last executing test programs: 5m41.638133713s ago: executing program 32 (id=1118): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x49c, &(0x7f0000000580)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0xffff) 5m41.638096034s ago: executing program 33 (id=1117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 5m41.614016016s ago: executing program 34 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x6a040000) 5m30.198266386s ago: executing program 35 (id=1401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getrlimit(0x5, &(0x7f0000000140)) 5m30.198226976s ago: executing program 36 (id=1405): unshare(0x6a040000) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48001}, 0x8054) 5m30.198175856s ago: executing program 37 (id=1403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) 5m28.375670832s ago: executing program 38 (id=1409): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x4006}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x7, 0x10}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x2, 0x2, 0x8, 0xf05}) 4m32.890180233s ago: executing program 39 (id=3527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) fspick(0xffffffffffffff9c, 0x0, 0x0) 3m13.153910167s ago: executing program 40 (id=7222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3m6.522445271s ago: executing program 41 (id=7503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2m43.863243737s ago: executing program 42 (id=8359): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 2m38.083397483s ago: executing program 43 (id=8548): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000005300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 2m26.481256348s ago: executing program 5 (id=9036): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) 2m26.45587316s ago: executing program 5 (id=9037): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m26.398642805s ago: executing program 5 (id=9053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2m26.284307334s ago: executing program 5 (id=9050): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 2m26.236629028s ago: executing program 5 (id=9052): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m25.921483413s ago: executing program 5 (id=9059): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utime(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 2m25.905609404s ago: executing program 44 (id=9059): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utime(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 1m52.977738827s ago: executing program 4 (id=10382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) 1m52.95051024s ago: executing program 4 (id=10385): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 1m52.768691214s ago: executing program 4 (id=10391): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000600)="ee5a7af0fa946c4ebc", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1m52.722178378s ago: executing program 4 (id=10394): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 1m52.721826608s ago: executing program 4 (id=10396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x5b, &(0x7f00000001c0)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x25, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x25, 0x0, @gue={{0x2, 0x1, 0x0, 0x9}, "e7c37e9156aa459f5a8e491da24d5d1b3740204ec7"}}}}}}}, 0x0) 1m52.517940094s ago: executing program 4 (id=10404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 1m52.492797366s ago: executing program 45 (id=10404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 50.923233537s ago: executing program 6 (id=12774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) 50.88573193s ago: executing program 6 (id=12776): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0xa2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000004700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) finit_module(r0, 0x0, 0x3) 50.867131282s ago: executing program 6 (id=12777): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[], 0x1028}}, 0x20000050) 50.813619816s ago: executing program 6 (id=12779): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 50.813187016s ago: executing program 6 (id=12782): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 50.323142205s ago: executing program 6 (id=12797): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 50.301791717s ago: executing program 46 (id=12797): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 46.91257263s ago: executing program 1 (id=12854): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) time(0x0) 46.797116s ago: executing program 1 (id=12857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 46.234570315s ago: executing program 1 (id=12894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) 46.187656269s ago: executing program 1 (id=12896): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 46.121741604s ago: executing program 1 (id=12897): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 45.847514546s ago: executing program 1 (id=12902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 45.847342776s ago: executing program 47 (id=12902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174"], 0x25c}}, 0x0) 5.58575722s ago: executing program 0 (id=14611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 5.480799329s ago: executing program 0 (id=14618): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote, 0x4}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 5.202639381s ago: executing program 0 (id=14632): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0xfff2, 0xffff}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.412901144s ago: executing program 0 (id=14667): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 4.376938277s ago: executing program 0 (id=14670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 3.59382211s ago: executing program 0 (id=14692): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.547390144s ago: executing program 48 (id=14692): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 807.629935ms ago: executing program 8 (id=14778): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r1, 0x7, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) 782.171837ms ago: executing program 8 (id=14781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xfccf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 754.873969ms ago: executing program 8 (id=14783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)="10", 0x1, 0xffffffffffffffff) 730.594111ms ago: executing program 8 (id=14785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x48004) 677.867155ms ago: executing program 8 (id=14788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 670.877376ms ago: executing program 8 (id=14790): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x2c, 0x3, 0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 556.831785ms ago: executing program 2 (id=14799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresgid(0xee00, 0xee01, 0x0) 512.727119ms ago: executing program 9 (id=14800): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) 512.352939ms ago: executing program 2 (id=14802): creat(&(0x7f0000000080)='./file0\x00', 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) 512.146309ms ago: executing program 9 (id=14803): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[], 0x24}}, 0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 511.942589ms ago: executing program 2 (id=14804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 471.504472ms ago: executing program 2 (id=14807): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x6108be0612f59833}, 0x0) 471.153432ms ago: executing program 2 (id=14809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 418.354286ms ago: executing program 2 (id=14810): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$peeksig(0x4209, r0, &(0x7f0000000700)={0x8, 0x0, 0x1}, &(0x7f0000001980)=[{}]) 311.129295ms ago: executing program 9 (id=14817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f0000000280)={0x7, 0x74, 0x20000}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000040)='./file0\x00') 296.379926ms ago: executing program 9 (id=14818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) readv(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x55d, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 232.388531ms ago: executing program 9 (id=14822): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getgroups(0x5, &(0x7f0000000280)=[0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) 225.947772ms ago: executing program 7 (id=14823): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 170.392006ms ago: executing program 9 (id=14824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x2, 0x4, 0x9, 0x68, 0x3, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xa5, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100fe, @remote}, {0x4f20, 0x4e22, 0x91, 0x0, @gue={{0x2, 0x0, 0x3, 0x2, 0x0, @val=0x80}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b35c112fa17932138ee8f6a6d2afdde33d5a4ff97f976b3ac6d8c10e10601d52cd3b5a4a38a054f2fba0b015c2eda7adba64f9cc4a250be4bc5185bd6691ecdac2d862bc9ca9725cfa1cba3babc13c16deb20c6c21024632724db85202581179fefc02f0f431933bd89"}}}}, 0xb3) 170.138716ms ago: executing program 7 (id=14825): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) 125.63034ms ago: executing program 7 (id=14827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 86.358933ms ago: executing program 7 (id=14829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_settime(0xfffffffb, 0x0) 86.045433ms ago: executing program 7 (id=14831): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc27, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) 85.857493ms ago: executing program 3 (id=14832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x2000c041) 30.402117ms ago: executing program 3 (id=14833): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x60842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/sync_on_suspend', 0x143b02, 0x1c0) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r2, r3, 0x0, 0x8000fffffffe) 30.164077ms ago: executing program 7 (id=14834): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 30.040447ms ago: executing program 3 (id=14835): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 29.858717ms ago: executing program 3 (id=14836): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x47ba, 0xc3c, 0x0, 0x0, 0x0) 14.255209ms ago: executing program 3 (id=14837): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 0s ago: executing program 3 (id=14838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): 25575][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.137112][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.144798][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.153373][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.161768][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.169429][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.178086][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.185656][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.194305][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.201980][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.213071][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.220688][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.230502][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.238057][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.245589][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.254193][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.261815][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.270646][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.278204][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.289775][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.297422][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.307934][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.321178][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.328770][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.336909][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.344851][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.352372][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.359954][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.367815][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.375347][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.382854][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.390353][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.397824][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.405309][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.414511][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.422160][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.439015][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.459437][T31763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 324.472743][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 324.472755][ T29] audit: type=1400 audit(1095.461:17264): avc: denied { write } for pid=31780 comm="syz.2.11967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.512671][ T9] kernel write not supported for file /2031/clear_refs (pid: 9 comm: kworker/0:0) [ 324.598296][ T29] audit: type=1326 audit(1095.598:17265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 324.621535][ T29] audit: type=1326 audit(1095.598:17266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 324.644803][ T29] audit: type=1326 audit(1095.598:17267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 324.749040][ T29] audit: type=1326 audit(1095.598:17268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 324.772367][ T29] audit: type=1326 audit(1095.608:17269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 324.795512][ T29] audit: type=1326 audit(1095.608:17270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 324.818836][ T29] audit: type=1326 audit(1095.671:17271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 324.841977][ T29] audit: type=1326 audit(1095.671:17272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 324.865261][ T29] audit: type=1326 audit(1095.724:17273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31804 comm="syz.6.11980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6018ebe9 code=0x7ffc0000 [ 325.301625][T31891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12004'. [ 325.310782][T31891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12004'. [ 325.319929][T31891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12004'. [ 325.346274][T31891] netlink: 'syz.6.12004': attribute type 6 has an invalid length. [ 326.278415][T32025] netlink: 'syz.7.12018': attribute type 10 has an invalid length. [ 326.292467][T32025] netlink: 'syz.7.12018': attribute type 10 has an invalid length. [ 326.303974][T32025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 326.324269][T32032] netlink: 'syz.3.12019': attribute type 6 has an invalid length. [ 326.448971][T32059] netlink: 'syz.6.12033': attribute type 10 has an invalid length. [ 326.463613][T32059] netlink: 'syz.6.12033': attribute type 10 has an invalid length. [ 326.474253][T32059] dummy0: entered allmulticast mode [ 326.480541][T32059] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 326.501524][T32067] ALSA: seq fatal error: cannot create timer (-22) [ 326.635003][T32095] netlink: 'syz.1.12050': attribute type 10 has an invalid length. [ 326.645930][T32095] team0: Port device dummy0 added [ 326.654435][T32095] netlink: 'syz.1.12050': attribute type 10 has an invalid length. [ 326.665059][T32095] team0: Port device dummy0 removed [ 326.672641][T32095] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 326.795172][T32107] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 326.976671][T32122] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 326.976671][T32122] program syz.1.12063 not setting count and/or reply_len properly [ 327.290339][T32149] batadv0: entered promiscuous mode [ 327.295767][T32149] batadv0: entered allmulticast mode [ 327.330440][T32147] ref_ctr_offset mismatch. inode: 0xa5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 327.613107][T32181] netlink: 'syz.2.12090': attribute type 21 has an invalid length. [ 327.635013][T32181] __nla_validate_parse: 19 callbacks suppressed [ 327.635070][T32181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12090'. [ 327.716725][T32190] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 327.954896][ C1] vcan0: j1939_tp_rxtimer: 0xffff888149ac2400: rx timeout, send abort [ 328.431185][ C1] vcan0: j1939_tp_rxtimer: 0xffff888149ac2200: rx timeout, send abort [ 328.537091][T32219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12108'. [ 328.565092][T32221] ref_ctr_offset mismatch. inode: 0x1353 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 328.586343][T32219] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12108'. [ 328.639018][T32230] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 328.881849][T32266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12130'. [ 328.904320][T32262] SELinux: failed to load policy [ 328.904680][T32266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12130'. [ 328.915772][ C1] vcan0: j1939_tp_rxtimer: 0xffff888149ac2200: abort rx timeout. Force session deactivation [ 328.988112][T32276] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 329.129169][T32294] ref_ctr_offset mismatch. inode: 0xbfc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 329.246805][T32301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12145'. [ 329.258753][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 329.258768][ T29] audit: type=1326 audit(1100.490:17888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.288145][ T29] audit: type=1326 audit(1100.490:17889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.324981][ T29] audit: type=1326 audit(1100.553:17890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.348140][ T29] audit: type=1326 audit(1100.553:17891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.371302][ T29] audit: type=1326 audit(1100.553:17892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.394435][ T29] audit: type=1326 audit(1100.553:17893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.417591][ T29] audit: type=1326 audit(1100.553:17894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.440703][ T29] audit: type=1326 audit(1100.553:17895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.463846][ T29] audit: type=1326 audit(1100.553:17896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.486980][ T29] audit: type=1326 audit(1100.553:17897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32316 comm="syz.2.12155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 329.642320][T32346] ref_ctr_offset mismatch. inode: 0x1084 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 330.411790][T32371] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 330.536172][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12185'. [ 330.546576][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12185'. [ 330.556601][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12185'. [ 330.567614][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12185'. [ 330.631920][T32401] netlink: 'syz.6.12191': attribute type 10 has an invalid length. [ 330.751958][T32422] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 330.751958][T32422] program syz.3.12201 not setting count and/or reply_len properly [ 331.473816][T32488] infiniband syz!: set down [ 331.478420][T32488] infiniband syz!: added team_slave_0 [ 331.490104][T32488] RDS/IB: syz!: added [ 331.494231][T32488] smc: adding ib device syz! with port count 1 [ 331.501101][T32488] smc: ib device syz! port 1 has pnetid [ 331.784209][T32506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.793401][T32506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.355481][T32531] netlink: 'syz.7.12248': attribute type 1 has an invalid length. [ 332.381897][T32531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.389797][T32538] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 332.389938][T32531] bond2: (slave bond3): making interface the new active one [ 332.407824][T32531] bond2: (slave bond3): Enslaving as an active interface with an up link [ 332.469764][T32551] netlink: '+}[@': attribute type 10 has an invalid length. [ 332.630577][T32584] __nla_validate_parse: 12 callbacks suppressed [ 332.630593][T32584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12269'. [ 332.740702][T32595] SELinux: policydb version 0 does not match my version range 15-35 [ 332.748899][T32595] SELinux: failed to load policy [ 332.908281][T32615] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12287'. [ 333.024623][T32635] netlink: 'syz.6.12295': attribute type 3 has an invalid length. [ 333.056585][ T23] Process accounting resumed [ 333.100937][T32641] hub 6-0:1.0: USB hub found [ 333.106212][T32641] hub 6-0:1.0: 8 ports detected [ 333.194662][T32648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12302'. [ 333.220916][T32648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12302'. [ 333.233923][T32648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12302'. [ 333.243092][T32652] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12303'. [ 333.252734][T32648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12302'. [ 333.282098][ T23] hid_parser_main: 23 callbacks suppressed [ 333.282113][ T23] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 333.305668][ T23] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.518275][T32678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12314'. [ 333.544099][T32678] hsr_slave_0: left promiscuous mode [ 333.553539][T32678] hsr_slave_1: left promiscuous mode [ 333.611893][T32684] vhci_hcd: invalid port number 96 [ 333.617097][T32684] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 333.664227][T32690] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12320'. [ 333.699473][T32696] netlink: 108 bytes leftover after parsing attributes in process `syz.7.12323'. [ 333.813115][T32709] netlink: 'syz.1.12329': attribute type 3 has an invalid length. [ 333.927292][T32726] netlink: 'syz.6.12347': attribute type 1 has an invalid length. [ 333.980905][T32726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 333.997897][T32726] bond4: (slave bond5): making interface the new active one [ 334.009611][T32726] bond4: (slave bond5): Enslaving as an active interface with an up link [ 334.029451][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 334.029464][ T29] audit: type=1400 audit(1105.508:18101): avc: denied { setopt } for pid=32737 comm="syz.7.12341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.109436][ T29] audit: type=1400 audit(1105.508:18102): avc: denied { write } for pid=32737 comm="syz.7.12341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.111924][ T29] audit: type=1326 audit(1105.582:18103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32750 comm="syz.3.12348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 334.111971][ T29] audit: type=1326 audit(1105.582:18104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32750 comm="syz.3.12348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 334.132844][ T29] audit: type=1326 audit(1105.582:18105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32750 comm="syz.3.12348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 334.132873][ T29] audit: type=1326 audit(1105.582:18106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32750 comm="syz.3.12348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 334.132896][ T29] audit: type=1326 audit(1105.582:18107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32750 comm="syz.3.12348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 334.132995][ T29] audit: type=1326 audit(1105.582:18108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32750 comm="syz.3.12348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 334.165709][ T29] audit: type=1326 audit(1105.644:18109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32750 comm="syz.3.12348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 334.167073][ T29] audit: type=1326 audit(1105.644:18110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32750 comm="syz.3.12348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 334.251535][ T302] netlink: 'syz.2.12355': attribute type 1 has an invalid length. [ 334.406263][ T306] bond1 (unregistering): Released all slaves [ 334.754673][ T348] netlink: 'syz.3.12372': attribute type 1 has an invalid length. [ 334.799104][ T348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.800261][ T348] bond1: (slave bond2): making interface the new active one [ 334.800650][ T348] bond1: (slave bond2): Enslaving as an active interface with an up link [ 334.818806][ T357] openvswitch: netlink: Message has 6 unknown bytes. [ 335.089236][ T404] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 335.397346][ T427] vhci_hcd: invalid port number 96 [ 335.402523][ T427] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 335.420735][ T430] sctp: [Deprecated]: syz.6.12407 (pid 430) Use of int in maxseg socket option. [ 335.420735][ T430] Use struct sctp_assoc_value instead [ 335.817681][ T473] 9pnet_fd: Insufficient options for proto=fd [ 337.113257][ T601] 9pnet_fd: Insufficient options for proto=fd [ 337.319610][ T631] sctp: [Deprecated]: syz.7.12498 (pid 631) Use of int in maxseg socket option. [ 337.319610][ T631] Use struct sctp_assoc_value instead [ 337.471584][ T643] __nla_validate_parse: 13 callbacks suppressed [ 337.471600][ T643] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12504'. [ 337.637490][ T661] sctp: [Deprecated]: syz.1.12512 (pid 661) Use of int in maxseg socket option. [ 337.637490][ T661] Use struct sctp_assoc_value instead [ 337.746011][ T673] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 337.963656][ T699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12531'. [ 337.991182][ T703] program syz.7.12533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.002023][ T703] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 338.199592][ T731] hub 9-0:1.0: USB hub found [ 338.204467][ T731] hub 9-0:1.0: 8 ports detected [ 338.228399][ T734] 9pnet_fd: Insufficient options for proto=fd [ 338.802212][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 338.802228][ T29] audit: type=1400 audit(1110.516:18493): avc: denied { create } for pid=776 comm="syz.6.12567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.833852][ T29] audit: type=1400 audit(1110.547:18494): avc: denied { connect } for pid=776 comm="syz.6.12567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.853224][ T29] audit: type=1400 audit(1110.547:18495): avc: denied { getopt } for pid=776 comm="syz.6.12567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.933252][ T29] audit: type=1400 audit(1110.642:18496): avc: denied { create } for pid=782 comm="syz.7.12571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.973042][ T29] audit: type=1400 audit(1110.642:18497): avc: denied { write } for pid=782 comm="syz.7.12571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 339.038104][ T29] audit: type=1400 audit(1110.757:18498): avc: denied { ioctl } for pid=786 comm="syz.7.12573" path="socket:[111402]" dev="sockfs" ino=111402 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.096399][ T792] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=792 comm=syz.6.12575 [ 339.108887][ T792] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=792 comm=syz.6.12575 [ 339.139763][ T29] audit: type=1400 audit(1110.862:18499): avc: denied { create } for pid=798 comm="syz.2.12578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 339.160066][ T29] audit: type=1400 audit(1110.893:18500): avc: denied { connect } for pid=798 comm="syz.2.12578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 339.191885][ T29] audit: type=1400 audit(1110.925:18501): avc: denied { write } for pid=798 comm="syz.2.12578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 339.258478][ T803] vxlan0: left promiscuous mode [ 339.264998][T31728] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.273538][T31728] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.284108][T31728] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.292567][T31728] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.329254][T31728] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.337752][T31728] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.374288][T31728] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.382715][T31728] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.953672][ T29] audit: type=1400 audit(1111.712:18502): avc: denied { name_bind } for pid=831 comm="syz.6.12592" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 340.123972][ T851] 9pnet_fd: Insufficient options for proto=fd [ 340.225194][ T857] hub 9-0:1.0: USB hub found [ 340.234445][ T857] hub 9-0:1.0: 8 ports detected [ 340.337759][ T865] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 341.015442][ T897] netlink: 3 bytes leftover after parsing attributes in process `syz.7.12621'. [ 341.040584][ T897] batadv0: entered promiscuous mode [ 341.045803][ T897] batadv0: entered allmulticast mode [ 341.101157][ T899] SELinux: ebitmap: truncated map [ 341.113191][ T899] SELinux: failed to load policy [ 341.382531][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12629'. [ 341.391479][ T913] netlink: 312 bytes leftover after parsing attributes in process `syz.7.12629'. [ 341.400641][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12629'. [ 341.418860][ T925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12634'. [ 341.460876][ T925] vlan2: entered allmulticast mode [ 341.466022][ T925] bond0: entered allmulticast mode [ 341.489908][ T925] dummy0: entered allmulticast mode [ 341.717157][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.724685][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.732116][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.739641][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.747097][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.754489][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.761907][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.769348][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.776744][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.784129][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 341.809164][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v8.00 Device [syz1] on syz0 [ 341.836195][ T23] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.938705][ T975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12655'. [ 341.957768][ T975] IPVS: Error joining to the multicast group [ 342.002594][ T983] netlink: 256 bytes leftover after parsing attributes in process `gtp'. [ 342.234589][ T1026] netlink: 'syz.6.12661': attribute type 21 has an invalid length. [ 342.249652][ T1026] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12661'. [ 342.258847][ T1026] netlink: 'syz.6.12661': attribute type 1 has an invalid length. [ 342.639555][ T1082] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 342.776686][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12674'. [ 342.788957][ T1106] netlink: 'syz.1.12674': attribute type 1 has an invalid length. [ 342.796814][ T1106] netlink: 'syz.1.12674': attribute type 2 has an invalid length. [ 342.825223][ T1113] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12675'. [ 342.840948][ T1113] batadv2: entered promiscuous mode [ 342.846182][ T1113] batadv2: entered allmulticast mode [ 343.343408][ T1161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12682'. [ 343.735907][ T1179] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12690'. [ 343.854967][ T1183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12692'. [ 343.900104][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 343.900117][ T29] audit: type=1400 audit(1115.859:18601): avc: denied { create } for pid=1185 comm="syz.6.12694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 343.967096][ T29] audit: type=1400 audit(1115.891:18602): avc: denied { connect } for pid=1185 comm="syz.6.12694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 343.986432][ T29] audit: type=1400 audit(1115.891:18603): avc: denied { write } for pid=1185 comm="syz.6.12694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 344.022862][ T1194] netlink: 'syz.6.12696': attribute type 3 has an invalid length. [ 344.030703][ T1194] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12696'. [ 344.081846][ T29] audit: type=1400 audit(1115.933:18604): avc: denied { bind } for pid=1188 comm="syz.7.12695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.100891][ T29] audit: type=1400 audit(1115.933:18605): avc: denied { listen } for pid=1188 comm="syz.7.12695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.120104][ T29] audit: type=1400 audit(1115.933:18606): avc: denied { read } for pid=1188 comm="syz.7.12695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.139102][ T29] audit: type=1326 audit(1115.985:18607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="syz.1.12697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa565e75ba7 code=0x7ffc0000 [ 344.162044][ T29] audit: type=1326 audit(1115.985:18608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="syz.1.12697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa565e1add9 code=0x7ffc0000 [ 344.185006][ T29] audit: type=1326 audit(1115.985:18609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="syz.1.12697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa565e75ba7 code=0x7ffc0000 [ 344.207979][ T29] audit: type=1326 audit(1115.985:18610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="syz.1.12697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa565e1add9 code=0x7ffc0000 [ 344.355239][ T1212] netlink: 'syz.2.12705': attribute type 3 has an invalid length. [ 344.433238][ T1221] netlink: 'syz.1.12709': attribute type 1 has an invalid length. [ 344.441096][ T1221] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.12709'. [ 344.477999][ T1223] vhci_hcd: invalid port number 85 [ 344.483253][ T1223] vhci_hcd: default hub control req: 0501 v0005 i0055 l0 [ 344.532071][ T1227] SELinux: failed to load policy [ 344.874561][ T1294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12737'. [ 345.132822][ T1336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12756'. [ 345.206077][ T1350] SELinux: failed to load policy [ 345.262664][ T1361] netlink: '+}[@': attribute type 10 has an invalid length. [ 345.421965][ T1396] SELinux: failed to load policy [ 346.435326][ T1425] chnl_net:caif_netlink_parms(): no params data found [ 346.511448][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.518658][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.527007][ T1425] bridge_slave_0: entered allmulticast mode [ 346.537352][ T1425] bridge_slave_0: entered promiscuous mode [ 346.544244][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.551363][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.558647][ T1425] bridge_slave_1: entered allmulticast mode [ 346.565200][ T1425] bridge_slave_1: entered promiscuous mode [ 346.590412][ T1425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.611381][ T1425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.635362][ T1425] team0: Port device team_slave_0 added [ 346.642298][ T1425] team0: Port device team_slave_1 added [ 346.667605][ T1425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.674627][ T1425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.700576][ T1425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.712059][ T1425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.719056][ T1425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.745071][ T1425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.781466][ T1425] hsr_slave_0: entered promiscuous mode [ 346.787773][ T1425] hsr_slave_1: entered promiscuous mode [ 346.793881][ T1425] debugfs: 'hsr0' already exists in 'hsr' [ 346.799614][ T1425] Cannot create hsr debugfs directory [ 347.258752][ T1472] netlink: 'syz.2.12812': attribute type 1 has an invalid length. [ 347.269653][ T1425] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 347.301229][ T1425] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 347.316799][ T1425] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 347.343469][ T1425] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 347.435537][ T1425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.458147][ T1425] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.481798][T31733] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.488871][T31733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.538142][ T6918] bridge_slave_1: left allmulticast mode [ 347.543837][ T6918] bridge_slave_1: left promiscuous mode [ 347.549587][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.578792][ T6918] bridge_slave_0: left allmulticast mode [ 347.584465][ T6918] bridge_slave_0: left promiscuous mode [ 347.590140][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.804256][ T6918] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.850905][ T6918] bond_slave_0: left promiscuous mode [ 347.856353][ T6918] bond_slave_0: left allmulticast mode [ 347.882585][ T6918] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.902617][ T6918] bond_slave_1: left promiscuous mode [ 347.908191][ T6918] bond_slave_1: left allmulticast mode [ 347.955004][ T6918] $Hÿ (unregistering): Released all slaves [ 347.990490][ T1425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.000955][ T1425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.026239][ T6918] IPVS: stopping master sync thread 5094 ... [ 348.045811][T31733] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.052916][T31733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.132827][ T6918] dummy0: left promiscuous mode [ 348.140177][ T6918] hsr_slave_0: left promiscuous mode [ 348.149782][ T6918] hsr_slave_1: left promiscuous mode [ 348.159302][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.166861][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.179605][ T6918] veth1_macvtap: left promiscuous mode [ 348.197294][ T6918] veth0_macvtap: left promiscuous mode [ 348.202908][ T6918] veth1_vlan: left promiscuous mode [ 348.208232][ T6918] veth0_vlan: left promiscuous mode [ 348.391752][ T1425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.517808][ T1425] veth0_vlan: entered promiscuous mode [ 348.525266][ T1425] veth1_vlan: entered promiscuous mode [ 348.538411][ T1425] veth0_macvtap: entered promiscuous mode [ 348.545579][ T1425] veth1_macvtap: entered promiscuous mode [ 348.555911][ T1425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.566080][ T1425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.576078][T31733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.585352][T31733] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.594307][ T1002] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.602988][ T1002] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.731273][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 348.731287][ T29] audit: type=1400 audit(1120.930:18977): avc: denied { create } for pid=1586 comm="syz.3.12838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 348.775674][ T29] audit: type=1400 audit(1120.961:18978): avc: denied { write } for pid=1586 comm="syz.3.12838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 348.967487][ T1600] __nla_validate_parse: 3 callbacks suppressed [ 348.967502][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12843'. [ 348.982738][ T1600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12843'. [ 348.991809][ T1600] netlink: 'syz.3.12843': attribute type 20 has an invalid length. [ 349.053806][T31748] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.063514][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12843'. [ 349.072602][ T1600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12843'. [ 349.081707][ T1600] netlink: 'syz.3.12843': attribute type 20 has an invalid length. [ 349.104019][T31748] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.132264][T31748] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.141644][T31748] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.177206][ T29] audit: type=1326 audit(1121.402:18979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.7.12850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf3c365ba7 code=0x7ffc0000 [ 349.238058][ T29] audit: type=1326 audit(1121.402:18980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.7.12850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf3c30add9 code=0x7ffc0000 [ 349.261145][ T29] audit: type=1326 audit(1121.402:18981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.7.12850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf3c365ba7 code=0x7ffc0000 [ 349.284316][ T29] audit: type=1326 audit(1121.402:18982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.7.12850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf3c30add9 code=0x7ffc0000 [ 349.307569][ T29] audit: type=1326 audit(1121.402:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.7.12850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 349.330748][ T29] audit: type=1326 audit(1121.402:18984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.7.12850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 349.353855][ T29] audit: type=1326 audit(1121.402:18985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.7.12850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 349.377135][ T29] audit: type=1326 audit(1121.402:18986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.7.12850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 349.443575][ T1622] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12856'. [ 349.528975][ T1634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12862'. [ 349.631007][ T1648] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 349.668028][ T1643] SELinux: failed to load policy [ 349.714342][ T1662] netlink: 264 bytes leftover after parsing attributes in process `syz.2.12875'. [ 349.723601][ T1662] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12875'. [ 349.771059][ T1667] bond3: entered promiscuous mode [ 349.776250][ T1667] bond3: entered allmulticast mode [ 349.782356][ T1667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.793040][ T1667] bond3 (unregistering): Released all slaves [ 350.370136][ T6918] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.379935][ T6918] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.443503][ T6918] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.453302][ T6918] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.494892][ T1738] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 350.529141][ T6918] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.538966][ T6918] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.596818][ T6918] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.606677][ T6918] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.679949][ T1757] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12916'. [ 350.715735][ T1757] 0ªX¹¦À: renamed from caif0 [ 350.748635][ T1757] 0ªX¹¦À: entered allmulticast mode [ 350.753859][ T1757] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 350.980341][ T6918] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 350.994745][ T6918] dummy0: left allmulticast mode [ 351.010560][ T6918] bond0 (unregistering): Released all slaves [ 351.033707][ T1773] pimreg: entered allmulticast mode [ 351.065083][ T1783] pimreg: left allmulticast mode [ 351.078833][ T6918] tipc: Disabling bearer [ 351.083845][ T6918] tipc: Left network mode [ 351.140839][ T6918] veth1_vlan: left promiscuous mode [ 351.150924][ T6918] veth0_vlan: left promiscuous mode [ 351.401588][ T1739] chnl_net:caif_netlink_parms(): no params data found [ 351.478899][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.486017][ T1739] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.495806][ T1739] bridge_slave_0: entered allmulticast mode [ 351.503043][ T1739] bridge_slave_0: entered promiscuous mode [ 351.513305][ T1739] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.520443][ T1739] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.534090][ T1739] bridge_slave_1: entered allmulticast mode [ 351.547176][ T1739] bridge_slave_1: entered promiscuous mode [ 351.583219][ T1739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.609012][ T1739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.655531][ T1739] team0: Port device team_slave_0 added [ 351.669964][ T1739] team0: Port device team_slave_1 added [ 351.712037][ T1739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.719092][ T1739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.745001][ T1739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.756683][ T1739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.763623][ T1739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.789540][ T1739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.833644][ T1739] hsr_slave_0: entered promiscuous mode [ 351.839583][ T1739] hsr_slave_1: entered promiscuous mode [ 351.871210][ T1739] debugfs: 'hsr0' already exists in 'hsr' [ 351.876961][ T1739] Cannot create hsr debugfs directory [ 352.191399][ T1739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.202424][ T1970] vhci_hcd: invalid port number 96 [ 352.207652][ T1970] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 352.217146][ T1739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.230391][ T1739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.239324][ T1739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.290277][ T1739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.303541][ T1739] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.312878][T31735] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.319942][T31735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.333903][T31735] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.340995][T31735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.433447][ T2007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12943'. [ 352.465335][ T1739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.518261][ T2020] dvmrp0: entered allmulticast mode [ 352.584153][ T1739] veth0_vlan: entered promiscuous mode [ 352.599919][ T1739] veth1_vlan: entered promiscuous mode [ 352.634371][ T1739] veth0_macvtap: entered promiscuous mode [ 352.653038][ T1739] veth1_macvtap: entered promiscuous mode [ 352.675680][ T1739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.690668][ T1739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.699985][T31741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.718968][T31741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.735663][T31741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.745771][T31741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.842931][ T2048] syzkaller1: entered promiscuous mode [ 352.848410][ T2048] syzkaller1: entered allmulticast mode [ 352.849734][ T2052] loop0: detected capacity change from 0 to 512 [ 352.863981][ T2052] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 352.892338][ T2052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.928870][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.295793][ T2131] program syz.7.12989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.302411][ T2133] netlink: 'syz.2.12991': attribute type 1 has an invalid length. [ 353.312940][ T2133] netlink: 'syz.2.12991': attribute type 6 has an invalid length. [ 353.320803][ T2133] netlink: 'syz.2.12991': attribute type 3 has an invalid length. [ 353.414750][ T2151] 9pnet: p9_errstr2errno: server reported unknown error êW~uå½ÚZ²ù‰z&4‹ [ 353.494979][ T2161] loop0: detected capacity change from 0 to 1024 [ 353.502265][ T2161] EXT4-fs: Ignoring removed nobh option [ 353.521195][ T2161] EXT4-fs: Ignoring removed bh option [ 353.551421][ T2161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.578371][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 353.578385][ T29] audit: type=1400 audit(1126.021:19175): avc: denied { read } for pid=2160 comm="syz.0.13001" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.606326][ T29] audit: type=1400 audit(1126.021:19176): avc: denied { open } for pid=2160 comm="syz.0.13001" path="/11/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.630466][ T29] audit: type=1400 audit(1126.042:19177): avc: denied { map } for pid=2160 comm="syz.0.13001" path="/11/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.653131][ T29] audit: type=1400 audit(1126.042:19178): avc: denied { execute } for pid=2160 comm="syz.0.13001" path="/11/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.676592][ T29] audit: type=1400 audit(1126.084:19179): avc: denied { create } for pid=2179 comm="syz.2.13011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 353.695755][ T29] audit: type=1400 audit(1126.084:19180): avc: denied { write } for pid=2179 comm="syz.2.13011" path="socket:[116771]" dev="sockfs" ino=116771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 353.771001][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.829278][ T29] audit: type=1400 audit(1126.284:19181): avc: denied { create } for pid=2191 comm="syz.0.13015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 353.884981][ T29] audit: type=1326 audit(1126.315:19182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2189 comm="syz.8.13016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 353.908094][ T29] audit: type=1326 audit(1126.315:19183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2189 comm="syz.8.13016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 353.931190][ T29] audit: type=1400 audit(1126.315:19184): avc: denied { nlmsg_read } for pid=2193 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 354.113876][ T2227] vxcan0: tx address claim with different name [ 354.175951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.202005][ T2238] loop0: detected capacity change from 0 to 512 [ 354.209185][ T2241] __nla_validate_parse: 5 callbacks suppressed [ 354.209199][ T2241] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13035'. [ 354.227969][ T2234] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13035'. [ 354.243303][ T2238] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 354.279183][ T2238] EXT4-fs (loop0): mount failed [ 354.377201][ T2261] loop0: detected capacity change from 0 to 128 [ 354.386003][ T2261] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.416775][ T1739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.549990][ T2285] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.13053'. [ 354.561299][ T2278] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.13053'. [ 354.578728][ T2287] syzkaller1: entered promiscuous mode [ 354.584213][ T2287] syzkaller1: entered allmulticast mode [ 355.001287][ T2319] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13076'. [ 355.010406][ T2319] netlink: 212 bytes leftover after parsing attributes in process `syz.7.13076'. [ 355.056822][ T2327] wireguard0: entered promiscuous mode [ 355.062442][ T2327] wireguard0: entered allmulticast mode [ 355.138382][ T2343] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13080'. [ 355.262586][ T2370] netlink: 3 bytes leftover after parsing attributes in process `syz.7.13084'. [ 355.281300][ T2370] 0ªX¹¦À: renamed from caif0 [ 355.292924][ T2370] 0ªX¹¦À: entered allmulticast mode [ 355.298280][ T2370] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 355.799541][ T2452] loop0: detected capacity change from 0 to 512 [ 355.818791][ T2452] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 355.837186][ T2459] vhci_hcd: default hub control req: 6006 v0f00 i0001 l0 [ 355.853655][ T2452] EXT4-fs (loop0): mount failed [ 356.016286][ T2486] 9pnet_fd: Insufficient options for proto=fd [ 356.330259][ T2494] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 356.527462][ T2526] netlink: 'syz.3.13136': attribute type 10 has an invalid length. [ 356.571826][ T2526] team0: Port device dummy0 added [ 356.586428][ T2528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2528 comm=syz.2.13138 [ 356.599009][ T2528] netlink: 'syz.2.13138': attribute type 2 has an invalid length. [ 356.607030][ T2528] netlink: 'syz.2.13138': attribute type 1 has an invalid length. [ 356.615106][ T2528] netlink: 'syz.2.13138': attribute type 8 has an invalid length. [ 356.622893][ T2528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13138'. [ 356.780410][ T2546] netlink: 'syz.0.13147': attribute type 4 has an invalid length. [ 356.850016][ T2556] hsr_slave_0 (unregistering): left promiscuous mode [ 356.923843][ T2563] 9pnet_fd: Insufficient options for proto=fd [ 357.190968][ T2612] wireguard0: entered promiscuous mode [ 357.196492][ T2612] wireguard0: entered allmulticast mode [ 357.644737][ T2654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2654 comm=syz.7.13191 [ 357.657316][ T2654] netlink: 'syz.7.13191': attribute type 2 has an invalid length. [ 357.665147][ T2654] netlink: 'syz.7.13191': attribute type 1 has an invalid length. [ 357.767471][ T1739] block device autoloading is deprecated and will be removed. [ 357.790683][ T2669] wireguard0: entered promiscuous mode [ 357.796270][ T2669] wireguard0: entered allmulticast mode [ 357.812764][ T2677] hsr_slave_0 (unregistering): left promiscuous mode [ 357.873409][ T2686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.881990][ T2686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.037943][ T2699] loop0: detected capacity change from 0 to 512 [ 358.054235][ T2699] EXT4-fs (loop0): orphan cleanup on readonly fs [ 358.061208][ T2699] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13215: bg 0: block 248: padding at end of block bitmap is not set [ 358.091046][ T2699] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.13215: Failed to acquire dquot type 1 [ 358.113342][ T2699] EXT4-fs (loop0): 1 truncate cleaned up [ 358.120369][ T2699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.147227][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.197483][ T2714] loop0: detected capacity change from 0 to 1024 [ 358.206252][ T2714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.231427][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.334530][ T2725] loop0: detected capacity change from 0 to 8192 [ 358.349055][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 358.349067][ T29] audit: type=1400 audit(1131.039:19337): avc: denied { mount } for pid=2723 comm="syz.0.13225" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 358.406399][ T29] audit: type=1400 audit(1131.092:19338): avc: denied { unmount } for pid=1739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 358.530170][ T2747] loop0: detected capacity change from 0 to 1024 [ 358.537028][ T2747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.559299][ T2747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.591286][ T29] audit: type=1400 audit(1131.281:19339): avc: denied { write } for pid=2746 comm="syz.0.13236" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.686152][ T29] audit: type=1326 audit(1131.386:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.3.13240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 358.709280][ T29] audit: type=1326 audit(1131.386:19341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.3.13240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 358.740828][ T29] audit: type=1326 audit(1131.438:19342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.3.13240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 358.763948][ T29] audit: type=1326 audit(1131.438:19343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.3.13240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 358.787021][ T29] audit: type=1326 audit(1131.438:19344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.3.13240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 358.810378][ T29] audit: type=1326 audit(1131.438:19345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.3.13240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 358.833660][ T29] audit: type=1326 audit(1131.438:19346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.3.13240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 358.858194][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.884654][ T2768] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 358.915548][ T2773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2773 comm=syz.3.13245 [ 358.928228][ T2773] validate_nla: 2 callbacks suppressed [ 358.928241][ T2773] netlink: 'syz.3.13245': attribute type 2 has an invalid length. [ 358.941569][ T2773] netlink: 'syz.3.13245': attribute type 1 has an invalid length. [ 358.949400][ T2773] netlink: 'syz.3.13245': attribute type 8 has an invalid length. [ 358.965197][ T2776] loop0: detected capacity change from 0 to 256 [ 358.977081][ T2776] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.007712][ T2776] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 359.016341][ T2776] FAT-fs (loop0): Filesystem has been set read-only [ 359.111328][ T2794] __nla_validate_parse: 12 callbacks suppressed [ 359.111345][ T2794] netlink: 7 bytes leftover after parsing attributes in process `syz.3.13257'. [ 359.146730][ T2794] netlink: 7 bytes leftover after parsing attributes in process `syz.3.13257'. [ 359.187619][ T2806] sd 0:0:1:0: device reset [ 359.220867][ T2813] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 359.234580][ T2813] SELinux: failed to load policy [ 359.257032][ T2819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.266838][ T2819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.293504][ T2827] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.13272'. [ 359.293666][ T2825] rdma_rxe: rxe_newlink: failed to add bond0 [ 359.379826][ T2840] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 359.778549][ T2857] netlink: 76 bytes leftover after parsing attributes in process `syz.8.13287'. [ 359.779085][ T2858] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.13286'. [ 359.821133][ T2863] rdma_rxe: rxe_newlink: failed to add bond0 [ 359.993836][ T2888] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13298'. [ 360.002922][ T2888] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13298'. [ 360.052672][ T2896] rdma_rxe: rxe_newlink: failed to add bond0 [ 360.114189][ T2902] hub 2-0:1.0: USB hub found [ 360.114595][ T2904] bond4: entered promiscuous mode [ 360.123983][ T2904] bond4: entered allmulticast mode [ 360.124663][ T2902] hub 2-0:1.0: 8 ports detected [ 360.145683][ T2904] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.155444][ T2912] netlink: 92 bytes leftover after parsing attributes in process `syz.8.13310'. [ 360.179267][ T2904] bond4 (unregistering): Released all slaves [ 360.192821][ T2912] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13310'. [ 360.240287][ T2921] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 360.408116][ T2942] SELinux: failed to load policy [ 360.455002][ T2960] loop0: detected capacity change from 0 to 764 [ 360.707245][ T2997] loop0: detected capacity change from 0 to 512 [ 360.723357][ T2997] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 360.759763][ T2997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.800443][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.806677][ T3011] geneve2: entered promiscuous mode [ 360.814856][ T3011] geneve2: entered allmulticast mode [ 361.117046][ T3069] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 361.182089][ T3082] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 361.448018][ T3136] loop0: detected capacity change from 0 to 512 [ 361.476605][ T3136] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 361.495362][ T3136] EXT4-fs (loop0): mount failed [ 362.710424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.064070][ T3316] bond1: entered promiscuous mode [ 363.069180][ T3316] bond1: entered allmulticast mode [ 363.091163][ T3316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.106428][ T3325] netlink: 'syz.3.13413': attribute type 10 has an invalid length. [ 363.116441][ T3316] bond1 (unregistering): Released all slaves [ 363.125658][ T3325] dummy0: entered promiscuous mode [ 363.138078][ T3325] team0: Port device dummy0 removed [ 363.151820][ T3325] bridge0: port 3(dummy0) entered blocking state [ 363.158229][ T3325] bridge0: port 3(dummy0) entered disabled state [ 363.167372][ T3325] dummy0: entered allmulticast mode [ 363.249115][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 363.249129][ T29] audit: type=1326 audit(1136.173:19532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.278487][ T29] audit: type=1326 audit(1136.173:19533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.337156][ T29] audit: type=1326 audit(1136.173:19534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.360274][ T29] audit: type=1326 audit(1136.173:19535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.383314][ T29] audit: type=1326 audit(1136.236:19536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.406383][ T29] audit: type=1326 audit(1136.236:19537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.429420][ T29] audit: type=1326 audit(1136.236:19538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.452486][ T29] audit: type=1326 audit(1136.236:19539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.475594][ T29] audit: type=1326 audit(1136.236:19540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.498684][ T29] audit: type=1326 audit(1136.236:19541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3336 comm="syz.0.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 363.505714][ T3344] 9pnet_fd: Insufficient options for proto=fd [ 363.902566][ T3391] loop0: detected capacity change from 0 to 1024 [ 363.919346][ T3391] EXT4-fs: Ignoring removed orlov option [ 363.950840][ T3391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.970339][ T3399] __nla_validate_parse: 13 callbacks suppressed [ 363.970352][ T3399] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13445'. [ 363.985712][ T3399] netlink: 108 bytes leftover after parsing attributes in process `syz.7.13445'. [ 363.995095][ T3399] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13445'. [ 364.004240][ T3399] netlink: 108 bytes leftover after parsing attributes in process `syz.7.13445'. [ 364.013473][ T3399] netlink: 84 bytes leftover after parsing attributes in process `syz.7.13445'. [ 364.080576][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.107600][ T3409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.124932][ T3409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.254010][ T3429] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13457'. [ 364.263149][ T3429] netlink: 108 bytes leftover after parsing attributes in process `syz.8.13457'. [ 364.286775][ T3429] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13457'. [ 364.296208][ T3429] netlink: 108 bytes leftover after parsing attributes in process `syz.8.13457'. [ 364.305383][ T3429] netlink: 84 bytes leftover after parsing attributes in process `syz.8.13457'. [ 364.449695][ T3453] loop0: detected capacity change from 0 to 1024 [ 364.478837][ T3453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.530937][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.789247][ T3479] loop0: detected capacity change from 0 to 32768 [ 364.829248][ T3479] loop0: p1 p3 < > [ 364.932344][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.950590][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.086833][ T3535] loop0: detected capacity change from 0 to 1024 [ 365.094577][ T3535] EXT4-fs: inline encryption not supported [ 365.101764][ T3535] EXT4-fs: Ignoring removed bh option [ 365.113398][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.159052][ T3538] Falling back ldisc for ttyS3. [ 365.168690][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.188147][ T3547] netlink: 'syz.7.13512': attribute type 10 has an invalid length. [ 365.196170][ T3547] dummy0: entered promiscuous mode [ 365.215857][ T3547] bond0: (slave dummy0): Releasing backup interface [ 365.226732][ T3547] bridge0: port 1(dummy0) entered blocking state [ 365.233105][ T3547] bridge0: port 1(dummy0) entered disabled state [ 365.247695][ T3547] dummy0: entered allmulticast mode [ 365.274847][ T3560] loop0: detected capacity change from 0 to 128 [ 365.284378][ T3560] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.298943][ T3560] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.13517: bg 0: bad block bitmap checksum [ 365.322089][ T1739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.725762][ T3591] netlink: 'syz.2.13531': attribute type 10 has an invalid length. [ 365.741105][ T3591] dummy0: entered promiscuous mode [ 365.746861][ T3591] bridge0: port 1(dummy0) entered blocking state [ 365.753569][ T3591] bridge0: port 1(dummy0) entered disabled state [ 365.762213][ T3591] dummy0: entered allmulticast mode [ 365.768496][ T3591] bridge0: port 1(dummy0) entered blocking state [ 365.774944][ T3591] bridge0: port 1(dummy0) entered forwarding state [ 366.032535][ T3616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=256 sclass=netlink_audit_socket pid=3616 comm=syz.7.13544 [ 366.101026][ T3625] netlink: 'syz.0.13545': attribute type 10 has an invalid length. [ 366.110228][ T3625] dummy0: entered promiscuous mode [ 366.116940][ T3625] bridge0: port 3(dummy0) entered blocking state [ 366.123592][ T3625] bridge0: port 3(dummy0) entered disabled state [ 366.130230][ T3625] dummy0: entered allmulticast mode [ 366.136316][ T3625] bridge0: port 3(dummy0) entered blocking state [ 366.142717][ T3625] bridge0: port 3(dummy0) entered forwarding state [ 366.151479][ T3624] IPVS: Error joining to the multicast group [ 366.175456][ T3629] loop0: detected capacity change from 0 to 128 [ 366.187573][ T3629] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.235787][ T1739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.269234][ T3638] loop0: detected capacity change from 0 to 128 [ 366.286648][ T3638] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.310812][ T3638] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.325437][ T3638] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.359330][ T1739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.484934][ T3577] syz.8.13525 (3577) used greatest stack depth: 7536 bytes left [ 366.778083][ T3680] Falling back ldisc for ttyS3. [ 366.812513][ T1739] block device autoloading is deprecated and will be removed. [ 366.969163][ T3700] netlink: 'syz.8.13579': attribute type 22 has an invalid length. [ 367.002027][T31701] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.007036][ T3700] netlink: 'syz.8.13579': attribute type 22 has an invalid length. [ 367.030312][T31701] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.060151][T31701] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.080520][T31701] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.217663][ T3716] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 367.232872][ T3716] SELinux: failed to load policy [ 367.317730][ T3726] atomic_op ffff888119f0ad28 conn xmit_atomic 0000000000000000 [ 367.574747][ T23] kernel read not supported for file /vga_arbiter (pid: 23 comm: kworker/1:0) [ 367.593899][ T3753] netlink: 'syz.0.13602': attribute type 3 has an invalid length. [ 367.685777][ T3765] loop0: detected capacity change from 0 to 512 [ 367.722426][ T3765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.750573][ T3772] netlink: 'syz.3.13609': attribute type 2 has an invalid length. [ 367.841377][ T3777] hsr_slave_0: left promiscuous mode [ 367.858508][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.858705][ T3777] hsr_slave_1: left promiscuous mode [ 368.080740][ T3803] netlink: 'syz.8.13619': attribute type 29 has an invalid length. [ 368.101809][ T3803] netlink: 'syz.8.13619': attribute type 29 has an invalid length. [ 368.307575][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 368.307591][ T29] audit: type=1326 audit(1654.484:19659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.359505][ T29] audit: type=1326 audit(1654.484:19660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.382592][ T29] audit: type=1326 audit(1654.526:19661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.405739][ T29] audit: type=1326 audit(1654.526:19662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.428889][ T29] audit: type=1326 audit(1654.526:19663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.452070][ T29] audit: type=1326 audit(1654.526:19664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.475238][ T29] audit: type=1326 audit(1654.526:19665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.498352][ T29] audit: type=1326 audit(1654.526:19666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.521566][ T29] audit: type=1326 audit(1654.526:19667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.544600][ T29] audit: type=1326 audit(1654.526:19668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.7.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 368.801601][ T3871] SELinux: failed to load policy [ 369.988574][ T4071] __nla_validate_parse: 12 callbacks suppressed [ 369.988589][ T4071] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13690'. [ 370.005772][ T3414] kernel read not supported for file /vga_arbiter (pid: 3414 comm: kworker/1:5) [ 370.031888][ T4071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.063090][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.072090][ T4071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.081194][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.102658][ T4071] bond0 (unregistering): Released all slaves [ 370.171928][ T4103] netlink: 'syz.3.13701': attribute type 1 has an invalid length. [ 370.537110][ T4162] SELinux: ebitmap: truncated map [ 370.542503][ T4163] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 370.543655][ T4162] SELinux: failed to load policy [ 370.549911][ T4163] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 370.604832][ T4172] netlink: 'syz.7.13730': attribute type 3 has an invalid length. [ 370.640677][ T4177] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 370.640677][ T4177] program syz.7.13732 not setting count and/or reply_len properly [ 370.794835][ T4204] netlink: 'syz.0.13744': attribute type 33 has an invalid length. [ 370.802877][ T4204] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13744'. [ 370.814798][ T4204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13744'. [ 370.830349][ T4204] bridge0: port 3(dummy0) entered disabled state [ 370.860472][ T4204] dummy0 (unregistering): left allmulticast mode [ 370.870492][ T4204] bridge0: port 3(dummy0) entered disabled state [ 370.879059][ T4206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13745'. [ 370.888198][ T4206] netem: change failed [ 370.999112][ T4229] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13756'. [ 371.523646][ T4262] bridge_slave_0: left allmulticast mode [ 371.529308][ T4262] bridge_slave_0: left promiscuous mode [ 371.535041][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.561655][ T4262] bridge_slave_1: left allmulticast mode [ 371.567333][ T4262] bridge_slave_1: left promiscuous mode [ 371.572975][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.601114][ T4262] bond0: (slave bond_slave_0): Releasing backup interface [ 371.620859][ T4262] bond0: (slave bond_slave_1): Releasing backup interface [ 371.645952][ T4262] team0: Port device team_slave_0 removed [ 371.663343][ T4262] team0: Port device team_slave_1 removed [ 371.675656][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.683041][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.705166][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.712561][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.831806][ T4265] SELinux: failed to load policy [ 372.411452][ T4324] serio: Serial port ptm0 [ 372.663847][ T4338] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 372.765407][ T4345] vlan0: entered allmulticast mode [ 372.770709][ T4345] bridge_slave_0: entered allmulticast mode [ 372.809689][ T4347] 0ªX¹¦À: left allmulticast mode [ 372.996520][ T4361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13805'. [ 373.005716][ T4361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13805'. [ 373.036794][ T4363] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 373.391277][ T4402] netlink: 'syz.7.13823': attribute type 33 has an invalid length. [ 373.399291][ T4402] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13823'. [ 373.427737][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13823'. [ 373.428915][ T4404] serio: Serial port ttyS3 [ 373.447056][ T4402] dummy0 (unregistering): left allmulticast mode [ 373.453393][ T4402] dummy0 (unregistering): left promiscuous mode [ 373.459691][ T4402] bridge0: port 1(dummy0) entered disabled state [ 373.491730][ T4406] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13825'. [ 373.547713][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 373.547726][ T29] audit: type=1400 audit(1659.985:20020): avc: denied { read write } for pid=4411 comm="syz.7.13828" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 373.577069][ T29] audit: type=1400 audit(1659.985:20021): avc: denied { open } for pid=4411 comm="syz.7.13828" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 373.609558][ T10] hid_parser_main: 19 callbacks suppressed [ 373.609575][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.623002][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.630533][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.638078][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.645468][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.652960][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.660392][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.667834][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.675300][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.682728][ T10] hid-generic 0000:0000:0008.001B: unknown main item tag 0x0 [ 373.717200][ T29] audit: type=1326 audit(1660.090:20022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.13832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 373.740331][ T29] audit: type=1326 audit(1660.090:20023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.13832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 373.763384][ T29] audit: type=1326 audit(1660.090:20024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.13832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 373.786373][ T29] audit: type=1326 audit(1660.090:20025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.13832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 373.809473][ T29] audit: type=1326 audit(1660.090:20026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.13832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5bf0ebe9 code=0x7ffc0000 [ 373.832812][ T10] hid-generic 0000:0000:0008.001B: hidraw0: HID vc.87 Device [syz0] on syz1 [ 373.916680][ T29] audit: type=1326 audit(1660.373:20027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.13849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 373.939820][ T29] audit: type=1326 audit(1660.373:20028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.13849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 373.963129][ T29] audit: type=1326 audit(1660.373:20029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.2.13849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f87aca6ebe9 code=0x7ffc0000 [ 374.152962][ T4440] netlink: 'syz.2.13840': attribute type 33 has an invalid length. [ 374.163970][ T4440] bridge0: port 1(dummy0) entered disabled state [ 374.171737][ T4440] dummy0 (unregistering): left allmulticast mode [ 374.178133][ T4440] bridge0: port 1(dummy0) entered disabled state [ 374.310403][ T4460] ALSA: seq fatal error: cannot create timer (-19) [ 374.537301][ T4471] netlink: 'syz.3.13854': attribute type 33 has an invalid length. [ 374.547261][ T4471] dummy0 (unregistering): left allmulticast mode [ 374.553711][ T4471] bridge0: port 3(dummy0) entered disabled state [ 374.605976][ T4479] loop0: detected capacity change from 0 to 164 [ 374.672926][ T4484] loop0: detected capacity change from 0 to 4096 [ 374.684130][ T4484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.705292][ T4484] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.13861: corrupted inode contents [ 374.750178][ T4484] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.13861: mark_inode_dirty error [ 374.784430][ T4484] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.13861: corrupted inode contents [ 374.816332][ T4484] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.13861: mark_inode_dirty error [ 374.829393][ T4484] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.13861: corrupted inode contents [ 374.846038][ T4484] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.13861: mark_inode_dirty error [ 374.857565][ T4500] wireguard0: entered promiscuous mode [ 374.863037][ T4500] wireguard0: entered allmulticast mode [ 374.869476][ T4484] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.13861: corrupted inode contents [ 374.906476][ T4484] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.13861: mark_inode_dirty error [ 374.933023][ T4484] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 374.943301][ T4496] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.13861: corrupted inode contents [ 374.999721][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.162276][ T4532] netlink: 'syz.0.13883': attribute type 13 has an invalid length. [ 375.189542][ T4532] gretap0: refused to change device tx_queue_len [ 375.206927][ T4532] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 375.245455][ T4543] __nla_validate_parse: 5 callbacks suppressed [ 375.245469][ T4543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13887'. [ 375.313994][ T4549] loop0: detected capacity change from 0 to 128 [ 375.551204][ T4565] wireguard0: entered promiscuous mode [ 375.556720][ T4565] wireguard0: entered allmulticast mode [ 375.654574][ T4581] netlink: 500 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 376.015466][ T4621] 0ªX¹¦À: left allmulticast mode [ 376.084839][ T4621] veth0_vlan: left allmulticast mode [ 376.118168][ T4621] veth3: left promiscuous mode [ 376.130879][ T4621] wireguard0: left promiscuous mode [ 376.136159][ T4621] wireguard0: left allmulticast mode [ 376.145271][ T4633] pim6reg: entered allmulticast mode [ 376.161986][ T4638] pim6reg: left allmulticast mode [ 376.175913][T31701] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.184474][T31701] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.199348][T31701] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.207774][T31701] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.216628][T31701] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.225207][T31701] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.238855][T31701] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.247306][T31701] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.567569][ T4710] netlink: 'syz.2.13963': attribute type 21 has an invalid length. [ 376.575786][ T4710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13963'. [ 376.579110][ T4712] program syz.0.13964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.653259][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13969'. [ 376.662322][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13969'. [ 376.671641][ T4725] netlink: 'syz.0.13966': attribute type 16 has an invalid length. [ 376.679617][ T4725] netlink: 'syz.0.13966': attribute type 17 has an invalid length. [ 376.845155][ T4749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4749 comm=syz.0.13981 [ 376.857863][ T4749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4749 comm=syz.0.13981 [ 376.881056][ T4752] netlink: '+}[@': attribute type 1 has an invalid length. [ 376.929296][ T4762] netlink: 'syz.0.13987': attribute type 10 has an invalid length. [ 376.937291][ T4762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13987'. [ 376.974432][ T4771] sd 0:0:1:0: device reset [ 376.984170][ T4773] siw: device registration error -23 [ 377.115387][ T4795] IPv6: Can't replace route, no match found [ 377.160690][ T4805] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14008'. [ 377.170039][ T4805] hsr_slave_1: left promiscuous mode [ 377.393081][ T4839] dummy0: entered allmulticast mode [ 377.398741][ T4839] dummy0: left allmulticast mode [ 377.484269][ T4855] loop0: detected capacity change from 0 to 512 [ 377.492826][ T4855] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 377.501251][ T4855] EXT4-fs (loop0): orphan cleanup on readonly fs [ 377.508287][ T4855] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #15: comm syz.0.14032: iget: bad i_size value: 360287970189639690 [ 377.521679][ T4855] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.14032: Bad quota inode: 15, type: 2 [ 377.533979][ T4855] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 377.549184][ T4855] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 377.556538][ T4855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 377.570432][ T4855] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 377.580098][ T4855] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 377.598118][ T4855] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #15: comm syz.0.14032: iget: bad i_size value: 360287970189639690 [ 377.612358][ T4855] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.14032: Bad quota inode: 15, type: 2 [ 377.624212][ T4855] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 377.652657][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.748539][ T4871] SELinux: failed to load policy [ 377.882572][ T4891] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14047'. [ 377.912002][ T4891] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14047'. [ 378.260883][ T4945] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14073'. [ 378.454091][ T4960] bond2: entered promiscuous mode [ 378.459171][ T4960] bond2: entered allmulticast mode [ 378.478508][ T4960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.501030][ T4960] bond2 (unregistering): Released all slaves [ 378.531188][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 378.531204][ T29] audit: type=1326 audit(1665.251:20237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.14084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f5bf0ebe9 code=0x0 [ 378.569223][ T29] audit: type=1326 audit(1665.283:20238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.7.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 378.592307][ T29] audit: type=1326 audit(1665.283:20239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.7.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 378.615415][ T29] audit: type=1326 audit(1665.283:20240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.7.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 378.638467][ T29] audit: type=1326 audit(1665.283:20241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.7.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 378.661609][ T29] audit: type=1326 audit(1665.283:20242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.7.14086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 378.707273][ T4984] IPVS: stopping master sync thread 28934 ... [ 378.761026][ T4985] SELinux: ebitmap: truncated map [ 378.782350][ T4985] SELinux: failed to load policy [ 378.838747][ T29] audit: type=1400 audit(1665.584:20243): avc: denied { write } for pid=5004 comm="syz.2.14096" name="file0" dev="tmpfs" ino=6265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.860946][ T29] audit: type=1400 audit(1665.584:20244): avc: denied { open } for pid=5004 comm="syz.2.14096" path="/1216/file0" dev="tmpfs" ino=6265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.885210][ T5005] block device autoloading is deprecated and will be removed. [ 378.893946][ T29] audit: type=1400 audit(1665.648:20245): avc: denied { ioctl } for pid=5004 comm="syz.2.14096" path="/1216/file0" dev="tmpfs" ino=6265 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.933920][ T29] audit: type=1400 audit(1665.680:20246): avc: denied { mount } for pid=5008 comm="syz.7.14098" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 379.008502][ T5014] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 379.126538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.441663][ T5047] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 379.561696][ T5057] netlink: 'syz.7.14120': attribute type 3 has an invalid length. [ 379.569815][ T5057] netlink: 'syz.7.14120': attribute type 3 has an invalid length. [ 379.595065][ T5061] pim6reg1: entered promiscuous mode [ 379.600394][ T5061] pim6reg1: entered allmulticast mode [ 379.799594][ T1739] block device autoloading is deprecated and will be removed. [ 379.860889][ T5109] loop0: detected capacity change from 0 to 512 [ 379.870146][ T5109] EXT4-fs (loop0): orphan cleanup on readonly fs [ 379.876864][ T5109] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.14145: Failed to acquire dquot type 1 [ 379.888943][ T5109] EXT4-fs (loop0): 1 truncate cleaned up [ 379.896255][ T5109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.912836][ T5109] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 379.922756][ T5109] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8 [ 379.966134][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.072099][ T5136] loop0: detected capacity change from 0 to 1024 [ 380.080298][ T5136] EXT4-fs: Ignoring removed nobh option [ 380.085928][ T5136] EXT4-fs: inline encryption not supported [ 380.126934][ T5136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.166346][ T5150] netlink: 'syz.8.14163': attribute type 21 has an invalid length. [ 380.203098][ T5150] __nla_validate_parse: 2 callbacks suppressed [ 380.203113][ T5150] netlink: 156 bytes leftover after parsing attributes in process `syz.8.14163'. [ 380.268534][ T5136] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.14150: Allocating blocks 497-513 which overlap fs metadata [ 380.320772][ T5136] EXT4-fs (loop0): pa ffff888107294d20: logic 256, phys. 385, len 8 [ 380.328874][ T5136] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 380.341456][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14168'. [ 380.420448][ T5165] netlink: 'syz.7.14170': attribute type 6 has an invalid length. [ 380.437903][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.639128][ T5184] wireguard0: entered promiscuous mode [ 380.644617][ T5184] wireguard0: entered allmulticast mode [ 380.797505][ T5206] pim6reg: entered allmulticast mode [ 380.823647][ T5206] pim6reg: left allmulticast mode [ 380.999444][ T5235] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 380.999444][ T5235] program syz.3.14213 not setting count and/or reply_len properly [ 381.138619][ T5264] netlink: 'syz.3.14217': attribute type 13 has an invalid length. [ 381.159023][ T5264] gretap0: refused to change device tx_queue_len [ 381.165805][ T5264] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 381.187125][ T5272] : renamed from bond0 [ 381.470913][ T5324] netlink: 'syz.8.14242': attribute type 33 has an invalid length. [ 381.478865][ T5324] netlink: 152 bytes leftover after parsing attributes in process `syz.8.14242'. [ 381.490089][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14242'. [ 381.555500][ T5329] bond1: entered promiscuous mode [ 381.560571][ T5329] bond1: entered allmulticast mode [ 381.568731][ T5329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.597715][ T5329] bond1 (unregistering): Released all slaves [ 382.157499][ T5368] netlink: 14 bytes leftover after parsing attributes in process `syz.7.14262'. [ 382.176909][ T5368] hsr_slave_0: left promiscuous mode [ 382.184459][ T5368] hsr_slave_1: left promiscuous mode [ 382.305869][ T5384] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14271'. [ 382.328859][ T5389] netlink: 'syz.2.14272': attribute type 1 has an invalid length. [ 382.356874][ T5389] bond2: entered promiscuous mode [ 382.363785][ T5394] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 382.378752][ T5389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.403561][ T5395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.423331][ T5395] bond2: (slave batadv0): making interface the new active one [ 382.430913][ T5395] batadv0: entered promiscuous mode [ 382.450300][ T5395] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 382.688841][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14287'. [ 382.740711][ T5430] netlink: 'syz.7.14289': attribute type 21 has an invalid length. [ 382.751119][ T5430] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14289'. [ 382.989087][ T1739] block device autoloading is deprecated and will be removed. [ 383.051666][ T5464] serio: Serial port ttyS3 [ 383.135424][ T5481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14313'. [ 383.259790][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 383.259804][ T29] audit: type=1326 audit(2000000001.158:20501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.289671][ T29] audit: type=1326 audit(2000000001.158:20502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.313285][ T29] audit: type=1326 audit(2000000001.158:20503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.337082][ T29] audit: type=1326 audit(2000000001.158:20504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.363968][ T29] audit: type=1326 audit(2000000001.158:20505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.388244][ T29] audit: type=1326 audit(2000000001.158:20506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.411813][ T29] audit: type=1326 audit(2000000001.158:20507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.435319][ T29] audit: type=1326 audit(2000000001.158:20508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.459015][ T29] audit: type=1326 audit(2000000001.158:20509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.482561][ T29] audit: type=1326 audit(2000000001.158:20510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.14314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52162febe9 code=0x7ffc0000 [ 383.520807][ T5492] netlink: 'syz.3.14316': attribute type 3 has an invalid length. [ 383.568640][ T1739] block device autoloading is deprecated and will be removed. [ 383.663168][ T5510] siw: device registration error -23 [ 383.688860][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14327'. [ 384.286353][ T5569] SELinux: ebitmap: truncated map [ 384.296864][ T5569] SELinux: failed to load policy [ 384.467251][ T5580] SELinux: failed to load policy [ 384.981607][ T3405] hid_parser_main: 34 callbacks suppressed [ 384.981619][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 384.994941][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.002422][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.009964][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.017387][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.024812][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.032221][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.039688][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.047052][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.054489][ T3405] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 385.062222][ T3405] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 385.462613][ T5696] IPv6: Can't replace route, no match found [ 385.486404][ T5698] netlink: 'syz.8.14409': attribute type 1 has an invalid length. [ 385.583753][ T5710] vxcan3: entered promiscuous mode [ 385.589104][ T5710] vxcan3: entered allmulticast mode [ 385.614252][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.632238][ T5710] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 385.653530][ T5710] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 385.677007][ T5724] IPv4: Oversized IP packet from 127.202.26.0 [ 385.735720][ T5731] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 385.787181][ T5741] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 385.798122][ T5738] IPVS: stopping master sync thread 5741 ... [ 385.840425][ T5745] __nla_validate_parse: 4 callbacks suppressed [ 385.840440][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14431'. [ 385.938482][ T5761] loop0: detected capacity change from 0 to 164 [ 385.979056][ T5761] bio_check_eod: 102 callbacks suppressed [ 385.979106][ T5761] syz.0.14438: attempt to access beyond end of device [ 385.979106][ T5761] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 386.004848][ T5761] syz.0.14438: attempt to access beyond end of device [ 386.004848][ T5761] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 386.056191][ T5773] netlink: 'syz.2.14445': attribute type 1 has an invalid length. [ 386.106030][ T5773] bond3: entered promiscuous mode [ 386.132486][ T5773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.166446][ T5790] netlink: 76 bytes leftover after parsing attributes in process `syz.7.14452'. [ 386.176126][ T5781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.184728][ T5781] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 386.195101][ T5781] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 386.207551][ T5781] bond3: (slave ip6gre2): making interface the new active one [ 386.215175][ T5781] ip6gre2: entered promiscuous mode [ 386.222536][ T5781] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 386.271963][ T5800] netlink: 7 bytes leftover after parsing attributes in process `syz.8.14457'. [ 386.303151][ T5800] netlink: 7 bytes leftover after parsing attributes in process `syz.8.14457'. [ 386.412989][ T5823] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 386.444216][ T5831] netlink: 'syz.0.14471': attribute type 1 has an invalid length. [ 387.223584][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14499'. [ 387.232742][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14499'. [ 387.241832][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14499'. [ 387.298404][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14499'. [ 387.337828][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14505'. [ 387.347927][ T5918] IPVS: Error connecting to the multicast addr [ 387.798225][ T5959] netlink: 'syz.8.14525': attribute type 27 has an invalid length. [ 387.824391][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.831567][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.863956][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.873397][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.912325][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.921465][ T5960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.936929][T31729] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.945945][T31729] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.957052][T31729] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.966036][T31729] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.975430][T31729] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.984342][T31729] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.993819][T31729] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.002801][T31729] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.008656][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14526'. [ 388.044515][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 388.044545][ T29] audit: type=1400 audit(2000000006.287:20820): avc: denied { connect } for pid=5963 comm="syz.8.14527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 388.145646][ T29] audit: type=1326 audit(2000000006.405:20821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.169279][ T29] audit: type=1326 audit(2000000006.405:20822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.220565][ T29] audit: type=1326 audit(2000000006.458:20823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.244263][ T29] audit: type=1326 audit(2000000006.458:20824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.267861][ T29] audit: type=1326 audit(2000000006.458:20825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.291446][ T29] audit: type=1326 audit(2000000006.458:20826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.315023][ T29] audit: type=1326 audit(2000000006.458:20827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.338588][ T29] audit: type=1326 audit(2000000006.458:20828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.362208][ T29] audit: type=1326 audit(2000000006.458:20829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.7.14530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3c36ebe9 code=0x7ffc0000 [ 388.619339][ T6012] netlink: 'syz.2.14547': attribute type 10 has an invalid length. [ 388.933037][ T6035] netlink: 'syz.7.14559': attribute type 13 has an invalid length. [ 388.941048][ T6035] netlink: 'syz.7.14559': attribute type 17 has an invalid length. [ 388.969576][ T6035] 8021q: adding VLAN 0 to HW filter on device  [ 388.977896][ T6035] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 389.395526][ T6062] SELinux: failed to load policy [ 389.406917][ T6061] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.414292][ T6061] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 390.000793][ T6097] can0: slcan on ttyS3. [ 390.029333][ T6100] openvswitch: netlink: Message has 6 unknown bytes. [ 390.036205][ T6096] can0 (unregistered): slcan off ttyS3. [ 390.057451][ T6105] netlink: 'syz.8.14588': attribute type 1 has an invalid length. [ 390.073873][ T6105] bond1: entered promiscuous mode [ 390.078241][ T6107] loop0: detected capacity change from 0 to 512 [ 390.079682][ T6105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.089479][ T6107] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.132975][ T6105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.140990][ T6107] EXT4-fs (loop0): 1 truncate cleaned up [ 390.147320][ T6107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.161420][ T6105] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 390.171716][ T6105] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 390.204014][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.214548][ T6105] bond1: (slave ip6gre1): making interface the new active one [ 390.222078][ T6105] ip6gre1: entered promiscuous mode [ 390.230270][ T6105] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 390.242742][ T6120] serio: Serial port ptm0 [ 390.286485][ T6126] netlink: 'syz.0.14597': attribute type 4 has an invalid length. [ 390.388535][ T6141] loop0: detected capacity change from 0 to 1024 [ 390.424200][ T6141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.458535][ T1739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.757005][ T6193] sd 0:0:1:0: device reset [ 390.778953][ T6195] netlink: 'syz.0.14618': attribute type 27 has an invalid length. [ 390.818175][ T6197] __nla_validate_parse: 7 callbacks suppressed [ 390.818189][ T6197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14619'. [ 390.948535][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.960939][ T6198] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.972730][ T6198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.990301][ T533] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.999535][ T533] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.011055][ T533] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.030298][ T533] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.083392][ T6224] netlink: 48 bytes leftover after parsing attributes in process `syz.8.14635'. [ 391.098122][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14632'. [ 391.107145][ T6225] netlink: 'syz.0.14632': attribute type 15 has an invalid length. [ 391.115037][ T6225] netlink: 'syz.0.14632': attribute type 18 has an invalid length. [ 391.142223][ T6225] vxlan0: entered promiscuous mode [ 391.150891][ T533] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.160588][ T533] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.169528][ T533] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.179215][ T533] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.240367][ T3405] hid_parser_main: 18 callbacks suppressed [ 391.240384][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.253872][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.261765][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.269220][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.276676][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.284078][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.291472][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.298868][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.306240][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.313700][ T3405] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 391.322422][ T3405] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 391.479201][ T6257] netlink: 'syz.3.14651': attribute type 1 has an invalid length. [ 391.513174][ T6261] dvmrp0: left allmulticast mode [ 391.691113][ T6278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14660'. [ 391.837268][ T1739] block device autoloading is deprecated and will be removed. [ 391.849025][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14668'. [ 391.858399][ T6292] netem: change failed [ 391.876487][ T6296] netlink: 'syz.3.14669': attribute type 27 has an invalid length. [ 391.901550][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.908747][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.920141][ T6296] 0ªX¹¦À: left allmulticast mode [ 391.972083][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.980505][ T6297] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 392.005712][T31717] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.014698][T31717] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.025305][T31717] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.034225][T31717] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.043772][T31717] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.052730][T31717] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.063131][T31717] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.070062][ T6299] block device autoloading is deprecated and will be removed. [ 392.072202][T31717] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.151751][ T6309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14676'. [ 392.160958][ T6309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14676'. [ 392.170002][ T6309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14676'. [ 392.179195][ T6309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14676'. [ 392.341101][ T6325] SELinux: Context @ is not valid (left unmapped). [ 392.652242][T31696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.701825][T31696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.782783][T31696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.831006][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 392.831019][ T29] audit: type=1400 audit(2000000011.426:21006): avc: denied { mounton } for pid=6344 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 392.879676][T31696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.043873][T31696] bond0 (unregistering): Released all slaves [ 393.221403][T31696] hsr_slave_0: left promiscuous mode [ 393.261826][T31696] hsr_slave_1: left promiscuous mode [ 393.323432][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14697'. [ 393.500612][ T29] audit: type=1326 audit(2000000012.155:21007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.524533][ T29] audit: type=1326 audit(2000000012.155:21008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.548109][ T29] audit: type=1326 audit(2000000012.155:21009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.555178][ T6344] chnl_net:caif_netlink_parms(): no params data found [ 393.571724][ T29] audit: type=1326 audit(2000000012.155:21010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.571753][ T29] audit: type=1326 audit(2000000012.155:21011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.571776][ T29] audit: type=1326 audit(2000000012.155:21012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.649280][ T29] audit: type=1326 audit(2000000012.155:21013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.672885][ T29] audit: type=1326 audit(2000000012.155:21014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.696446][ T29] audit: type=1326 audit(2000000012.155:21015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.8.14705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc87cefebe9 code=0x7ffc0000 [ 393.784911][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.792304][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.800204][ T6344] bridge_slave_0: entered allmulticast mode [ 393.806623][ T6344] bridge_slave_0: entered promiscuous mode [ 393.813514][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.820876][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.829106][ T6344] bridge_slave_1: entered allmulticast mode [ 393.835960][ T6344] bridge_slave_1: entered promiscuous mode [ 393.877992][ T6344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.902924][ T6344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.989743][ T6344] team0: Port device team_slave_0 added [ 394.002125][ T6344] team0: Port device team_slave_1 added [ 394.066070][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.073120][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.099049][ T6344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.111190][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.118164][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.144093][ T6344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.192111][ T6413] 9pnet: Could not find request transport: 0xffffffffffffffff [ 394.220870][ T6344] hsr_slave_0: entered promiscuous mode [ 394.238988][ T6344] hsr_slave_1: entered promiscuous mode [ 394.601532][ T6453] ALSA: seq fatal error: cannot create timer (-19) [ 394.613240][ T6344] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.624055][ T6344] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 394.633667][ T6344] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 394.643850][ T6344] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 394.677979][ T6344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.689661][ T6344] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.698891][T31702] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.706024][T31702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.718475][T31702] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.725532][T31702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.797929][ T6344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.938600][ T6344] veth0_vlan: entered promiscuous mode [ 394.949426][ T6344] veth1_vlan: entered promiscuous mode [ 394.965291][ T6344] veth0_macvtap: entered promiscuous mode [ 394.978893][ T6344] veth1_macvtap: entered promiscuous mode [ 394.990967][ T6344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.002394][ T6344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.013429][T31700] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.041843][T31700] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.069808][T31700] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.085235][T31700] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.313266][ T6582] vlan0: entered promiscuous mode [ 395.318437][ T6582] gretap0: entered promiscuous mode [ 395.473675][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.500223][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.655221][ T6642] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 395.666188][ T6641] IPVS: stopping master sync thread 6642 ... [ 395.881319][ T6682] __nla_validate_parse: 6 callbacks suppressed [ 395.881335][ T6682] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14815'. [ 395.896697][ T6682] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 395.903200][ T6682] 0ªî{X¹¦: entered allmulticast mode [ 395.908825][ T6682] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 395.960259][ T6690] loop9: detected capacity change from 0 to 164 [ 395.968914][ T6690] rock: directory entry would overflow storage [ 395.975075][ T6690] rock: sig=0x4f50, size=4, remaining=3 [ 395.980839][ T6690] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 395.988436][ T6692] wireguard0: entered promiscuous mode [ 395.993981][ T6692] wireguard0: entered allmulticast mode [ 396.042445][ T6702] syzkaller1: entered promiscuous mode [ 396.047970][ T6702] syzkaller1: entered allmulticast mode [ 396.169977][ T6717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.254887][ T6724] ================================================================== [ 396.262984][ T6724] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 396.271573][ T6724] [ 396.273883][ T6724] write to 0xffff88811136ba68 of 8 bytes by task 6731 on cpu 0: [ 396.281497][ T6724] shmem_file_splice_read+0x470/0x600 [ 396.286864][ T6724] splice_direct_to_actor+0x26f/0x680 [ 396.292229][ T6724] do_splice_direct+0xda/0x150 [ 396.296975][ T6724] do_sendfile+0x380/0x650 [ 396.301383][ T6724] __x64_sys_sendfile64+0x105/0x150 [ 396.306572][ T6724] x64_sys_call+0x2bb0/0x2ff0 [ 396.311237][ T6724] do_syscall_64+0xd2/0x200 [ 396.315731][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.321617][ T6724] [ 396.323926][ T6724] write to 0xffff88811136ba68 of 8 bytes by task 6724 on cpu 1: [ 396.331535][ T6724] shmem_file_splice_read+0x470/0x600 [ 396.336894][ T6724] splice_direct_to_actor+0x26f/0x680 [ 396.342250][ T6724] do_splice_direct+0xda/0x150 [ 396.346995][ T6724] do_sendfile+0x380/0x650 [ 396.351407][ T6724] __x64_sys_sendfile64+0x105/0x150 [ 396.356595][ T6724] x64_sys_call+0x2bb0/0x2ff0 [ 396.361265][ T6724] do_syscall_64+0xd2/0x200 [ 396.365761][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.371645][ T6724] [ 396.373949][ T6724] value changed: 0x000000000002c850 -> 0x000000000002c880 [ 396.381038][ T6724] [ 396.383342][ T6724] Reported by Kernel Concurrency Sanitizer on: [ 396.389476][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.7.14834 Tainted: G W 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 396.401796][ T6724] Tainted: [W]=WARN [ 396.405580][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.415618][ T6724] ================================================================== [ 397.522878][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 397.522890][ T29] audit: type=1400 audit(2000000016.458:21176): avc: denied { read write } for pid=6344 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.553425][ T29] audit: type=1400 audit(2000000016.458:21177): avc: denied { open } for pid=6344 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.577575][ T29] audit: type=1400 audit(2000000016.458:21178): avc: denied { ioctl } for pid=6344 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1