795][ T4621] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 57.156961][ T4626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.447'. [ 57.238776][ T4628] netlink: 'syz.4.448': attribute type 4 has an invalid length. [ 57.302449][ T4628] netlink: 'syz.4.448': attribute type 4 has an invalid length. [ 57.608766][ T4657] loop2: detected capacity change from 0 to 1024 [ 57.635013][ T4657] EXT4-fs: inline encryption not supported [ 57.696082][ T4666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 57.718303][ T4657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.929644][ T4680] netlink: 43 bytes leftover after parsing attributes in process `syz.4.467'. [ 57.971335][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.287784][ T1040] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.300940][ T1040] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.332917][ T4704] fido_id[4704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.733061][ T4729] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 58.745719][ T4728] IPVS: stopping master sync thread 4729 ... [ 59.195478][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 59.213735][ T4764] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 59.225518][ T4764] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 59.311253][ T4768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.503'. [ 59.372437][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 59.399406][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 59.399424][ T29] audit: type=1326 audit(1768180713.222:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.454494][ T29] audit: type=1326 audit(1768180713.252:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.477793][ T29] audit: type=1326 audit(1768180713.252:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.501186][ T29] audit: type=1326 audit(1768180713.252:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.524484][ T29] audit: type=1326 audit(1768180713.252:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.547818][ T29] audit: type=1326 audit(1768180713.252:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.571273][ T29] audit: type=1326 audit(1768180713.252:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.594948][ T29] audit: type=1326 audit(1768180713.252:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.618309][ T29] audit: type=1326 audit(1768180713.252:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.641579][ T29] audit: type=1326 audit(1768180713.252:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de318f749 code=0x7ffc0000 [ 59.718593][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.725565][ T3512] Bluetooth: hci0: command 0x1003 tx timeout [ 59.725980][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.731784][ T3836] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.158654][ T4831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.279307][ T4839] macvtap1: entered promiscuous mode [ 60.284732][ T4839] macvtap1: entered allmulticast mode [ 60.497902][ T4853] loop4: detected capacity change from 0 to 7 [ 60.574855][ T4855] atomic_op ffff888103a8a928 conn xmit_atomic 0000000000000000 [ 60.629205][ T4859] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 60.726386][ T4869] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 60.771456][ T4871] __nla_validate_parse: 3 callbacks suppressed [ 60.771473][ T4871] netlink: 64 bytes leftover after parsing attributes in process `syz.4.550'. [ 60.981735][ T4896] loop3: detected capacity change from 0 to 512 [ 61.009010][ T4896] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.561: corrupted inode contents [ 61.025424][ T4896] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.561: mark_inode_dirty error [ 61.065687][ T4896] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.561: corrupted inode contents [ 61.080178][ T4896] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.561: mark_inode_dirty error [ 61.096453][ T4896] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.561: mark inode dirty (error -117) [ 61.109397][ T4896] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 61.118611][ T4896] EXT4-fs (loop3): 1 orphan inode deleted [ 61.125055][ T4896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.218379][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.274304][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 61.341866][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 61.363303][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 61.575011][ T4956] lo: entered promiscuous mode [ 61.579908][ T4956] lo: entered allmulticast mode [ 61.585768][ T4956] tunl0: entered promiscuous mode [ 61.590929][ T4956] tunl0: entered allmulticast mode [ 61.597131][ T4956] gre0: entered promiscuous mode [ 61.602477][ T4956] gre0: entered allmulticast mode [ 61.609266][ T4956] gretap0: entered promiscuous mode [ 61.614631][ T4956] gretap0: entered allmulticast mode [ 61.621287][ T4956] erspan0: entered promiscuous mode [ 61.626597][ T4956] erspan0: entered allmulticast mode [ 61.633119][ T4956] ip_vti0: entered promiscuous mode [ 61.638515][ T4956] ip_vti0: entered allmulticast mode [ 61.649698][ T4956] ip6_vti0: entered promiscuous mode [ 61.655255][ T4956] ip6_vti0: entered allmulticast mode [ 61.671920][ T4956] sit0: entered promiscuous mode [ 61.677401][ T4956] sit0: entered allmulticast mode [ 61.689531][ T4956] ip6tnl0: entered promiscuous mode [ 61.695063][ T4956] ip6tnl0: entered allmulticast mode [ 61.701996][ T4956] ip6gre0: entered promiscuous mode [ 61.707691][ T4956] ip6gre0: entered allmulticast mode [ 61.718637][ T4956] syz_tun: entered promiscuous mode [ 61.723927][ T4956] syz_tun: entered allmulticast mode [ 61.737492][ T4956] ip6gretap0: entered promiscuous mode [ 61.743067][ T4956] ip6gretap0: entered allmulticast mode [ 61.750587][ T4956] bridge0: entered promiscuous mode [ 61.756002][ T4956] bridge0: entered allmulticast mode [ 61.762303][ T4956] vcan0: entered promiscuous mode [ 61.767745][ T4956] vcan0: entered allmulticast mode [ 61.775006][ T4956] bond0: entered promiscuous mode [ 61.780157][ T4956] bond_slave_0: entered promiscuous mode [ 61.786286][ T4956] bond_slave_1: entered promiscuous mode [ 61.792085][ T4956] bond0: entered allmulticast mode [ 61.797258][ T4956] bond_slave_0: entered allmulticast mode [ 61.803017][ T4956] bond_slave_1: entered allmulticast mode [ 61.810223][ T4956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.820726][ T4956] team0: entered promiscuous mode [ 61.825855][ T4956] team_slave_0: entered promiscuous mode [ 61.831651][ T4956] team_slave_1: entered promiscuous mode [ 61.837435][ T4956] team0: entered allmulticast mode [ 61.842578][ T4956] team_slave_0: entered allmulticast mode [ 61.848353][ T4956] team_slave_1: entered allmulticast mode [ 61.864484][ T4956] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.873346][ T4956] dummy0: entered promiscuous mode [ 61.878581][ T4956] dummy0: entered allmulticast mode [ 61.885202][ T4956] nlmon0: entered promiscuous mode [ 61.890419][ T4956] nlmon0: entered allmulticast mode [ 61.897149][ T4956] caif0: entered promiscuous mode [ 61.902215][ T4956] caif0: entered allmulticast mode [ 61.907528][ T4956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.925580][ T4961] netlink: 'syz.0.587': attribute type 3 has an invalid length. [ 61.933461][ T4961] netlink: 'syz.0.587': attribute type 3 has an invalid length. [ 62.154799][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 62.172839][ T4988] loop3: detected capacity change from 0 to 512 [ 62.221021][ T4988] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.295504][ T4988] EXT4-fs (loop3): 1 truncate cleaned up [ 62.301756][ T4988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.379766][ T5036] batman_adv: batadv0: Adding interface: dummy0 [ 62.386120][ T5036] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.419807][ T5036] batman_adv: batadv0: Interface activated: dummy0 [ 62.464944][ T5036] batadv0: mtu less than device minimum [ 62.471560][ T5036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 62.482744][ T5036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 62.493701][ T5036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 62.504670][ T5036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 62.515801][ T5036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 62.526917][ T5036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 62.538197][ T5036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 62.564175][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.108635][ T5094] loop3: detected capacity change from 0 to 512 [ 63.116964][ T5094] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.133359][ T5094] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 63.145494][ T5094] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.151904][ T5094] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 63.160733][ T5094] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.617: attempt to clear invalid blocks 2 len 1 [ 63.180055][ T5094] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.617: bg 0: block 456: padding at end of block bitmap is not set [ 63.196360][ T5094] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 63.205344][ T5094] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.617: invalid indirect mapped block 1819239214 (level 0) [ 63.237339][ T5094] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.617: invalid indirect mapped block 1819239214 (level 1) [ 63.264858][ T5094] EXT4-fs (loop3): 1 truncate cleaned up [ 63.274016][ T5094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.321244][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.362745][ T5106] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.695058][ T5141] loop3: detected capacity change from 0 to 512 [ 63.727179][ T5141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.740085][ T5141] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.781249][ T5153] team0 (unregistering): Port device team_slave_0 removed [ 63.791976][ T5153] team0 (unregistering): Port device team_slave_1 removed [ 63.808061][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.874176][ T5161] pimreg: entered allmulticast mode [ 63.884177][ T5161] pimreg: left allmulticast mode [ 64.124506][ T5176] loop4: detected capacity change from 0 to 512 [ 64.161395][ T5176] EXT4-fs (loop4): too many log groups per flexible block group [ 64.173776][ T5176] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 64.182261][ T5176] EXT4-fs (loop4): mount failed [ 64.353381][ T5195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5195 comm=syz.1.661 [ 64.415394][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 64.415409][ T29] audit: type=1400 audit(1768180718.242:1076): avc: denied { override_creds } for pid=5197 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.495592][ T5211] veth0_to_team: entered promiscuous mode [ 64.510555][ T5213] bridge: RTM_NEWNEIGH with invalid ether address [ 64.580106][ T29] audit: type=1400 audit(1768180718.392:1077): avc: denied { setopt } for pid=5215 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.599951][ T29] audit: type=1400 audit(1768180718.392:1078): avc: denied { listen } for pid=5215 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.662059][ T29] audit: type=1400 audit(1768180718.452:1079): avc: denied { read } for pid=5219 comm="syz.1.672" path="socket:[17536]" dev="sockfs" ino=17536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.713291][ T5228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5228 comm=syz.1.676 [ 65.650904][ T29] audit: type=1400 audit(1768180719.472:1080): avc: denied { bind } for pid=5269 comm="syz.1.693" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.705369][ T29] audit: type=1400 audit(1768180719.502:1081): avc: denied { write } for pid=5269 comm="syz.1.693" path="socket:[17080]" dev="sockfs" ino=17080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.783380][ T5275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.797266][ T5275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.866086][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 65.874927][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acf3200: rx timeout, send abort [ 65.883446][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811acf3200: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 65.899761][ T29] audit: type=1400 audit(1768180719.722:1082): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 65.921939][ T29] audit: type=1400 audit(1768180719.722:1083): avc: denied { search } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.962584][ T29] audit: type=1400 audit(1768180719.762:1084): avc: denied { search } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.984672][ T29] audit: type=1400 audit(1768180719.762:1085): avc: denied { add_name } for pid=2988 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.064785][ T5291] netlink: 'syz.1.701': attribute type 39 has an invalid length. [ 66.207212][ T5302] loop3: detected capacity change from 0 to 4096 [ 66.216564][ T5302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.228833][ T5302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.519669][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.637200][ T5328] bridge_slave_0: default FDB implementation only supports local addresses [ 66.691585][ T5334] loop2: detected capacity change from 0 to 128 [ 66.720838][ T5336] loop3: detected capacity change from 0 to 512 [ 66.738855][ T5336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.762051][ T5336] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.855561][ T5336] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.874951][ T5336] vhci_hcd vhci_hcd.2: invalid port number 96 [ 66.881256][ T5336] vhci_hcd vhci_hcd.2: default hub control req: 4000 vfffa i0060 l0 [ 66.945638][ T5349] ip6gretap0: entered promiscuous mode [ 66.955248][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.974681][ T5349] ip6gretap0: left promiscuous mode [ 67.215491][ T5377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 68.439687][ T5409] loop2: detected capacity change from 0 to 2048 [ 68.495358][ T5409] EXT4-fs (loop2): failed to initialize system zone (-117) [ 68.533176][ T5409] EXT4-fs (loop2): mount failed [ 68.626472][ T5417] netlink: 'syz.1.755': attribute type 1 has an invalid length. [ 68.658763][ T5417] bond2: entered promiscuous mode [ 68.663893][ T5417] bond2: entered allmulticast mode [ 68.684947][ T5417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.721255][ T5424] macvlan2: entered promiscuous mode [ 68.726714][ T5424] macvlan2: entered allmulticast mode [ 68.769765][ T5424] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.855001][ T5430] loop2: detected capacity change from 0 to 512 [ 68.875212][ T5430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.928552][ T5430] EXT4-fs (loop2): 1 truncate cleaned up [ 68.955107][ T5430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.051698][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 69.062190][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 69.101761][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.155299][ T5450] loop3: detected capacity change from 0 to 256 [ 69.163697][ T5451] pimreg: entered allmulticast mode [ 69.174764][ T5451] pimreg: left allmulticast mode [ 69.187176][ T5450] FAT-fs (loop3): Directory bread(block 64) failed [ 69.214637][ T5450] FAT-fs (loop3): Directory bread(block 65) failed [ 69.258363][ T5450] FAT-fs (loop3): Directory bread(block 66) failed [ 69.284936][ T5450] FAT-fs (loop3): Directory bread(block 67) failed [ 69.299477][ T5450] FAT-fs (loop3): Directory bread(block 68) failed [ 69.333216][ T5450] FAT-fs (loop3): Directory bread(block 69) failed [ 69.359173][ T5450] FAT-fs (loop3): Directory bread(block 70) failed [ 69.371840][ T5450] FAT-fs (loop3): Directory bread(block 71) failed [ 69.389215][ T5450] FAT-fs (loop3): Directory bread(block 72) failed [ 69.410641][ T5450] FAT-fs (loop3): Directory bread(block 73) failed [ 69.531722][ T5478] netlink: 76 bytes leftover after parsing attributes in process `syz.2.781'. [ 69.548884][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 69.548902][ T29] audit: type=1326 audit(1768180723.372:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 69.648874][ T29] audit: type=1326 audit(1768180723.402:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 69.672367][ T29] audit: type=1326 audit(1768180723.402:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 69.695972][ T29] audit: type=1326 audit(1768180723.402:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 69.719441][ T29] audit: type=1326 audit(1768180723.402:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 69.743144][ T29] audit: type=1326 audit(1768180723.442:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3e8f749 code=0x7ffc0000 [ 69.745823][ T5489] 9pnet_fd: Insufficient options for proto=fd [ 69.766966][ T29] audit: type=1326 audit(1768180723.442:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3e8f749 code=0x7ffc0000 [ 69.796082][ T29] audit: type=1326 audit(1768180723.442:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3e8f749 code=0x7ffc0000 [ 69.819559][ T29] audit: type=1326 audit(1768180723.452:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c3e8f749 code=0x7ffc0000 [ 69.843108][ T29] audit: type=1326 audit(1768180723.452:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3e8f749 code=0x7ffc0000 [ 69.914517][ T5499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.791'. [ 69.985517][ T5502] syzkaller1: entered promiscuous mode [ 69.991143][ T5502] syzkaller1: entered allmulticast mode [ 70.144730][ T5517] netlink: 'syz.3.799': attribute type 30 has an invalid length. [ 70.311488][ T5527] loop2: detected capacity change from 0 to 1024 [ 70.341274][ T5527] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.370915][ T5527] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 70.379158][ T5527] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.385967][ T5527] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 70.400709][ T5527] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 70.403440][ T3006] udevd[3006]: worker [3310] terminated by signal 33 (Unknown signal 33) [ 70.417739][ T5527] EXT4-fs (loop2): 1 truncate cleaned up [ 70.424131][ T5527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.460252][ T3006] udevd[3006]: worker [3310] failed while handling '/devices/virtual/block/loop2' [ 70.519522][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.686922][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.694306][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.747423][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.759479][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.845653][ T5059] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.856908][ T5059] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.870931][ T5552] veth0_to_team: entered promiscuous mode [ 70.892756][ T5059] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.915877][ T5059] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.472022][ T5598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.831'. [ 72.645358][ T5608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 72.877441][ T5628] loop3: detected capacity change from 0 to 1024 [ 72.888759][ T5631] xt_connbytes: Forcing CT accounting to be enabled [ 72.984219][ T5628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.141564][ T5628] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.841: reserved inode found cleared - inode=2 [ 73.224063][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.285834][ T5652] macsec1: entered promiscuous mode [ 73.291158][ T5652] bridge0: entered promiscuous mode [ 73.397359][ T5652] bridge0: port 3(macsec1) entered blocking state [ 73.403920][ T5652] bridge0: port 3(macsec1) entered disabled state [ 73.444926][ T5652] macsec1: entered allmulticast mode [ 73.450300][ T5652] bridge0: entered allmulticast mode [ 73.475092][ T5652] macsec1: left allmulticast mode [ 73.480189][ T5652] bridge0: left allmulticast mode [ 73.490816][ T5652] bridge0: left promiscuous mode [ 73.803752][ T5660] SELinux: failed to load policy [ 73.892238][ T5677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.862'. [ 73.969743][ T5677] netlink: 100 bytes leftover after parsing attributes in process `syz.2.862'. [ 74.394909][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 74.476246][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 74.645159][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 74.658909][ T5665] syz.3.856 (5665) used greatest stack depth: 7072 bytes left [ 74.736229][ T5728] sch_fq: defrate 0 ignored. [ 74.767949][ T5731] vlan2: entered allmulticast mode [ 74.773258][ T5731] bridge0: port 3(vlan2) entered blocking state [ 74.779659][ T5731] bridge0: port 3(vlan2) entered disabled state [ 74.835494][ T5731] vlan2: entered promiscuous mode [ 74.846596][ T5736] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 74.981906][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.025776][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.135610][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 75.135639][ T29] audit: type=1326 audit(1768180728.962:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.204506][ T29] audit: type=1326 audit(1768180728.992:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.228099][ T29] audit: type=1326 audit(1768180728.992:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.251589][ T29] audit: type=1326 audit(1768180728.992:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.275004][ T29] audit: type=1326 audit(1768180728.992:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.298384][ T29] audit: type=1326 audit(1768180729.002:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.321826][ T29] audit: type=1326 audit(1768180729.002:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.345317][ T29] audit: type=1326 audit(1768180729.002:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.368731][ T29] audit: type=1326 audit(1768180729.002:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.392182][ T29] audit: type=1326 audit(1768180729.002:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 75.475079][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 75.504544][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.512019][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.577793][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.585311][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.731187][ T5785] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 75.764377][ T5785] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 75.981019][ T5817] $Hÿ: renamed from bond0 (while UP) [ 75.991837][ T5817] $Hÿ: entered promiscuous mode [ 75.997130][ T5817] bond_slave_0: entered promiscuous mode [ 76.002870][ T5817] bond_slave_1: entered promiscuous mode [ 76.082617][ T5826] loop2: detected capacity change from 0 to 128 [ 76.099895][ T5826] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.112486][ T5826] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.149299][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.547749][ T5849] syzkaller0: entered allmulticast mode [ 76.589536][ T5849] syzkaller0: entered promiscuous mode [ 76.608165][ T5853] syzkaller0 (unregistering): left allmulticast mode [ 76.615048][ T5853] syzkaller0 (unregistering): left promiscuous mode [ 77.072267][ T5881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.119345][ T5881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.195528][ T5881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.223277][ T5887] Invalid argument reading file caps for ./file0 [ 77.281995][ T5881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.407030][ T4997] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.422157][ T4997] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.442768][ T4997] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.459154][ T4997] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.649155][ T5913] __nla_validate_parse: 1 callbacks suppressed [ 77.649174][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 77.852364][ T5922] cgroup: fork rejected by pids controller in /syz3 [ 78.083291][ T6702] Invalid argument reading file caps for ./file0 [ 78.327305][ T8124] netlink: 'syz.0.972': attribute type 1 has an invalid length. [ 78.381983][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 78.382053][ T8124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.421078][ T8341] loop2: detected capacity change from 0 to 512 [ 78.428303][ T8341] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.488470][ T8341] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 78.514205][ T8342] bond2 (unregistering): Released all slaves [ 78.536545][ T8341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.974: bg 0: block 248: padding at end of block bitmap is not set [ 78.553320][ T8341] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.974: Failed to acquire dquot type 1 [ 78.565370][ T8341] EXT4-fs (loop2): 1 truncate cleaned up [ 78.582286][ T8341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 78.671313][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 78.684883][ T4997] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 1 [ 79.829321][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.869727][ T3397] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.901346][ T3006] udevd[3006]: worker [3511] terminated by signal 33 (Unknown signal 33) [ 79.915026][ T3006] udevd[3006]: worker [3511] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0003/hidraw/hidraw0' [ 80.051172][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 80.136964][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 80.188923][ T8919] loop3: detected capacity change from 0 to 512 [ 80.196663][ T8919] EXT4-fs: Ignoring removed bh option [ 80.219662][ T8919] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 80.257579][ T8919] EXT4-fs (loop3): 1 truncate cleaned up [ 80.264772][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 80.264869][ T29] audit: type=1400 audit(1768180734.092:1767): avc: denied { connect } for pid=8925 comm="syz.2.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.339424][ T8919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.435237][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.503760][ T29] audit: type=1400 audit(1768180734.322:1768): avc: denied { getopt } for pid=8940 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.665998][ T8953] loop2: detected capacity change from 0 to 1024 [ 80.706499][ T29] audit: type=1400 audit(1768180734.532:1769): avc: denied { append } for pid=8952 comm="syz.2.1023" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.751640][ T29] audit: type=1400 audit(1768180734.552:1770): avc: denied { ioctl } for pid=8952 comm="syz.2.1023" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.864469][ T29] audit: type=1326 audit(1768180734.682:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 80.888078][ T29] audit: type=1326 audit(1768180734.682:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faa010cde97 code=0x7ffc0000 [ 80.914500][ T29] audit: type=1326 audit(1768180734.692:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 80.938029][ T29] audit: type=1326 audit(1768180734.712:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 80.961501][ T29] audit: type=1326 audit(1768180734.712:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 80.985057][ T29] audit: type=1326 audit(1768180734.712:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 81.055722][ T8966] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1029'. [ 82.174181][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 82.185292][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.193111][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.510674][ T9048] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1059'. [ 82.539771][ T9051] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 82.565890][ T9034] chnl_net:caif_netlink_parms(): no params data found [ 82.607374][ T5018] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.644339][ T9057] loop2: detected capacity change from 0 to 512 [ 82.676949][ T5018] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.708664][ T9057] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1062: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 82.773670][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.781366][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.798728][ T9057] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.1062: Bad quota inode: 3, type: 0 [ 82.813287][ T9034] bridge_slave_0: entered allmulticast mode [ 82.822470][ T9057] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 82.827867][ T9034] bridge_slave_0: entered promiscuous mode [ 82.838831][ T9057] EXT4-fs (loop2): mount failed [ 82.854217][ T5018] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.867366][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.874715][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.889588][ T9034] bridge_slave_1: entered allmulticast mode [ 82.903504][ T9034] bridge_slave_1: entered promiscuous mode [ 82.950759][ T5018] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.972367][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.993980][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.034907][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 83.058912][ T1683] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.080908][ T9034] team0: Port device team_slave_0 added [ 83.089616][ T9034] team0: Port device team_slave_1 added [ 83.131796][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.139092][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.165148][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.176731][ T5018] bridge_slave_1: left allmulticast mode [ 83.182444][ T5018] bridge_slave_1: left promiscuous mode [ 83.188291][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.211749][ T5018] bridge_slave_0: left allmulticast mode [ 83.217823][ T5018] bridge_slave_0: left promiscuous mode [ 83.223633][ T5018] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.298012][ T5018] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 83.334726][ T5018] dvmrp0 (unregistering): left allmulticast mode [ 83.378001][ T5018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.396067][ T5018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.406500][ T5018] bond0 (unregistering): Released all slaves [ 83.417211][ T5018] bond1 (unregistering): Released all slaves [ 83.426835][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.433820][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.459958][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.500284][ T5018] hsr_slave_0: left promiscuous mode [ 83.514674][ T5018] hsr_slave_1: left promiscuous mode [ 83.521143][ T5018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.528755][ T5018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.540097][ T5018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.547854][ T5018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.559355][ T5018] veth1_macvtap: left promiscuous mode [ 83.566127][ T5018] veth0_macvtap: left promiscuous mode [ 83.571814][ T5018] veth1_vlan: left promiscuous mode [ 83.577963][ T5018] veth0_vlan: left promiscuous mode [ 83.713737][ T5018] team0 (unregistering): Port device team_slave_1 removed [ 83.726534][ T5018] team0 (unregistering): Port device team_slave_0 removed [ 83.797786][ T9034] hsr_slave_0: entered promiscuous mode [ 83.804006][ T9034] hsr_slave_1: entered promiscuous mode [ 83.958717][ T9139] loop3: detected capacity change from 0 to 512 [ 84.060983][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 84.080852][ T9034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.107470][ T9034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.145115][ T9034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.187735][ T9034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.251390][ T9034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.282735][ T9034] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.290349][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 84.303058][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.310266][ T5020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.329448][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 84.330463][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.345594][ T5020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.389317][ T9167] loop3: detected capacity change from 0 to 128 [ 84.498459][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.498459][ T9167] loop3: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 84.498608][ T9034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.512122][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.512122][ T9167] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 84.512164][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.512164][ T9167] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 84.512206][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.512206][ T9167] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 84.560117][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.560117][ T9167] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 84.573622][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.573622][ T9167] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 84.587400][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.587400][ T9167] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 84.601237][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.601237][ T9167] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 84.617290][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.617290][ T9167] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 84.630910][ T9167] syz.3.1105: attempt to access beyond end of device [ 84.630910][ T9167] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 84.811159][ T9034] veth0_vlan: entered promiscuous mode [ 84.823536][ T9034] veth1_vlan: entered promiscuous mode [ 84.851602][ T9034] veth0_macvtap: entered promiscuous mode [ 84.865468][ T9034] veth1_macvtap: entered promiscuous mode [ 84.884514][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.896211][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.919437][ T1683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.932112][ T9203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9203 comm=syz.0.1112 [ 84.946757][ T1683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.958809][ T1683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.968729][ T9203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1112'. [ 84.978141][ T1683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.067230][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1056'. [ 85.084714][ T3512] Bluetooth: hci0: command 0x1003 tx timeout [ 85.091030][ T3836] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.109060][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'. [ 85.126625][ T9207] team1: entered promiscuous mode [ 85.131738][ T9207] team1: entered allmulticast mode [ 85.140814][ T9207] 8021q: adding VLAN 0 to HW filter on device team1 [ 85.161546][ T9210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.178239][ T9214] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1114'. [ 85.196586][ T9216] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1117'. [ 85.248934][ T9221] loop3: detected capacity change from 0 to 1024 [ 85.264989][ T9221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.282328][ T9221] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e815c01c, mo2=0003] [ 85.297760][ T9221] System zones: 0-1, 3-36 [ 85.306582][ T9221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.322649][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 85.322667][ T29] audit: type=1400 audit(1768180995.140:1874): avc: denied { append } for pid=9220 comm="syz.3.1119" path="/248/bus/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.382604][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1120'. [ 85.401983][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.570005][ T29] audit: type=1326 audit(1768180995.390:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 85.633452][ T29] audit: type=1326 audit(1768180995.420:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 85.673348][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 85.686040][ T9250] loop2: detected capacity change from 0 to 2048 [ 85.694901][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.732399][ T9250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.742023][ T29] audit: type=1326 audit(1768180995.550:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 85.845555][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.851532][ T29] audit: type=1326 audit(1768180995.600:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 85.878127][ T29] audit: type=1326 audit(1768180995.620:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 85.901681][ T29] audit: type=1326 audit(1768180995.640:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 85.925260][ T29] audit: type=1326 audit(1768180995.640:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 85.948765][ T29] audit: type=1326 audit(1768180995.640:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 85.972344][ T29] audit: type=1326 audit(1768180995.640:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9245 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa010cf749 code=0x7ffc0000 [ 86.165777][ T9274] syz_tun: entered allmulticast mode [ 86.185241][ T9274] dvmrp8: entered allmulticast mode [ 86.191897][ T9273] syz_tun: left allmulticast mode [ 86.297352][ T9276] infiniband syz!: set down [ 86.301931][ T9276] infiniband syz!: added team_slave_0 [ 86.353733][ T9276] RDS/IB: syz!: added [ 86.365098][ T9276] smc: adding ib device syz! with port count 1 [ 86.374384][ T9290] bridge0: port 3(gretap0) entered blocking state [ 86.380934][ T9290] bridge0: port 3(gretap0) entered disabled state [ 86.388120][ T9290] gretap0: entered allmulticast mode [ 86.394567][ T9290] gretap0: entered promiscuous mode [ 86.400177][ T9290] bridge0: port 3(gretap0) entered blocking state [ 86.406723][ T9290] bridge0: port 3(gretap0) entered forwarding state [ 86.416209][ T9290] gretap0: left allmulticast mode [ 86.421281][ T9290] gretap0: left promiscuous mode [ 86.426491][ T9290] bridge0: port 3(gretap0) entered disabled state [ 86.446765][ T9276] smc: ib device syz! port 1 has no pnetid [ 86.572575][ T9297] block device autoloading is deprecated and will be removed. [ 87.274327][ T9345] atomic_op ffff88810cd79528 conn xmit_atomic 0000000000000000 [ 87.720986][ T9385] pim6reg: entered allmulticast mode [ 87.727635][ T9385] pim6reg: left allmulticast mode [ 87.773877][ T9390] pim6reg1: entered promiscuous mode [ 87.779503][ T9390] pim6reg1: entered allmulticast mode [ 87.830478][ T9399] loop5: detected capacity change from 0 to 164 [ 87.850478][ T9399] Unsupported NM flag settings (240) [ 87.858030][ T9399] Unsupported NM flag settings (240) [ 88.026745][ T9421] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 88.035222][ T9421] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 88.042955][ T9411] net_ratelimit: 12 callbacks suppressed [ 88.042974][ T9411] netlink: zone id is out of range [ 88.054005][ T9411] netlink: zone id is out of range [ 88.094228][ T9426] __nla_validate_parse: 6 callbacks suppressed [ 88.094248][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 88.101212][ T9411] netlink: zone id is out of range [ 88.172658][ T9411] netlink: set zone limit has 8 unknown bytes [ 88.192947][ T9435] netlink: 'syz.3.1210': attribute type 4 has an invalid length. [ 88.575227][ T9465] ALSA: seq fatal error: cannot create timer (-22) [ 88.684105][ T9467] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 88.819190][ T36] Process accounting resumed [ 88.860940][ T9484] pim6reg1: entered promiscuous mode [ 88.866510][ T9484] pim6reg1: entered allmulticast mode [ 88.954278][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1232'. [ 89.224003][ T9501] tipc: Started in network mode [ 89.229061][ T9501] tipc: Node identity ac14140f, cluster identity 4711 [ 89.265805][ T9501] tipc: New replicast peer: 255.255.255.255 [ 89.272022][ T9501] tipc: Enabled bearer , priority 10 [ 89.294186][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 89.303403][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 89.481685][ T5020] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.496044][ T9523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.528105][ T9523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.759298][ T9548] loop5: detected capacity change from 0 to 512 [ 89.795420][ T9548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.815031][ T9548] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.867812][ T9034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.394516][ T36] tipc: Node number set to 2886997007 [ 90.988618][ T9582] SELinux: failed to load policy [ 91.070174][ T9594] Invalid argument reading file caps for ./file0 [ 91.332313][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1281'. [ 91.484490][ T3512] Bluetooth: hci0: command 0x1003 tx timeout [ 91.491003][ T3836] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.556121][ T29] kauditd_printk_skb: 1011 callbacks suppressed [ 91.556178][ T29] audit: type=1326 audit(1768181001.380:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.670938][ T29] audit: type=1326 audit(1768181001.410:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.694559][ T29] audit: type=1326 audit(1768181001.410:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.718387][ T29] audit: type=1326 audit(1768181001.410:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.741930][ T29] audit: type=1326 audit(1768181001.410:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.765439][ T29] audit: type=1326 audit(1768181001.410:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.789027][ T29] audit: type=1326 audit(1768181001.410:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.812758][ T29] audit: type=1326 audit(1768181001.440:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.836362][ T29] audit: type=1326 audit(1768181001.440:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 91.859803][ T29] audit: type=1326 audit(1768181001.450:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 92.536296][ T9672] Invalid argument reading file caps for ./file0 [ 92.570506][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.593795][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.667545][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1312'. [ 92.787963][ T9681] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.795323][ T9681] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.807372][ T9681] batman_adv: batadv0: Interface deactivated: dummy0 [ 92.859973][ T9681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.880955][ T9681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.983495][ T1578] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.998254][ T1578] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.024531][ T1578] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.032955][ T1578] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.165389][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.195570][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.231871][ T9700] loop2: detected capacity change from 0 to 1024 [ 93.271442][ T9700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.470902][ T9715] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1323'. [ 93.480143][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1323'. [ 94.167606][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.225034][ T9739] netlink: 'syz.2.1333': attribute type 29 has an invalid length. [ 94.306523][ T9741] netlink: 'syz.2.1333': attribute type 29 has an invalid length. [ 94.323901][ T9739] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1333'. [ 95.090309][ T9748] syz.5.1337 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 95.104589][ T9748] CPU: 0 UID: 0 PID: 9748 Comm: syz.5.1337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.104622][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.104637][ T9748] Call Trace: [ 95.104644][ T9748] [ 95.104651][ T9748] __dump_stack+0x1d/0x30 [ 95.104683][ T9748] dump_stack_lvl+0x95/0xd0 [ 95.104733][ T9748] dump_stack+0x15/0x1b [ 95.104801][ T9748] dump_header+0x81/0x240 [ 95.104825][ T9748] oom_kill_process+0x295/0x350 [ 95.104851][ T9748] out_of_memory+0x97b/0xb80 [ 95.104885][ T9748] try_charge_memcg+0x610/0xa10 [ 95.105000][ T9748] obj_cgroup_charge_pages+0xa6/0x150 [ 95.105034][ T9748] __memcg_kmem_charge_page+0x9f/0x170 [ 95.105125][ T9748] __alloc_frozen_pages_noprof+0x18f/0x360 [ 95.105245][ T9748] alloc_pages_mpol+0xb3/0x260 [ 95.105280][ T9748] alloc_pages_noprof+0x90/0x130 [ 95.105375][ T9748] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 95.105422][ T9748] __kvmalloc_node_noprof+0x492/0x6b0 [ 95.105451][ T9748] ? ip_set_alloc+0x24/0x30 [ 95.105550][ T9748] ? ip_set_alloc+0x24/0x30 [ 95.105582][ T9748] ? __slab_alloc+0x25/0x50 [ 95.105687][ T9748] ip_set_alloc+0x24/0x30 [ 95.105720][ T9748] hash_netiface_create+0x282/0x740 [ 95.105808][ T9748] ? __pfx_hash_netiface_create+0x10/0x10 [ 95.105846][ T9748] ip_set_create+0x3cc/0x970 [ 95.105886][ T9748] ? __nla_parse+0x40/0x60 [ 95.105916][ T9748] nfnetlink_rcv_msg+0x4c6/0x590 [ 95.106003][ T9748] ? copy_from_kernel_nofault+0x6a/0x200 [ 95.106056][ T9748] netlink_rcv_skb+0x123/0x220 [ 95.106090][ T9748] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 95.106159][ T9748] nfnetlink_rcv+0x167/0x16c0 [ 95.106209][ T9748] ? kmem_cache_free+0xe3/0x3a0 [ 95.106237][ T9748] ? __kfree_skb+0x109/0x150 [ 95.106309][ T9748] ? nlmon_xmit+0x4f/0x60 [ 95.106330][ T9748] ? consume_skb+0x49/0x150 [ 95.106426][ T9748] ? nlmon_xmit+0x4f/0x60 [ 95.106449][ T9748] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 95.106529][ T9748] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 95.106641][ T9748] ? __dev_queue_xmit+0x148/0x1ee0 [ 95.106677][ T9748] ? ref_tracker_free+0x37d/0x3e0 [ 95.106710][ T9748] ? __netlink_deliver_tap+0x4dc/0x500 [ 95.106822][ T9748] netlink_unicast+0x5c0/0x690 [ 95.106936][ T9748] netlink_sendmsg+0x58b/0x6b0 [ 95.106977][ T9748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.107080][ T9748] __sock_sendmsg+0x145/0x180 [ 95.107103][ T9748] ____sys_sendmsg+0x31e/0x4a0 [ 95.107141][ T9748] ___sys_sendmsg+0x17b/0x1d0 [ 95.107193][ T9748] __x64_sys_sendmsg+0xd4/0x160 [ 95.107302][ T9748] x64_sys_call+0x17ba/0x3000 [ 95.107332][ T9748] do_syscall_64+0xca/0x2b0 [ 95.107373][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.107398][ T9748] RIP: 0033:0x7fe22dd8f749 [ 95.107443][ T9748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.107465][ T9748] RSP: 002b:00007fe22c7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.107539][ T9748] RAX: ffffffffffffffda RBX: 00007fe22dfe5fa0 RCX: 00007fe22dd8f749 [ 95.107556][ T9748] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 95.107571][ T9748] RBP: 00007fe22de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 95.107603][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.107617][ T9748] R13: 00007fe22dfe6038 R14: 00007fe22dfe5fa0 R15: 00007fff22a8ab68 [ 95.107640][ T9748] [ 95.107648][ T9748] memory: usage 307200kB, limit 307200kB, failcnt 101 [ 95.449757][ T9748] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0 [ 95.457738][ T9748] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 95.465084][ T9748] Memory cgroup stats for /syz5: [ 95.465361][ T9748] cache 0 [ 95.473306][ T9748] rss 4096 [ 95.476392][ T9748] shmem 0 [ 95.479372][ T9748] mapped_file 0 [ 95.482862][ T9748] dirty 0 [ 95.485881][ T9748] writeback 0 [ 95.489182][ T9748] workingset_refault_anon 1312 [ 95.493960][ T9748] workingset_refault_file 0 [ 95.498593][ T9748] swap 163840 [ 95.501990][ T9748] swapcached 32768 [ 95.505793][ T9748] pgpgin 15067 [ 95.509193][ T9748] pgpgout 15059 [ 95.512739][ T9748] pgfault 19537 [ 95.516244][ T9748] pgmajfault 169 [ 95.519816][ T9748] inactive_anon 32768 [ 95.523827][ T9748] active_anon 0 [ 95.527346][ T9748] inactive_file 0 [ 95.531010][ T9748] active_file 0 [ 95.534533][ T9748] unevictable 0 [ 95.538005][ T9748] hierarchical_memory_limit 314572800 [ 95.543432][ T9748] hierarchical_memsw_limit 9223372036854771712 [ 95.549680][ T9748] total_cache 0 [ 95.553166][ T9748] total_rss 4096 [ 95.556782][ T9748] total_shmem 0 [ 95.560279][ T9748] total_mapped_file 0 [ 95.564290][ T9748] total_dirty 0 [ 95.567944][ T9748] total_writeback 0 [ 95.571794][ T9748] total_workingset_refault_anon 1312 [ 95.577132][ T9748] total_workingset_refault_file 0 [ 95.582241][ T9748] total_swap 163840 [ 95.586130][ T9748] total_swapcached 32768 [ 95.590400][ T9748] total_pgpgin 15067 [ 95.594316][ T9748] total_pgpgout 15059 [ 95.598371][ T9748] total_pgfault 19537 [ 95.602389][ T9748] total_pgmajfault 169 [ 95.606563][ T9748] total_inactive_anon 32768 [ 95.611097][ T9748] total_active_anon 0 [ 95.615140][ T9748] total_inactive_file 0 [ 95.619426][ T9748] total_active_file 0 [ 95.623481][ T9748] total_unevictable 0 [ 95.627521][ T9748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1337,pid=9747,uid=0 [ 95.642212][ T9748] Memory cgroup out of memory: Killed process 9747 (syz.5.1337) total-vm:95884kB, anon-rss:1264kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 95.709841][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 95.763437][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'. [ 96.172157][ T9830] SELinux: ebitmap: truncated map [ 96.204595][ T9830] SELinux: failed to load policy [ 96.607954][ T9844] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 96.659731][ T9847] loop5: detected capacity change from 0 to 2048 [ 96.703764][ T9847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.773605][ T9034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.028780][ T9873] netlink: 'syz.5.1387': attribute type 1 has an invalid length. [ 97.036685][ T9873] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1387'. [ 97.515313][ T9901] SELinux: failed to load policy [ 97.707265][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 97.707280][ T29] audit: type=1326 audit(1768181007.500:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.737172][ T29] audit: type=1326 audit(1768181007.500:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.761091][ T29] audit: type=1326 audit(1768181007.500:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.784447][ T29] audit: type=1326 audit(1768181007.500:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.807954][ T29] audit: type=1326 audit(1768181007.500:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.825901][ T3836] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.831590][ T29] audit: type=1326 audit(1768181007.500:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.860918][ T29] audit: type=1326 audit(1768181007.500:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.884433][ T29] audit: type=1326 audit(1768181007.500:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.907765][ T29] audit: type=1326 audit(1768181007.500:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 97.931398][ T29] audit: type=1326 audit(1768181007.500:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9914 comm="syz.1.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 98.379864][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1426'. [ 98.423983][ T9968] sctp: [Deprecated]: syz.3.1428 (pid 9968) Use of int in maxseg socket option. [ 98.423983][ T9968] Use struct sctp_assoc_value instead [ 98.549218][ T9979] dvmrp0: entered allmulticast mode [ 98.596440][ T9983] block device autoloading is deprecated and will be removed. [ 98.636211][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1435'. [ 98.651138][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 98.673811][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 98.699994][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1435'. [ 98.816682][T10011] IPVS: set_ctl: invalid protocol: 2 172.20.20.51:20002 [ 99.221544][ T1683] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.658374][T10069] xt_hashlimit: max too large, truncated to 1048576 [ 99.812544][T10082] tmpfs: Unknown parameter 'ÿÿ0xffffffffffffffff)«;0ß}u¯jf°5Œ#X‰Î*„زïJ!¢|šñ;fWÿ ~]X®©À [ 99.812544][T10082] ' [ 100.334936][ T5020] vlan2: left promiscuous mode [ 100.340207][ T5020] bridge0: port 3(vlan2) entered disabled state [ 100.377852][ T5020] bridge_slave_1: left allmulticast mode [ 100.383639][ T5020] bridge_slave_1: left promiscuous mode [ 100.389891][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.400914][ T5020] bridge_slave_0: left promiscuous mode [ 100.406762][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.419194][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.444546][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.452728][ T5020] dvmrp8 (unregistering): left allmulticast mode [ 100.538164][ T5020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.548026][ T5020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.557557][ T5020] bond0 (unregistering): Released all slaves [ 100.568064][ T5020] bond1 (unregistering): (slave batadv1): Releasing active interface [ 100.576769][ T5020] bond1 (unregistering): Released all slaves [ 100.645377][T10099] chnl_net:caif_netlink_parms(): no params data found [ 100.678204][ T5020] hsr_slave_0: left promiscuous mode [ 100.684070][ T5020] hsr_slave_1: left promiscuous mode [ 100.741252][ T5020] team0 (unregistering): Port device team_slave_1 removed [ 100.752718][ T5020] team0 (unregistering): Port device team_slave_0 removed [ 100.813546][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.820815][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.828114][T10099] bridge_slave_0: entered allmulticast mode [ 100.834845][T10099] bridge_slave_0: entered promiscuous mode [ 100.841896][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.849034][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.856234][T10099] bridge_slave_1: entered allmulticast mode [ 100.862851][T10099] bridge_slave_1: entered promiscuous mode [ 100.886199][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.897262][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.919506][T10099] team0: Port device team_slave_0 added [ 100.926711][T10099] team0: Port device team_slave_1 added [ 100.945187][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.952156][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.978365][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.990462][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.997492][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.023506][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.046506][T10133] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 101.077054][T10099] hsr_slave_0: entered promiscuous mode [ 101.083510][T10099] hsr_slave_1: entered promiscuous mode [ 101.089992][T10099] debugfs: 'hsr0' already exists in 'hsr' [ 101.095833][T10099] Cannot create hsr debugfs directory [ 101.319940][ T3836] Bluetooth: hci0: command 0x1003 tx timeout [ 101.326523][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.449788][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'. [ 101.458889][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'. [ 101.489717][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'. [ 101.498840][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'. [ 101.566016][T10153] syzkaller1: entered promiscuous mode [ 101.571653][T10153] syzkaller1: entered allmulticast mode [ 101.838256][T10099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.849074][T10099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.871242][T10099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.891116][T10099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.954774][T10099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.964473][ T3484] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec [ 101.976680][T10099] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.987173][ T1683] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.994428][ T1683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.006559][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.013726][ T5020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.086871][T10099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.158399][T10099] veth0_vlan: entered promiscuous mode [ 102.167379][T10099] veth1_vlan: entered promiscuous mode [ 102.184781][T10099] veth0_macvtap: entered promiscuous mode [ 102.192410][T10099] veth1_macvtap: entered promiscuous mode [ 102.206401][T10099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.218118][T10099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.229674][ T5020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.238706][ T5020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.248547][ T5020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.259427][ T5020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.559717][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1527'. [ 102.615800][T10240] bridge0: port 3(macvtap1) entered blocking state [ 102.622523][T10240] bridge0: port 3(macvtap1) entered disabled state [ 102.630073][T10240] macvtap1: entered allmulticast mode [ 102.636177][T10240] macvtap1: left allmulticast mode [ 102.783190][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 102.826026][T10249] team1: entered promiscuous mode [ 102.831260][T10249] team1: entered allmulticast mode [ 102.839496][T10249] 8021q: adding VLAN 0 to HW filter on device team1 [ 103.016424][T10270] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 103.102882][T10270] SELinux: failed to load policy [ 103.241918][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 103.241934][ T29] audit: type=1400 audit(1768181013.060:3221): avc: denied { listen } for pid=10285 comm="syz.3.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.299616][T10289] serio: Serial port ttyS3 [ 103.693249][ T29] audit: type=1400 audit(1768181013.510:3222): avc: denied { mounton } for pid=10304 comm="syz.0.1559" path=2F31372F66696C6530202864656C6574656429 dev="proc" ino=4026533036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 103.833193][T10317] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 103.835545][ T29] audit: type=1326 audit(1768181013.650:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81562f749 code=0x7ffc0000 [ 103.904355][T10323] __nla_validate_parse: 1 callbacks suppressed [ 103.904374][T10323] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.1567'. [ 103.956745][T10317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.963496][ T29] audit: type=1326 audit(1768181013.690:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81562f749 code=0x7ffc0000 [ 103.987182][ T29] audit: type=1326 audit(1768181013.690:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81562f749 code=0x7ffc0000 [ 104.010792][ T29] audit: type=1326 audit(1768181013.690:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81562f749 code=0x7ffc0000 [ 104.034376][ T29] audit: type=1326 audit(1768181013.690:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81562f749 code=0x7ffc0000 [ 104.058061][ T29] audit: type=1326 audit(1768181013.700:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81562f749 code=0x7ffc0000 [ 104.081628][ T29] audit: type=1326 audit(1768181013.700:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81562f749 code=0x7ffc0000 [ 104.105214][ T29] audit: type=1326 audit(1768181013.700:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81562f749 code=0x7ffc0000 [ 104.177738][T10331] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 104.186200][T10331] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 104.417567][T10354] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 104.497903][T10359] loop3: detected capacity change from 0 to 512 [ 104.505334][T10359] ext4: Bad value for 'max_dir_size_kb' [ 104.802556][T10372] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1587'. [ 104.921229][T10379] syzkaller1: entered promiscuous mode [ 104.926971][T10379] syzkaller1: entered allmulticast mode [ 105.051091][T10391] netlink: 'syz.5.1594': attribute type 4 has an invalid length. [ 105.255578][T10395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10395 comm=syz.5.1596 [ 105.766090][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1606'. [ 105.865087][T10419] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 105.877642][T10427] netlink: 'syz.1.1609': attribute type 4 has an invalid length. [ 105.921618][T10427] netlink: 'syz.1.1609': attribute type 4 has an invalid length. [ 106.273418][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1620'. [ 106.438496][T10470] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1625'. [ 106.905478][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 106.914161][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.988440][T10491] fido_id[10491]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.303973][T10510] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 107.330128][T10508] IPVS: stopping master sync thread 10510 ... [ 108.084121][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1658'. [ 108.108264][T10546] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 108.119310][T10546] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 108.316511][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1661'. [ 108.408781][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 108.581132][T10584] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.588373][T10584] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.804895][T10612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.122819][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 109.122838][ T29] audit: type=1326 audit(1768181018.940:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.164876][ T29] audit: type=1326 audit(1768181018.940:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.188513][ T29] audit: type=1326 audit(1768181018.970:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.212180][ T29] audit: type=1326 audit(1768181018.970:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.235752][ T29] audit: type=1326 audit(1768181018.970:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.259324][ T29] audit: type=1326 audit(1768181018.970:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.282957][ T29] audit: type=1326 audit(1768181018.970:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.306559][ T29] audit: type=1326 audit(1768181018.970:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.375243][ T29] audit: type=1326 audit(1768181019.000:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.398924][ T29] audit: type=1326 audit(1768181019.050:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd8f749 code=0x7ffc0000 [ 109.453285][T10632] macvtap1: entered promiscuous mode [ 109.458672][T10632] macvtap1: entered allmulticast mode [ 109.478540][T10636] loop4: detected capacity change from 0 to 7 [ 109.579119][T10643] atomic_op ffff88810cdd2d28 conn xmit_atomic 0000000000000000 [ 109.730413][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'. [ 109.740067][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 109.784926][T10653] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.795405][T10655] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1703'. [ 110.207685][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 110.302090][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 110.323541][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 110.528790][T10718] loop5: detected capacity change from 0 to 512 [ 110.580243][T10718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.593613][T10718] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.611135][T10726] ip6gretap0: entered promiscuous mode [ 110.625719][T10726] ip6gretap0: left promiscuous mode [ 110.655511][T10718] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.662995][T10718] vhci_hcd vhci_hcd.2: invalid port number 96 [ 110.669415][T10718] vhci_hcd vhci_hcd.2: default hub control req: 4000 vfffa i0060 l0 [ 110.690670][ T9034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.337476][T10772] bridge: RTM_NEWNEIGH with invalid ether address [ 112.123389][T10796] veth0_to_team: entered promiscuous mode [ 112.365818][T10814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10814 comm=syz.0.1771 [ 112.819321][T10834] loop5: detected capacity change from 0 to 512 [ 112.849527][T10834] EXT4-fs (loop5): too many log groups per flexible block group [ 112.857825][T10834] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 112.873651][T10834] EXT4-fs (loop5): mount failed [ 113.169306][T10850] pimreg: entered allmulticast mode [ 113.182748][T10850] pimreg: left allmulticast mode [ 113.195296][T10852] team0 (unregistering): Port device team_slave_0 removed [ 113.203967][T10852] team0 (unregistering): Port device team_slave_1 removed [ 113.612951][T10902] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.362809][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'. [ 114.483256][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 114.483272][ T29] audit: type=1326 audit(1768181024.300:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb837b65e7 code=0x7ffc0000 [ 114.545792][ T29] audit: type=1326 audit(1768181024.300:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb8375b829 code=0x7ffc0000 [ 114.569692][ T29] audit: type=1326 audit(1768181024.300:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb837b65e7 code=0x7ffc0000 [ 114.593785][ T29] audit: type=1326 audit(1768181024.300:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb8375b829 code=0x7ffc0000 [ 114.617757][ T29] audit: type=1326 audit(1768181024.300:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 114.641560][ T29] audit: type=1326 audit(1768181024.300:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 114.665376][ T29] audit: type=1326 audit(1768181024.310:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 114.689009][ T29] audit: type=1326 audit(1768181024.310:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 114.712928][ T29] audit: type=1326 audit(1768181024.310:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 114.736726][ T29] audit: type=1326 audit(1768181024.310:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10957 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdb837bf749 code=0x7ffc0000 [ 114.845279][T10971] lo: entered promiscuous mode [ 114.850203][T10971] lo: entered allmulticast mode [ 114.861330][T10971] tunl0: entered promiscuous mode [ 114.866489][T10971] tunl0: entered allmulticast mode [ 114.877609][T10971] gre0: entered promiscuous mode [ 114.882607][T10971] gre0: entered allmulticast mode [ 114.899568][T10971] gretap0: entered promiscuous mode [ 114.904866][T10971] gretap0: entered allmulticast mode [ 114.928758][T10971] erspan0: entered promiscuous mode [ 114.934114][T10971] erspan0: entered allmulticast mode [ 115.026484][T10971] ip_vti0: entered promiscuous mode [ 115.031858][T10971] ip_vti0: entered allmulticast mode [ 115.038600][T10971] ip6_vti0: entered promiscuous mode [ 115.043958][T10971] ip6_vti0: entered allmulticast mode [ 115.050869][T10971] sit0: entered promiscuous mode [ 115.055904][T10971] sit0: entered allmulticast mode [ 115.063566][T10971] ip6tnl0: entered promiscuous mode [ 115.068972][T10971] ip6tnl0: entered allmulticast mode [ 115.076226][T10971] ip6gre0: entered promiscuous mode [ 115.081586][T10971] ip6gre0: entered allmulticast mode [ 115.088354][T10971] ip6gretap0: entered promiscuous mode [ 115.093961][T10971] ip6gretap0: entered allmulticast mode [ 115.101331][T10971] bridge0: entered promiscuous mode [ 115.106665][T10971] bridge0: entered allmulticast mode [ 115.112921][T10971] vcan0: entered promiscuous mode [ 115.118504][T10971] vcan0: entered allmulticast mode [ 115.126877][T10971] $Hÿ: entered allmulticast mode [ 115.132132][T10971] bond_slave_0: entered allmulticast mode [ 115.138231][T10971] bond_slave_1: entered allmulticast mode [ 115.147949][T10971] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 115.157698][T10971] dummy0: entered promiscuous mode [ 115.162880][T10971] dummy0: entered allmulticast mode [ 115.168860][T10971] batman_adv: batadv0: Interface activated: dummy0 [ 115.175542][T10971] batadv0: mtu less than device minimum [ 115.181932][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.192964][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.203962][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.215029][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.226241][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.237449][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.248518][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.259541][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.270664][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.299585][T10971] nlmon0: entered promiscuous mode [ 115.304994][T10971] nlmon0: entered allmulticast mode [ 115.311480][T10971] caif0: entered promiscuous mode [ 115.316629][T10971] caif0: entered allmulticast mode [ 115.327425][T10976] netlink: 'syz.2.1840': attribute type 3 has an invalid length. [ 115.336304][T10976] netlink: 'syz.2.1840': attribute type 3 has an invalid length. [ 115.899248][T11030] netlink: 'syz.0.1862': attribute type 39 has an invalid length. [ 116.171021][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 116.281649][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 117.035112][T11077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.043764][T11077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.206226][T11082] loop5: detected capacity change from 0 to 2048 [ 117.219740][T11082] EXT4-fs (loop5): failed to initialize system zone (-117) [ 117.228050][T11082] EXT4-fs (loop5): mount failed [ 117.346305][T11094] netlink: 'syz.5.1889': attribute type 1 has an invalid length. [ 117.394957][T11094] bond1: entered promiscuous mode [ 117.400116][T11094] bond1: entered allmulticast mode [ 117.422941][T11094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.447941][T11098] macvlan2: entered promiscuous mode [ 117.453331][T11098] macvlan2: entered allmulticast mode [ 117.470021][T11098] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.521443][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 117.531128][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 117.577879][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad1d400: rx timeout, send abort [ 117.586233][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ad1d400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.659670][T11111] pimreg: entered allmulticast mode [ 117.686904][T11111] pimreg: left allmulticast mode [ 117.961567][T11139] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1911'. [ 118.036228][T11147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1916'. [ 118.189201][T11166] lo: left promiscuous mode [ 118.193782][T11166] lo: left allmulticast mode [ 118.225569][T11166] tunl0: left promiscuous mode [ 118.230417][T11166] tunl0: left allmulticast mode [ 118.245340][T11166] gre0: left promiscuous mode [ 118.250169][T11166] gre0: left allmulticast mode [ 118.282897][T11166] gretap0: left promiscuous mode [ 118.288046][T11166] gretap0: left allmulticast mode [ 118.305780][T11166] erspan0: left promiscuous mode [ 118.310891][T11166] erspan0: left allmulticast mode [ 118.317324][T11166] ip_vti0: left promiscuous mode [ 118.322524][T11166] ip_vti0: left allmulticast mode [ 118.328639][T11166] ip6_vti0: left promiscuous mode [ 118.333814][T11166] ip6_vti0: left allmulticast mode [ 118.339919][T11166] sit0: left promiscuous mode [ 118.344821][T11166] sit0: left allmulticast mode [ 118.352376][T11166] ip6tnl0: left promiscuous mode [ 118.357418][T11166] ip6tnl0: left allmulticast mode [ 118.363512][T11166] ip6gre0: left promiscuous mode [ 118.368773][T11166] ip6gre0: left allmulticast mode [ 118.375056][T11166] syz_tun: left promiscuous mode [ 118.380064][T11166] syz_tun: left allmulticast mode [ 118.398067][T11166] ip6gretap0: left promiscuous mode [ 118.403443][T11166] ip6gretap0: left allmulticast mode [ 118.422395][T11166] bridge0: left promiscuous mode [ 118.427539][T11166] bridge0: left allmulticast mode [ 118.445152][T11166] vcan0: left promiscuous mode [ 118.450078][T11166] vcan0: left allmulticast mode [ 118.457183][T11166] bond0: left promiscuous mode [ 118.461999][T11166] bond_slave_0: left promiscuous mode [ 118.467676][T11166] bond_slave_1: left promiscuous mode [ 118.473332][T11166] bond0: left allmulticast mode [ 118.478238][T11166] bond_slave_0: left allmulticast mode [ 118.483722][T11166] bond_slave_1: left allmulticast mode [ 118.490723][T11166] team0: left promiscuous mode [ 118.496132][T11166] team_slave_0: left promiscuous mode [ 118.501718][T11166] team_slave_1: left promiscuous mode [ 118.507265][T11166] team0: left allmulticast mode [ 118.512144][T11166] team_slave_0: left allmulticast mode [ 118.517917][T11166] team_slave_1: left allmulticast mode [ 118.525011][T11166] dummy0: left promiscuous mode [ 118.529912][T11166] dummy0: left allmulticast mode [ 118.536069][T11166] nlmon0: left promiscuous mode [ 118.540959][T11166] nlmon0: left allmulticast mode [ 118.548162][T11166] caif0: left promiscuous mode [ 118.552987][T11166] caif0: left allmulticast mode [ 118.558711][T11166] macsec0: left promiscuous mode [ 118.570043][T11166] team1: left promiscuous mode [ 118.574873][T11166] team1: left allmulticast mode [ 118.581816][T11170] netlink: 'syz.2.1925': attribute type 30 has an invalid length. [ 119.140964][T11211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1945'. [ 119.210296][T11213] loop5: detected capacity change from 0 to 2048 [ 119.255770][T11213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.269970][T11216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1957'. [ 119.316240][T11213] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.333237][T11213] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1946: bg 0: block 345: padding at end of block bitmap is not set [ 119.353702][T11213] EXT4-fs (loop5): Remounting filesystem read-only [ 119.370549][T11213] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1606: inode #18: comm syz.5.1946: cleanup dec ref error -117 [ 119.415872][ T9034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.485859][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 119.485876][ T29] audit: type=1326 audit(1768181029.310:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 119.515874][ T29] audit: type=1326 audit(1768181029.310:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 119.563517][ T29] audit: type=1326 audit(1768181029.310:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 119.587234][ T29] audit: type=1326 audit(1768181029.310:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 119.610853][ T29] audit: type=1326 audit(1768181029.310:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 119.634477][ T29] audit: type=1326 audit(1768181029.310:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 119.658148][ T29] audit: type=1326 audit(1768181029.320:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 119.681779][ T29] audit: type=1326 audit(1768181029.320:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 119.706353][ T29] audit: type=1326 audit(1768181029.530:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 120.664121][ T29] audit: type=1326 audit(1768181030.480:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11251 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb837b65e7 code=0x7ffc0000 [ 120.679386][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 120.883237][T11274] macsec1: entered promiscuous mode [ 120.888799][T11274] bridge0: entered promiscuous mode [ 120.907288][T11274] bridge0: port 3(macsec1) entered blocking state [ 120.913816][T11274] bridge0: port 3(macsec1) entered disabled state [ 120.920738][T11274] macsec1: entered allmulticast mode [ 120.920758][T11274] bridge0: entered allmulticast mode [ 120.921787][T11274] macsec1: left allmulticast mode [ 120.921866][T11274] bridge0: left allmulticast mode [ 120.930465][T11274] bridge0: left promiscuous mode [ 121.130175][T11305] xt_connbytes: Forcing CT accounting to be enabled [ 121.577542][T11317] SELinux: failed to load policy [ 121.992640][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 122.012973][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 122.173584][T11369] loop3: detected capacity change from 0 to 2048 [ 122.375245][T10605] loop3: p1 p2 p3 [ 122.437696][T11369] loop3: p1 p2 p3 [ 122.486345][T11378] vlan2: entered allmulticast mode [ 122.491658][T11378] bridge0: port 3(vlan2) entered blocking state [ 122.498156][T11378] bridge0: port 3(vlan2) entered disabled state [ 122.520144][T11378] vlan2: entered promiscuous mode [ 122.544996][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 122.636145][ T9083] udevd[9083]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 122.648579][T10605] udevd[10605]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 122.666734][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 123.175887][T11414] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 123.204996][T11414] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 123.299089][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 123.333015][T11422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.356864][T11422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.373106][T11422] batman_adv: batadv0: Interface deactivated: dummy0 [ 123.380372][T11422] batman_adv: batadv0: Removing interface: dummy0 [ 123.580294][T11445] $Hÿ: renamed from bond0 (while UP) [ 123.596054][T11445] $Hÿ: entered promiscuous mode [ 123.601217][T11445] bond_slave_0: entered promiscuous mode [ 123.607334][T11445] bond_slave_1: entered promiscuous mode [ 123.694360][T11453] loop5: detected capacity change from 0 to 128 [ 123.732651][T11453] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.755709][T11453] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.781526][T11466] loop3: detected capacity change from 0 to 1024 [ 123.826731][ T9034] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.836470][T11466] EXT4-fs: inline encryption not supported [ 123.847984][T11466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.941844][T11478] syzkaller0: entered allmulticast mode [ 123.968040][T11478] syzkaller0: entered promiscuous mode [ 123.980250][T11466] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 123.999944][T11478] syzkaller0 (unregistering): left allmulticast mode [ 124.007027][T11478] syzkaller0 (unregistering): left promiscuous mode [ 124.049035][T11466] EXT4-fs (loop3): Remounting filesystem read-only [ 124.105999][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.177724][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2057'. [ 124.271999][T11506] Invalid argument reading file caps for ./file0 [ 124.368377][T11515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.429366][T11515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.486194][T11515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.533962][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 124.551227][T11515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.610260][ T5035] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.625108][ T5035] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.655360][ T5035] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.705776][ T5035] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.893370][T11543] process '/newroot/382/file0' started with executable stack [ 124.924435][ T9] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec [ 125.022136][T11558] netlink: 'syz.5.2085': attribute type 1 has an invalid length. [ 125.069412][T11558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.083675][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2085'. [ 125.113498][T11563] bond2 (unregistering): Released all slaves [ 125.545753][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 125.545770][ T29] audit: type=1326 audit(1768181035.370:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.608347][ T29] audit: type=1326 audit(1768181035.370:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.632139][ T29] audit: type=1326 audit(1768181035.370:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.655746][ T29] audit: type=1326 audit(1768181035.400:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.679500][ T29] audit: type=1326 audit(1768181035.400:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.703084][ T29] audit: type=1326 audit(1768181035.400:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.726647][ T29] audit: type=1326 audit(1768181035.400:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.750189][ T29] audit: type=1326 audit(1768181035.400:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.773748][ T29] audit: type=1326 audit(1768181035.400:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 125.797281][ T29] audit: type=1326 audit(1768181035.400:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11440ef749 code=0x7ffc0000 [ 126.106411][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 127.235448][T11725] __nla_validate_parse: 2 callbacks suppressed [ 127.235466][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 127.331234][T11736] netlink: 'syz.5.2152': attribute type 1 has an invalid length. [ 127.350709][T11738] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2151'. [ 127.865383][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2164'. [ 128.321356][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2184'. [ 128.874189][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2199'. [ 128.923617][T11843] team2: entered promiscuous mode [ 128.928867][T11843] team2: entered allmulticast mode [ 128.950538][T11845] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2201'. [ 128.966032][T11843] 8021q: adding VLAN 0 to HW filter on device team2 [ 129.028989][ T3006] ================================================================== [ 129.037239][ T3006] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 129.045285][ T3006] [ 129.047643][ T3006] write to 0xffff888107b011b0 of 8 bytes by task 10605 on cpu 0: [ 129.055403][ T3006] dentry_unlink_inode+0x65/0x260 [ 129.060474][ T3006] d_delete+0x164/0x180 [ 129.064667][ T3006] d_delete_notify+0x32/0x100 [ 129.069392][ T3006] vfs_unlink+0x32c/0x440 [ 129.073735][ T3006] do_unlinkat+0x1cd/0x4b0 [ 129.078172][ T3006] __x64_sys_unlink+0x2e/0x40 [ 129.082885][ T3006] x64_sys_call+0x2f48/0x3000 [ 129.087599][ T3006] do_syscall_64+0xca/0x2b0 [ 129.092156][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.098070][ T3006] [ 129.100405][ T3006] read to 0xffff888107b011b0 of 8 bytes by task 3006 on cpu 1: [ 129.107963][ T3006] step_into_slowpath+0x113/0x480 [ 129.113010][ T3006] path_lookupat+0x330/0x500 [ 129.117622][ T3006] filename_lookup+0x147/0x340 [ 129.122430][ T3006] do_readlinkat+0x7d/0x320 [ 129.126967][ T3006] __x64_sys_readlink+0x47/0x60 [ 129.131847][ T3006] x64_sys_call+0x2af1/0x3000 [ 129.136550][ T3006] do_syscall_64+0xca/0x2b0 [ 129.141083][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.147012][ T3006] [ 129.149350][ T3006] value changed: 0xffff88811c726930 -> 0x0000000000000000 [ 129.156517][ T3006] [ 129.158852][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 129.165023][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.174328][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.184395][ T3006] ================================================================== [ 129.214532][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 129.223471][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'.