last executing test programs: 2m16.10284399s ago: executing program 32 (id=1944): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) timer_delete(r2) 2m6.328731025s ago: executing program 33 (id=2216): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x1, 0xa, 0xc, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m59.640316359s ago: executing program 34 (id=2364): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 1m47.329702819s ago: executing program 2 (id=2662): r0 = socket$kcm(0x10, 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f00000004c0), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000200)={0x3, 'ipvlan1\x00', {0x7}, 0x2}) 1m47.30088354s ago: executing program 2 (id=2654): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = epoll_create(0x7e4f3697) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x30000000}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000800)="ebd26fbd7e646f87b4396ba68993540c91566f22521a66e438199adfca35faca2ac66cc79b57ad4406e23828685a1ae6cc659db6ed897bad8b7c2fcab78f62ff666b9ac2594e7f709f0bad440abe69e42603f71c861ba298f5d2f7c2d77828319b", 0x61}], 0x1, 0x0, 0x0) 1m47.199657391s ago: executing program 2 (id=2657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 1m47.129656712s ago: executing program 2 (id=2660): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m47.071627233s ago: executing program 2 (id=2664): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffe7ffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x14c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x108, 0x2, {{}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_DELAY_DIST={0x3e, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8"}]}}}]}, 0x14c}}, 0x0) 1m46.203837325s ago: executing program 2 (id=2694): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000088000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef) 1m46.157644036s ago: executing program 35 (id=2694): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000088000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef) 1m29.060197333s ago: executing program 8 (id=3237): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x88) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) 1m29.021599184s ago: executing program 8 (id=3238): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(r0) 1m28.987052144s ago: executing program 8 (id=3242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x187842, 0x167) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 1m28.963789855s ago: executing program 8 (id=3243): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m28.941697225s ago: executing program 8 (id=3244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m28.708268298s ago: executing program 8 (id=3249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 1m28.707763638s ago: executing program 36 (id=3249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 37.202661534s ago: executing program 7 (id=4745): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) 36.281618277s ago: executing program 7 (id=4754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[]) 36.234648397s ago: executing program 7 (id=4757): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xe, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xe9be}], 0x1, 0x2043, 0x0) 36.116245269s ago: executing program 7 (id=4761): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 36.098259529s ago: executing program 7 (id=4762): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 35.919455701s ago: executing program 7 (id=4768): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$unix(r1, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x1c1c0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 35.907717102s ago: executing program 37 (id=4768): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$unix(r1, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x1c1c0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 19.738084606s ago: executing program 9 (id=5184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r4, @ANYBLOB="000000000000000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x8}, 0x0) 19.492311889s ago: executing program 9 (id=5196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) 19.382277221s ago: executing program 9 (id=5190): io_setup(0x9, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_getevents(r0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19.247666183s ago: executing program 9 (id=5192): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19.159168814s ago: executing program 9 (id=5193): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x50, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 19.109619275s ago: executing program 9 (id=5194): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="140002"], 0x34}}, 0x20004004) 19.029865476s ago: executing program 38 (id=5194): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="140002"], 0x34}}, 0x20004004) 6.593694989s ago: executing program 4 (id=5505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 4.909857122s ago: executing program 4 (id=5558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38) 4.835146313s ago: executing program 4 (id=5562): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) 4.794062614s ago: executing program 4 (id=5564): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x60600) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 4.755826164s ago: executing program 4 (id=5566): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="16b2ad", 0x3, 0x640408e9, 0x0, 0x0) 4.36320406s ago: executing program 4 (id=5575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 4.33365061s ago: executing program 39 (id=5575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.47615921s ago: executing program 1 (id=5634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 1.305536192s ago: executing program 0 (id=5641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1c}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r3, 0x0, 0x0) 1.221900953s ago: executing program 0 (id=5647): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xc}, {0x1, 0x20}, @period={0x6, 0x7, 0xfff, 0x763, 0x1000, {0x3, 0x81, 0xfffe, 0x33}, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.142971745s ago: executing program 5 (id=5649): r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x140b4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x10650c, 0x7, 0x0, 0x1, 0x7, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.065897386s ago: executing program 5 (id=5650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 977.166717ms ago: executing program 5 (id=5653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 949.524167ms ago: executing program 5 (id=5655): mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 858.329599ms ago: executing program 6 (id=5659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 856.755849ms ago: executing program 5 (id=5661): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 855.059119ms ago: executing program 6 (id=5662): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 831.907989ms ago: executing program 6 (id=5663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) close(r2) 761.29306ms ago: executing program 6 (id=5664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 760.75465ms ago: executing program 6 (id=5665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) 760.30573ms ago: executing program 3 (id=5666): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0xfffffffffffffd60}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x94}}, 0x0) 668.741121ms ago: executing program 3 (id=5667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 642.493822ms ago: executing program 1 (id=5668): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 611.407272ms ago: executing program 3 (id=5669): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r1, 0x0, 0x800}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 603.103742ms ago: executing program 5 (id=5670): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) 544.689583ms ago: executing program 1 (id=5671): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYBLOB="010003000588687663710180c2000000"]) 543.860783ms ago: executing program 3 (id=5672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2002089, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r2, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000001600)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 525.163123ms ago: executing program 1 (id=5673): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="0349ee47", 0x4}], 0x1}}], 0x1, 0xc010) 499.521153ms ago: executing program 6 (id=5674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 463.378484ms ago: executing program 1 (id=5675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x6, 0xbfab, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 413.247775ms ago: executing program 3 (id=5676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') 361.411225ms ago: executing program 0 (id=5677): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x40220}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 316.461096ms ago: executing program 1 (id=5678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 193.133908ms ago: executing program 0 (id=5679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 148.362308ms ago: executing program 0 (id=5680): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x187842, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 30.22982ms ago: executing program 0 (id=5681): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=5682): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x6, 0xfff7}, &(0x7f0000000340)=0x8) kernel console output (not intermixed with test programs): back. [ 154.762159][ T9756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.857779][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'. [ 154.866985][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'. [ 154.907683][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'. [ 154.972796][T12384] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 155.000697][T12380] bridge0: entered promiscuous mode [ 155.010849][T12380] bridge0: port 1(macvlan2) entered blocking state [ 155.018914][T12380] bridge0: port 1(macvlan2) entered disabled state [ 155.027788][T12380] macvlan2: entered allmulticast mode [ 155.033946][T12380] bridge0: entered allmulticast mode [ 155.051306][T12380] macvlan2: left allmulticast mode [ 155.057786][T12380] bridge0: left allmulticast mode [ 155.070808][T12380] bridge0: left promiscuous mode [ 155.123233][T12388] macvlan1: entered promiscuous mode [ 155.130638][T12388] ipvlan0: entered promiscuous mode [ 155.136530][T12388] ipvlan0: left promiscuous mode [ 155.141941][T12388] macvlan1: left promiscuous mode [ 155.416460][T12420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12420 comm=syz.3.3485 [ 155.429136][T12420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12420 comm=syz.3.3485 [ 155.484771][T12432] veth1_to_bond: entered allmulticast mode [ 155.555119][T12432] veth1_to_bond: left allmulticast mode [ 155.776347][T12464] __nla_validate_parse: 5 callbacks suppressed [ 155.776373][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3508'. [ 155.791979][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3508'. [ 155.820367][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3508'. [ 155.829638][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3508'. [ 155.854270][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3508'. [ 155.863513][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3508'. [ 156.698502][T12490] sd 0:0:1:0: device reset [ 157.107385][T12510] wireguard1: entered promiscuous mode [ 157.112941][T12510] wireguard1: entered allmulticast mode [ 157.540185][T12553] sd 0:0:1:0: device reset [ 157.564947][T12554] wireguard0: entered promiscuous mode [ 157.570523][T12554] wireguard0: entered allmulticast mode [ 157.788711][T12574] veth1_to_bond: entered allmulticast mode [ 157.888943][T12574] veth1_to_bond: left allmulticast mode [ 158.012612][T12588] sd 0:0:1:0: device reset [ 158.064271][T12597] loop9: detected capacity change from 0 to 256 [ 158.127884][T12600] wireguard1: entered promiscuous mode [ 158.133431][T12600] wireguard1: entered allmulticast mode [ 158.217214][T12617] sd 0:0:1:0: device reset [ 158.371006][T12633] loop7: detected capacity change from 0 to 2048 [ 158.388046][T12633] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.425763][T12633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.493872][ T9756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.558220][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 158.558234][ T29] audit: type=1326 audit(1749460711.416:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.7.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 158.596902][ T29] audit: type=1326 audit(1749460711.456:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.7.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 158.620567][ T29] audit: type=1326 audit(1749460711.456:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.7.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 158.644132][ T29] audit: type=1326 audit(1749460711.456:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.7.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 158.690853][ T29] audit: type=1400 audit(1749460711.536:6758): avc: denied { read } for pid=12656 comm="syz.9.3590" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.708426][T12663] loop7: detected capacity change from 0 to 256 [ 158.714177][ T29] audit: type=1400 audit(1749460711.536:6759): avc: denied { open } for pid=12656 comm="syz.9.3590" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.744207][ T29] audit: type=1400 audit(1749460711.536:6760): avc: denied { ioctl } for pid=12656 comm="syz.9.3590" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.849471][ T29] audit: type=1400 audit(1749460711.696:6761): avc: denied { create } for pid=12665 comm="syz.7.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.869278][ T29] audit: type=1400 audit(1749460711.696:6762): avc: denied { connect } for pid=12665 comm="syz.7.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.052206][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3609'. [ 159.061312][ T29] audit: type=1400 audit(1749460711.906:6763): avc: denied { create } for pid=12679 comm="syz.7.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.083407][T12682] loop9: detected capacity change from 0 to 2048 [ 159.098429][T12682] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.128632][T12682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.211706][T12692] lo: entered promiscuous mode [ 159.221059][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.225199][T12692] batadv_slave_1: entered promiscuous mode [ 159.238665][T12687] batadv_slave_1: left promiscuous mode [ 159.244306][T12687] lo: left promiscuous mode [ 159.437017][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3616'. [ 159.466016][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3617'. [ 159.484185][T12725] 8021q: adding VLAN 0 to HW filter on device team1 [ 159.501091][T12729] lo: entered promiscuous mode [ 159.509406][T12729] batadv_slave_1: entered promiscuous mode [ 159.525499][T12728] batadv_slave_1: left promiscuous mode [ 159.531314][T12728] lo: left promiscuous mode [ 159.735983][T12759] lo: entered promiscuous mode [ 159.741434][T12759] batadv_slave_1: entered promiscuous mode [ 159.748186][T12758] batadv_slave_1: left promiscuous mode [ 159.753964][T12758] lo: left promiscuous mode [ 159.916666][T12788] loop9: detected capacity change from 0 to 512 [ 159.928579][T12788] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.941749][T12788] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.981534][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.048540][T12802] loop7: detected capacity change from 0 to 512 [ 160.068934][T12802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.087526][T12802] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.123056][ T9756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.223519][T12829] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3662'. [ 161.209132][T12889] netlink: 'syz.3.3686': attribute type 3 has an invalid length. [ 161.353440][T12896] xt_hashlimit: max too large, truncated to 1048576 [ 161.598166][T12919] netlink: 'syz.7.3700': attribute type 3 has an invalid length. [ 161.654470][T12922] ipip1: entered promiscuous mode [ 161.719124][T12926] xt_hashlimit: max too large, truncated to 1048576 [ 161.778348][T12929] __nla_validate_parse: 2 callbacks suppressed [ 161.778367][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3704'. [ 161.985093][T12945] netlink: 'syz.9.3712': attribute type 3 has an invalid length. [ 162.018543][T12951] ipip0: entered promiscuous mode [ 162.051952][T12953] loop9: detected capacity change from 0 to 128 [ 162.075107][T12953] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 162.123376][T12953] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.252647][T11858] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.509968][T12986] ipip0: entered promiscuous mode [ 162.632502][T12998] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 162.803942][T13014] xt_hashlimit: max too large, truncated to 1048576 [ 162.961968][T13028] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 163.279115][T13057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3764'. [ 163.376862][T13072] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.385344][T13072] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.393553][T13072] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.401819][T13072] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.462209][T13076] SELinux: failed to load policy [ 163.573804][T13082] syzkaller0: entered allmulticast mode [ 163.581507][T13082] syzkaller0 (unregistering): left allmulticast mode [ 163.792680][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 163.792698][ T29] audit: type=1326 audit(1749460716.646:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 163.822570][ T29] audit: type=1326 audit(1749460716.646:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 163.846531][ T29] audit: type=1326 audit(1749460716.646:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 163.870334][ T29] audit: type=1326 audit(1749460716.646:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 163.893914][ T29] audit: type=1326 audit(1749460716.646:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 163.917474][ T29] audit: type=1326 audit(1749460716.646:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 163.941165][ T29] audit: type=1326 audit(1749460716.646:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 163.964722][ T29] audit: type=1326 audit(1749460716.646:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 163.988375][ T29] audit: type=1326 audit(1749460716.646:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 164.012368][ T29] audit: type=1326 audit(1749460716.656:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 164.346098][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3806'. [ 164.444297][T13147] vhci_hcd: invalid port number 96 [ 164.449650][T13147] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 164.713382][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3820'. [ 164.743413][T13176] sd 0:0:1:0: device reset [ 164.747401][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3820'. [ 164.932628][T13190] all: renamed from lo (while UP) [ 164.993328][T13197] netem: change failed [ 165.015258][T13188] netlink: 'syz.6.3827': attribute type 4 has an invalid length. [ 165.057833][T13199] netlink: 'syz.3.3832': attribute type 11 has an invalid length. [ 165.094841][T13199] netlink: 448 bytes leftover after parsing attributes in process `syz.3.3832'. [ 165.206956][T13211] netem: change failed [ 165.306234][ T9] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 165.313711][ T9] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 165.321198][ T9] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 165.329681][ T9] hid-generic 0000:0004:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 165.420438][T13241] netlink: 'syz.6.3851': attribute type 2 has an invalid length. [ 165.428295][T13241] netlink: 'syz.6.3851': attribute type 1 has an invalid length. [ 165.436176][T13241] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.3851'. [ 165.611838][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 165.673193][T13268] ALSA: seq fatal error: cannot create timer (-22) [ 166.191583][T13309] syz_tun: entered allmulticast mode [ 166.204807][T13308] syz_tun: left allmulticast mode [ 166.280462][T13316] loop9: detected capacity change from 0 to 2048 [ 166.298102][T13316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.383611][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.660815][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 166.685669][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.710532][T13374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.863358][T13384] netlink: 'syz.6.3914': attribute type 1 has an invalid length. [ 166.911793][T13388] syzkaller0: entered promiscuous mode [ 166.917576][T13388] syzkaller0: entered allmulticast mode [ 167.010599][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3917'. [ 167.020617][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3917'. [ 167.039392][T13393] netlink: 'syz.0.3918': attribute type 1 has an invalid length. [ 167.039467][T13393] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3918'. [ 167.119671][T13391] wireguard0: entered promiscuous mode [ 167.127309][T13391] wireguard0: entered allmulticast mode [ 167.170737][ T9009] kernel write not supported for file [eventfd] (pid: 9009 comm: kworker/1:11) [ 167.296839][T13425] syz_tun: entered allmulticast mode [ 167.313585][T13424] syz_tun: left allmulticast mode [ 167.494140][T13459] syz_tun: entered allmulticast mode [ 167.522970][T13458] syz_tun: left allmulticast mode [ 167.576207][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 167.655597][T13485] ip6gre1: entered promiscuous mode [ 167.672455][T13483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.687496][T13489] netlink: 'syz.6.3962': attribute type 1 has an invalid length. [ 167.720534][T13493] netlink: 'syz.6.3964': attribute type 1 has an invalid length. [ 167.728456][T13493] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3964'. [ 167.873995][T13521] netlink: 'syz.6.3974': attribute type 4 has an invalid length. [ 167.985887][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.999786][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.143862][T13560] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3989'. [ 168.362912][T13583] netlink: 'syz.7.3997': attribute type 1 has an invalid length. [ 168.370883][T13583] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3997'. [ 168.438542][ T9009] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 168.469542][ T9009] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.573669][T13597] loop9: detected capacity change from 0 to 512 [ 168.597100][T13597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.655228][T13597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 168.686290][T13597] System zones: 0-2, 18-18, 34-34 [ 168.698588][T13597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.737591][T13597] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.782434][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.058214][T13631] netlink: 'syz.6.4015': attribute type 7 has an invalid length. [ 169.066155][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4015'. [ 169.082502][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 169.082517][ T29] audit: type=1400 audit(1749460721.936:7148): avc: denied { read write } for pid=13632 comm="syz.0.4017" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.113191][ T29] audit: type=1400 audit(1749460721.936:7149): avc: denied { open } for pid=13632 comm="syz.0.4017" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.165838][T13637] syzkaller0: entered promiscuous mode [ 169.171386][T13637] syzkaller0: entered allmulticast mode [ 169.945083][T13656] loop9: detected capacity change from 0 to 128 [ 169.950430][ T29] audit: type=1400 audit(1749460722.806:7150): avc: denied { create } for pid=13657 comm="syz.6.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.955531][T13656] FAT-fs (loop9): error, invalid access to FAT (entry 0x0ffffff6) [ 169.971528][ T29] audit: type=1400 audit(1749460722.806:7151): avc: denied { bind } for pid=13657 comm="syz.6.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.024654][T13661] netlink: 'syz.0.4028': attribute type 4 has an invalid length. [ 170.138498][T13677] netlink: 'syz.9.4035': attribute type 1 has an invalid length. [ 170.146334][ T29] audit: type=1400 audit(1749460722.996:7152): avc: denied { write } for pid=13674 comm="syz.6.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.210971][ T29] audit: type=1400 audit(1749460723.056:7153): avc: denied { cpu } for pid=13682 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.271712][T13686] SELinux: failed to load policy [ 170.345325][ T29] audit: type=1400 audit(1749460723.196:7154): avc: denied { execute_no_trans } for pid=13694 comm="syz.9.4048" path="/147/file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.439860][ T29] audit: type=1326 audit(1749460723.296:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13707 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 170.463581][ T29] audit: type=1326 audit(1749460723.296:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13707 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 170.549435][ T29] audit: type=1326 audit(1749460723.296:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13707 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 170.619998][T13721] loop9: detected capacity change from 0 to 512 [ 170.648400][T13721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.673005][T13721] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.687613][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4061'. [ 170.694058][T13721] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.4059: corrupted inode contents [ 170.710770][T13721] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.4059: mark_inode_dirty error [ 170.735653][T13733] serio: Serial port ptm1 [ 170.751418][T13721] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.4059: corrupted inode contents [ 170.778926][T13731] vhci_hcd: invalid port number 96 [ 170.784149][T13731] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 170.805146][T13721] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.4059: mark_inode_dirty error [ 170.844529][T13742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.853727][T13742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.879857][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.987944][T13765] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4073'. [ 171.086937][T13780] netlink: 'syz.0.4080': attribute type 3 has an invalid length. [ 171.121171][T13782] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 171.149838][T13786] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4083'. [ 171.158929][T13786] NCSI netlink: No device for ifindex 540032357 [ 171.173161][T13784] netdevsim netdevsim7: Direct firmware load for „ failed with error -2 [ 171.190431][T13788] vlan2: entered allmulticast mode [ 171.277414][T13799] loop9: detected capacity change from 0 to 7 [ 171.283839][T13799] buffer_io_error: 6 callbacks suppressed [ 171.283854][T13799] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.299569][T13799] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.307554][T13799] loop9: unable to read partition table [ 171.313359][T13799] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 171.313359][T13799] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 171.370936][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810bad8a00: rx timeout, send abort [ 171.777758][T13846] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 171.786808][T13846] team0: Device macvtap0 is already an upper device of the team interface [ 171.870958][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810bad8200: rx timeout, send abort [ 171.879316][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810bad8a00: abort rx timeout. Force session deactivation [ 172.058718][T13880] __nla_validate_parse: 1 callbacks suppressed [ 172.058739][T13880] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4126'. [ 172.110807][ T9009] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 172.133184][ T9009] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.154509][T13888] netlink: 87 bytes leftover after parsing attributes in process `syz.6.4129'. [ 172.370394][T13886] hid-generic 0000:0000:0000.0012: pid 13886 passed too large report [ 172.379293][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810bad8200: abort rx timeout. Force session deactivation [ 172.454963][T13909] loop9: detected capacity change from 0 to 8192 [ 172.462817][T13909] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.591745][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'. [ 172.600877][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'. [ 172.612388][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'. [ 172.666947][T13928] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22 [ 172.760397][T13950] loop9: detected capacity change from 0 to 256 [ 172.768808][T13950] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.782931][T13950] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 172.791720][T13950] FAT-fs (loop9): Filesystem has been set read-only [ 173.048431][T13974] program syz.6.4169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.186460][T13985] serio: Serial port ptm0 [ 173.425303][T14006] Â: renamed from pim6reg1 [ 173.550201][T14012] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1 [ 173.740660][T14026] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4193'. [ 173.808545][T14030] geneve2: entered promiscuous mode [ 173.813892][T14030] geneve2: entered allmulticast mode [ 174.094247][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 174.094265][ T29] audit: type=1326 audit(1749460726.946:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.3.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 174.171459][ T29] audit: type=1326 audit(1749460726.976:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.3.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 174.195176][ T29] audit: type=1326 audit(1749460726.986:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.3.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 174.218800][ T29] audit: type=1326 audit(1749460726.986:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.3.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 174.242404][ T29] audit: type=1326 audit(1749460726.986:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.3.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 174.265969][ T29] audit: type=1326 audit(1749460727.026:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 174.289697][ T29] audit: type=1326 audit(1749460727.026:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 174.554506][ T29] audit: type=1326 audit(1749460727.026:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 174.577987][ T29] audit: type=1326 audit(1749460727.026:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 174.601794][ T29] audit: type=1326 audit(1749460727.026:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 175.606680][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4232'. [ 175.615710][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4232'. [ 175.680502][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4232'. [ 175.689606][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4232'. [ 175.963120][T14118] sd 0:0:1:0: device reset [ 176.012001][T14095] validate_nla: 1 callbacks suppressed [ 176.012077][T14095] netlink: 'syz.7.4221': attribute type 4 has an invalid length. [ 176.344171][T14140] program syz.6.4241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.369600][T14146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.384927][T14146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.650733][T14169] netlink: 'syz.9.4247': attribute type 4 has an invalid length. [ 176.856972][T14175] openvswitch: netlink: Message has 6 unknown bytes. [ 176.937006][T14179] loop9: detected capacity change from 0 to 2048 [ 176.969784][T14179] EXT4-fs (loop9): failed to initialize system zone (-117) [ 176.987619][T14179] EXT4-fs (loop9): mount failed [ 177.617233][ T9009] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 177.631547][ T9009] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.772855][T14221] hid-generic 0000:0000:0000.0013: pid 14221 passed too large report [ 177.777851][T14218] __nla_validate_parse: 5 callbacks suppressed [ 177.777872][T14218] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4269'. [ 177.803678][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.818611][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.013734][T14247] program syz.3.4285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.420040][T14267] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4295'. [ 178.611782][T14281] loop9: detected capacity change from 0 to 512 [ 178.639029][T14281] EXT4-fs: Ignoring removed bh option [ 178.660092][T14281] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.669384][T14281] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 178.701132][T14281] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 178.730686][T14281] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 178.747366][T14281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.832995][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.160097][T14306] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 179.778196][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 179.778215][ T29] audit: type=1400 audit(1749460732.636:7478): avc: denied { write } for pid=14346 comm="syz.9.4326" path="socket:[41063]" dev="sockfs" ino=41063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.911538][T14355] netdevsim netdevsim9: Direct firmware load for „ failed with error -2 [ 179.974645][ T29] audit: type=1400 audit(1749460732.826:7479): avc: denied { create } for pid=14357 comm="syz.9.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 180.480826][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4336'. [ 180.490463][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4336'. [ 180.815427][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4346'. [ 180.826468][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4346'. [ 180.937933][T14394] wireguard0: entered promiscuous mode [ 180.944413][T14394] wireguard0: entered allmulticast mode [ 181.074123][ T29] audit: type=1400 audit(1749460733.926:7480): avc: denied { mount } for pid=14406 comm="syz.9.4359" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 181.197006][ T29] audit: type=1326 audit(1749460733.986:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.9.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 181.220803][ T29] audit: type=1326 audit(1749460733.986:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.9.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 181.244473][ T29] audit: type=1326 audit(1749460733.986:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.9.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 181.268087][ T29] audit: type=1326 audit(1749460733.986:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.9.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 181.291853][ T29] audit: type=1326 audit(1749460733.986:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.9.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 181.315395][ T29] audit: type=1400 audit(1749460734.026:7486): avc: denied { unmount } for pid=11858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 181.422124][T14416] sd 0:0:1:0: device reset [ 181.590572][ T29] audit: type=1400 audit(1749460734.446:7487): avc: denied { read } for pid=14422 comm="syz.3.4356" path="socket:[41220]" dev="sockfs" ino=41220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.553291][T14514] team_slave_0: entered promiscuous mode [ 182.559039][T14514] team_slave_1: entered promiscuous mode [ 182.584291][T14514] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 182.692032][T14514] team0: Device macvtap1 is already an upper device of the team interface [ 182.747839][T14514] team_slave_0: left promiscuous mode [ 182.753323][T14514] team_slave_1: left promiscuous mode [ 182.958192][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4385'. [ 182.972892][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4385'. [ 183.043986][T14562] wireguard0: entered promiscuous mode [ 183.050684][T14562] wireguard0: entered allmulticast mode [ 183.075148][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4388'. [ 183.209548][T14590] loop9: detected capacity change from 0 to 512 [ 183.218597][T14590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.225693][T14590] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 183.244302][T14590] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 183.296824][T14590] EXT4-fs (loop9): 1 truncate cleaned up [ 183.321172][T14590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.051418][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.341975][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4423'. [ 184.561546][T14678] sctp: [Deprecated]: syz.3.4433 (pid 14678) Use of int in max_burst socket option deprecated. [ 184.561546][T14678] Use struct sctp_assoc_value instead [ 184.602763][T14680] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4435'. [ 185.251678][T14715] loop9: detected capacity change from 0 to 512 [ 185.260422][T14715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.277443][T14715] EXT4-fs error (device loop9): ext4_orphan_get:1393: comm syz.9.4443: inode #13: comm syz.9.4443: iget: illegal inode # [ 185.301724][T14715] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.4443: couldn't read orphan inode 13 (err -117) [ 185.316579][T14715] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.333420][T14715] EXT4-fs error (device loop9): ext4_resize_begin:60: comm syz.9.4443: resize_inode disabled but reserved GDT blocks non-zero [ 185.361778][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.485145][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 185.485160][ T29] audit: type=1326 audit(1749460738.336:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.515156][ T29] audit: type=1326 audit(1749460738.336:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.553128][ T29] audit: type=1326 audit(1749460738.396:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.576816][ T29] audit: type=1326 audit(1749460738.396:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.600333][ T29] audit: type=1326 audit(1749460738.396:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.624037][ T29] audit: type=1326 audit(1749460738.396:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.647761][ T29] audit: type=1326 audit(1749460738.396:7573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.671403][ T29] audit: type=1326 audit(1749460738.396:7574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.695076][ T29] audit: type=1326 audit(1749460738.406:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.718609][ T29] audit: type=1326 audit(1749460738.406:7576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.7.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583191e929 code=0x7ffc0000 [ 185.965988][T14796] wireguard1: entered promiscuous mode [ 185.971537][T14796] wireguard1: entered allmulticast mode [ 186.187557][T14810] all: renamed from lo (while UP) [ 186.733032][T14828] bridge: RTM_NEWNEIGH with invalid ether address [ 187.164689][T14864] wireguard1: entered promiscuous mode [ 187.170224][T14864] wireguard1: entered allmulticast mode [ 187.447145][T14888] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 188.007909][T14901] netlink: 'syz.3.4498': attribute type 4 has an invalid length. [ 188.111743][T14906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.193344][T14906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.288980][T14906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.319745][T14920] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 188.359682][T14906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.412667][T14906] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.459457][T14906] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.483553][T14906] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.516328][T14906] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.341775][T14953] wireguard1: entered promiscuous mode [ 189.347448][T14953] wireguard1: entered allmulticast mode [ 189.396217][T14958] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.4521'. [ 189.615099][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4531'. [ 189.970448][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4537'. [ 190.137736][T15009] netlink: 'syz.6.4546': attribute type 21 has an invalid length. [ 190.146417][T15009] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4546'. [ 190.205111][T15014] 9p: Unknown Cache mode or invalid value m [ 190.303547][T15028] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4554'. [ 190.348913][T15035] sd 0:0:1:0: device reset [ 190.380465][T15038] wireguard1: entered promiscuous mode [ 190.386130][T15038] wireguard1: entered allmulticast mode [ 190.424224][T15044] netlink: 'syz.0.4560': attribute type 1 has an invalid length. [ 190.474902][T15044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.498143][T15044] bond1: (slave veth3): Enslaving as an active interface with a down link [ 190.509880][T15044] dummy0: left promiscuous mode [ 190.528632][T15044] bond1: (slave dummy0): making interface the new active one [ 190.536304][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 190.536321][ T29] audit: type=1326 audit(1749460743.386:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.537897][T15044] dummy0: entered promiscuous mode [ 190.552409][ T29] audit: type=1326 audit(1749460743.406:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.566388][T15044] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 190.571126][ T29] audit: type=1326 audit(1749460743.406:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.571160][ T29] audit: type=1326 audit(1749460743.406:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.571192][ T29] audit: type=1326 audit(1749460743.406:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.571303][ T29] audit: type=1326 audit(1749460743.406:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.697738][ T29] audit: type=1326 audit(1749460743.406:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.721349][ T29] audit: type=1326 audit(1749460743.406:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.744881][ T29] audit: type=1326 audit(1749460743.406:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 190.768532][ T29] audit: type=1326 audit(1749460743.406:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.3.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47294e929 code=0x7ffc0000 [ 191.011895][T15083] loop9: detected capacity change from 0 to 512 [ 191.022028][T15083] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 191.052364][T15083] EXT4-fs (loop9): 1 truncate cleaned up [ 191.066642][T15083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.382265][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.420388][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4580'. [ 191.808696][T15111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15111 comm=syz.7.4587 [ 192.010322][T15125] loop9: detected capacity change from 0 to 512 [ 192.025489][T15125] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 192.036555][T15123] vhci_hcd: invalid port number 96 [ 192.041706][T15123] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 192.077663][T15125] EXT4-fs (loop9): 1 truncate cleaned up [ 192.100546][T15125] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.167226][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.453908][T15151] ref_ctr_offset mismatch. inode: 0x55f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 192.551406][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4605'. [ 192.679383][T15159] wireguard1: entered promiscuous mode [ 192.686342][T15159] wireguard1: entered allmulticast mode [ 192.712367][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'. [ 192.904199][T15186] loop9: detected capacity change from 0 to 128 [ 192.990841][T15186] bio_check_eod: 6 callbacks suppressed [ 192.990859][T15186] syz.9.4618: attempt to access beyond end of device [ 192.990859][T15186] loop9: rw=0, sector=121, nr_sectors = 120 limit=128 [ 193.024946][ T7461] kworker/u8:34: attempt to access beyond end of device [ 193.024946][ T7461] loop9: rw=1, sector=241, nr_sectors = 800 limit=128 [ 193.670879][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 194.477268][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4638'. [ 194.970483][T15259] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 195.227731][T15278] netlink: 'syz.3.4657': attribute type 3 has an invalid length. [ 195.314668][T15271] Set syz1 is full, maxelem 65536 reached [ 195.347893][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4660'. [ 195.511133][T15289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4661'. [ 196.128574][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 196.128629][ T29] audit: type=1400 audit(1749460748.986:7761): avc: denied { map } for pid=15324 comm="syz.0.4680" path="socket:[43577]" dev="sockfs" ino=43577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.158389][ T29] audit: type=1400 audit(1749460748.986:7762): avc: denied { read } for pid=15324 comm="syz.0.4680" path="socket:[43577]" dev="sockfs" ino=43577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.185098][T15325] atomic_op ffff8881185cb128 conn xmit_atomic 0000000000000000 [ 196.257654][T15334] block device autoloading is deprecated and will be removed. [ 196.302294][T15339] netlink: 'syz.9.4686': attribute type 1 has an invalid length. [ 196.327027][T15339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.356287][T15339] bond1: (slave veth3): Enslaving as an active interface with a down link [ 196.392982][T15339] bridge0: port 3(dummy0) entered disabled state [ 196.404059][T15339] dummy0: left allmulticast mode [ 196.420045][T15339] dummy0: left promiscuous mode [ 196.425218][T15339] bridge0: port 3(dummy0) entered disabled state [ 196.434896][T15339] bond1: (slave dummy0): making interface the new active one [ 196.444078][T15339] dummy0: entered promiscuous mode [ 196.449487][T15339] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 196.511109][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4687'. [ 196.520248][T15344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4687'. [ 196.529233][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4687'. [ 196.540342][T15344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4687'. [ 196.549446][T15344] netlink: 'syz.3.4687': attribute type 6 has an invalid length. [ 196.578716][T15346] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4688'. [ 196.619602][T15353] loop9: detected capacity change from 0 to 512 [ 196.639102][T15353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.671945][T15353] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.713240][T15360] SELinux: ebitmap: truncated map [ 196.720556][ T29] audit: type=1326 audit(1749460749.576:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 196.747314][T15360] SELinux: failed to load policy [ 196.774474][ T29] audit: type=1326 audit(1749460749.576:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 196.798049][ T29] audit: type=1326 audit(1749460749.576:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 196.821618][ T29] audit: type=1326 audit(1749460749.576:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 196.845331][ T29] audit: type=1326 audit(1749460749.576:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 196.868919][ T29] audit: type=1326 audit(1749460749.576:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 196.892657][ T29] audit: type=1326 audit(1749460749.576:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 196.916257][ T29] audit: type=1326 audit(1749460749.576:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.9.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48cece929 code=0x7ffc0000 [ 196.991374][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.143722][T15377] wireguard1: entered promiscuous mode [ 197.149982][T15377] wireguard1: entered allmulticast mode [ 197.781091][T15425] wireguard1: entered promiscuous mode [ 197.787643][T15425] wireguard1: entered allmulticast mode [ 197.897611][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4721'. [ 198.168860][T15438] netlink: 'syz.9.4725': attribute type 1 has an invalid length. [ 198.176907][T15438] netlink: 'syz.9.4725': attribute type 2 has an invalid length. [ 198.184862][T15438] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4725'. [ 198.292875][T15452] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.337172][T15452] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.396672][T15456] SELinux: ebitmap: truncated map [ 198.403405][T15456] SELinux: failed to load policy [ 198.409154][T15452] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.457117][T15452] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.512255][T15452] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.528517][T15452] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.541285][T15452] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.573524][T15452] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.599667][T15473] loop9: detected capacity change from 0 to 256 [ 198.621191][T15473] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.644775][T15473] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.653444][T15473] FAT-fs (loop9): Filesystem has been set read-only [ 198.828782][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 198.836595][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 198.854765][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.862487][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.870339][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.878097][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.885868][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.893558][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.901378][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.909103][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.916817][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.924609][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.932462][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.940174][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.947960][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.955664][ T9009] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 198.974665][ T9009] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 199.110197][T15496] loop9: detected capacity change from 0 to 128 [ 199.159771][T15495] syz.9.4750: attempt to access beyond end of device [ 199.159771][T15495] loop9: rw=34817, sector=102, nr_sectors = 32 limit=128 [ 199.536362][T15504] all: renamed from bridge_slave_0 [ 199.551179][T15506] program syz.7.4754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.893007][ T7461] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.984238][T15537] wireguard1: entered promiscuous mode [ 199.990803][T15537] wireguard1: entered allmulticast mode [ 200.071622][ T7461] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.149156][ T7461] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.230319][ T7461] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.276654][T15541] chnl_net:caif_netlink_parms(): no params data found [ 200.345583][ T7461] dummy0: left allmulticast mode [ 200.350757][ T7461] bridge0: port 1(dummy0) entered disabled state [ 200.447129][ T7461] bond0 (unregistering): Released all slaves [ 200.475937][T15541] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.483049][T15541] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.490433][T15541] bridge_slave_0: entered allmulticast mode [ 200.497310][T15541] bridge_slave_0: entered promiscuous mode [ 200.504538][T15541] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.511722][T15541] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.519287][T15541] bridge_slave_1: entered allmulticast mode [ 200.526015][T15541] bridge_slave_1: entered promiscuous mode [ 200.545501][ T7461] hsr_slave_0: left promiscuous mode [ 200.552652][ T7461] hsr_slave_1: left promiscuous mode [ 200.577403][ T7461] veth1_macvtap: left promiscuous mode [ 200.583083][ T7461] veth0_macvtap: left promiscuous mode [ 200.589713][ T7461] veth1_vlan: left promiscuous mode [ 200.595719][ T7461] veth0_vlan: left promiscuous mode [ 200.606371][T15576] vhci_hcd: invalid port number 224 [ 200.742918][T15541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.755455][T15541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.778508][T15541] team0: Port device team_slave_0 added [ 200.786301][T15541] team0: Port device team_slave_1 added [ 200.811985][T15541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.819044][T15541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.845090][T15541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.897565][T15585] wireguard1: entered promiscuous mode [ 200.904097][T15585] wireguard1: entered allmulticast mode [ 200.940164][T15541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.947172][T15541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.973215][T15541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.006775][T15541] hsr_slave_0: entered promiscuous mode [ 201.012848][T15541] hsr_slave_1: entered promiscuous mode [ 201.116553][T15601] loop9: detected capacity change from 0 to 128 [ 201.351256][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 201.351324][ T29] audit: type=1326 audit(1749460754.206:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 201.387352][T15541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.403924][T15541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.411006][ T29] audit: type=1326 audit(1749460754.206:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 201.434679][ T29] audit: type=1326 audit(1749460754.206:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 201.458439][ T29] audit: type=1326 audit(1749460754.206:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 201.460623][T15541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.481959][ T29] audit: type=1326 audit(1749460754.226:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15615 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 201.600245][T15541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.609538][T15628] atomic_op ffff8881185ca128 conn xmit_atomic 0000000000000000 [ 201.683503][T15541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.708757][T15638] __nla_validate_parse: 3 callbacks suppressed [ 201.708792][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4806'. [ 201.728265][T15541] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.743315][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.750473][ T7461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.785782][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.792957][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.823654][T15541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.834267][T15541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.992121][T15541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.034920][ T7461] dummy0: left promiscuous mode [ 202.271772][T15541] veth0_vlan: entered promiscuous mode [ 202.279851][T15541] veth1_vlan: entered promiscuous mode [ 202.308091][T15541] veth0_macvtap: entered promiscuous mode [ 202.315558][T15541] veth1_macvtap: entered promiscuous mode [ 202.342423][T15541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.377948][T15541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.398234][T15541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.407176][T15541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.416075][T15541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.424905][T15541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.449287][ T29] audit: type=1400 audit(1749460755.306:7830): avc: denied { mounton } for pid=15541 comm="syz-executor" path="/root/syzkaller.c9SKmO/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 202.473889][ T29] audit: type=1400 audit(1749460755.306:7831): avc: denied { mount } for pid=15541 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 202.496956][ T29] audit: type=1400 audit(1749460755.306:7832): avc: denied { mounton } for pid=15541 comm="syz-executor" path="/root/syzkaller.c9SKmO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 202.523957][ T29] audit: type=1400 audit(1749460755.306:7833): avc: denied { mounton } for pid=15541 comm="syz-executor" path="/root/syzkaller.c9SKmO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=45546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 202.551655][ T29] audit: type=1400 audit(1749460755.356:7834): avc: denied { mounton } for pid=15541 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 202.636221][T15697] syzkaller1: entered promiscuous mode [ 202.641957][T15697] syzkaller1: entered allmulticast mode [ 202.758331][ T8998] kernel write not supported for file /2064/attr/exec (pid: 8998 comm: kworker/0:13) [ 202.852240][T15722] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.906343][T15722] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.931296][T15731] -1: renamed from syzkaller0 [ 202.975791][T15722] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.070023][T15745] loop4: detected capacity change from 0 to 128 [ 203.088074][T15722] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.106741][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 203.116133][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 203.135586][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 203.152408][T15722] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.164032][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 203.172471][T15722] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.185631][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4849'. [ 203.187908][T15722] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.208648][T15722] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.220094][T15757] veth1_macvtap: left promiscuous mode [ 203.227861][T15757] macsec0: entered promiscuous mode [ 203.233130][T15757] macsec0: entered allmulticast mode [ 203.251483][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 203.268364][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 203.381175][T15779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4858'. [ 203.426488][T15785] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 203.490802][T15797] netlink: 'syz.4.4865': attribute type 1 has an invalid length. [ 203.498774][T15797] netlink: 'syz.4.4865': attribute type 4 has an invalid length. [ 203.506596][T15797] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4865'. [ 203.518224][T15797] netlink: 'syz.4.4865': attribute type 1 has an invalid length. [ 203.526147][T15797] netlink: 'syz.4.4865': attribute type 4 has an invalid length. [ 203.560193][T15801] macvlan1: entered promiscuous mode [ 203.566963][T15801] ipvlan0: entered promiscuous mode [ 203.573089][T15801] ipvlan0: left promiscuous mode [ 203.584088][T15801] macvlan1: left promiscuous mode [ 203.727546][T15814] loop9: detected capacity change from 0 to 8192 [ 203.731326][T15818] pimreg: entered allmulticast mode [ 203.745254][T15818] pimreg: left allmulticast mode [ 204.220763][T15856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.229383][T15856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.331544][T15861] loop4: detected capacity change from 0 to 1024 [ 204.346364][T15861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.358714][T15861] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.384715][T15541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.456000][T15868] loop4: detected capacity change from 0 to 8192 [ 204.516655][T15870] netlink: zone id is out of range [ 204.522042][T15870] netlink: zone id is out of range [ 204.528604][T15870] netlink: zone id is out of range [ 204.533873][T15870] netlink: del zone limit has 8 unknown bytes [ 204.585585][T15878] loop4: detected capacity change from 0 to 2048 [ 204.617795][T15878] Alternate GPT is invalid, using primary GPT. [ 204.624221][T15878] loop4: p2 p3 p7 [ 204.689065][T15886] loop4: detected capacity change from 0 to 128 [ 204.696123][T15886] EXT4-fs: test_dummy_encryption option not supported [ 204.740815][T15892] netlink: 'syz.9.4907': attribute type 3 has an invalid length. [ 205.269643][T15938] SELinux: failed to load policy [ 205.276195][T15943] bridge0: port 1(bond0) entered blocking state [ 205.282655][T15943] bridge0: port 1(bond0) entered disabled state [ 205.291130][T15943] bond0: entered allmulticast mode [ 205.297635][T15943] bond0: entered promiscuous mode [ 205.304300][T15943] bond0: left allmulticast mode [ 205.309423][T15943] bond0: left promiscuous mode [ 205.314515][T15943] bridge0: port 1(bond0) entered disabled state [ 205.630452][T15978] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 206.159348][T16006] xt_hashlimit: max too large, truncated to 1048576 [ 206.199289][T16010] loop9: detected capacity change from 0 to 512 [ 206.206191][T16010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.214059][T16010] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 206.234174][T16010] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 206.272812][T16010] EXT4-fs (loop9): 1 truncate cleaned up [ 206.301121][T16010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.361593][T16010] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 206.386027][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 206.386046][ T29] audit: type=1400 audit(1749460759.246:8027): avc: denied { unmount } for pid=11858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 206.416000][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.445876][ T29] audit: type=1326 audit(1749460759.296:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.469654][ T29] audit: type=1326 audit(1749460759.296:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.493270][ T29] audit: type=1326 audit(1749460759.306:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.493315][ T29] audit: type=1326 audit(1749460759.306:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.493348][ T29] audit: type=1326 audit(1749460759.306:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.547734][ T29] audit: type=1326 audit(1749460759.396:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.547774][ T29] audit: type=1326 audit(1749460759.396:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.614674][ T29] audit: type=1326 audit(1749460759.456:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.648361][ T29] audit: type=1326 audit(1749460759.456:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd6ee929 code=0x7ffc0000 [ 206.710395][T16032] dummy0: left allmulticast mode [ 206.719926][T16032] bridge0: port 3(dummy0) entered disabled state [ 206.733703][T16032] batman_adv: batadv0: Adding interface: dummy0 [ 206.740193][T16032] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.765861][T16032] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 206.994675][T16062] netlink: 'syz.4.4978': attribute type 1 has an invalid length. [ 207.437184][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x1 [ 207.445212][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.452648][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.460231][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.467701][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.475218][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.482671][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.490235][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.497932][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.505550][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.512967][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.520439][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.527889][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.535365][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.542993][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.550460][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.558052][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x2 [ 207.565998][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.573395][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.580960][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.588492][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.595917][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.603310][ T9000] hid-generic 0006:0000:0000.0015: unknown main item tag 0x0 [ 207.611721][ T9000] hid-generic 0006:0000:0000.0015: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 207.752017][T16109] __nla_validate_parse: 6 callbacks suppressed [ 207.752080][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4999'. [ 207.795839][ T7457] dummy0: left promiscuous mode [ 207.813302][T16113] SELinux: failed to load policy [ 208.170925][T16155] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 208.583170][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 208.613917][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 208.628573][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 208.635510][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 208.642510][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 208.649479][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 209.082480][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a3d200: rx timeout, send abort [ 209.582480][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119b72a00: rx timeout, send abort [ 209.590856][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a3d200: abort rx timeout. Force session deactivation [ 209.660116][T16222] wireguard0: entered promiscuous mode [ 209.666996][T16222] wireguard0: entered allmulticast mode [ 210.090797][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119b72a00: abort rx timeout. Force session deactivation [ 210.527371][T16291] loop9: detected capacity change from 0 to 1024 [ 210.534371][T16291] EXT4-fs: Ignoring removed nobh option [ 210.540124][T16291] EXT4-fs: Ignoring removed bh option [ 210.588537][T16291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.715877][T16314] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5087'. [ 210.893229][T16322] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 211.030475][T16285] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.5076: Allocating blocks 497-513 which overlap fs metadata [ 211.224249][T11858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.318533][T16341] vhci_hcd: invalid port number 96 [ 211.323734][T16341] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 211.481855][T16365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5112'. [ 211.491199][T16361] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 211.512932][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 211.512949][ T29] audit: type=1400 audit(1749460764.366:8173): avc: denied { ioctl } for pid=16366 comm="syz.6.5111" path="socket:[48471]" dev="sockfs" ino=48471 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.558366][T16367] ipvlan2: entered promiscuous mode [ 211.563735][T16367] ipvlan2: entered allmulticast mode [ 211.569215][T16367] bridge0: entered allmulticast mode [ 211.576938][T16367] batman_adv: batadv0: Adding interface: ipvlan2 [ 211.583428][T16367] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.613580][T16367] batman_adv: batadv0: Interface activated: ipvlan2 [ 211.624689][T16373] vlan2: entered allmulticast mode [ 211.747761][T16386] netlink: 'syz.3.5121': attribute type 5 has an invalid length. [ 211.755654][T16386] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5121'. [ 211.766879][T16386] : renamed from bond0 (while UP) [ 211.806037][ T29] audit: type=1400 audit(1749460764.666:8174): avc: denied { ioctl } for pid=16388 comm="syz.0.5122" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.861869][T16398] syzkaller1: entered promiscuous mode [ 211.867530][T16398] syzkaller1: entered allmulticast mode [ 211.977368][ T29] audit: type=1400 audit(1749460764.836:8175): avc: denied { ioctl } for pid=16393 comm="syz.3.5124" path="socket:[48520]" dev="sockfs" ino=48520 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.005526][T16395] netlink: 'syz.3.5124': attribute type 10 has an invalid length. [ 212.031467][ T29] audit: type=1400 audit(1749460764.886:8176): avc: denied { create } for pid=16404 comm="syz.6.5128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.051484][T16395] hsr_slave_0: left promiscuous mode [ 212.058535][T16395] hsr_slave_1: left promiscuous mode [ 212.059674][ T29] audit: type=1400 audit(1749460764.916:8177): avc: denied { bind } for pid=16404 comm="syz.6.5128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.084033][ T29] audit: type=1400 audit(1749460764.936:8178): avc: denied { write } for pid=16404 comm="syz.6.5128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.136354][ T29] audit: type=1400 audit(1749460764.996:8179): avc: denied { ioctl } for pid=16409 comm="syz.6.5130" path="socket:[48527]" dev="sockfs" ino=48527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.722936][ T29] audit: type=1400 audit(1749460765.576:8180): avc: denied { read write } for pid=16423 comm="syz.4.5134" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 212.747401][ T29] audit: type=1400 audit(1749460765.576:8181): avc: denied { open } for pid=16423 comm="syz.4.5134" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 213.056086][ T29] audit: type=1400 audit(1749460765.916:8182): avc: denied { create } for pid=16432 comm="syz.6.5138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.477817][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5155'. [ 213.743336][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5150'. [ 214.361976][T16509] bond1: (slave dummy0): Releasing active interface [ 214.373186][T16509] batman_adv: batadv0: Adding interface: dummy0 [ 214.379650][T16509] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.405075][T16509] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 214.517090][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5170'. [ 215.654144][T16539] pimreg: entered allmulticast mode [ 215.666692][T16539] pimreg: left allmulticast mode [ 216.147124][T16548] all: renamed from bridge_slave_0 (while UP) [ 216.358374][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5196'. [ 216.387407][T16555] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5196'. [ 216.521000][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 216.521015][ T29] audit: type=1400 audit(1749460769.376:8242): avc: denied { read } for pid=16565 comm="syz.0.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.586293][ T29] audit: type=1400 audit(1749460769.446:8243): avc: denied { mounton } for pid=16568 comm="syz.9.5192" path="/396/file0" dev="tmpfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 216.642327][ T29] audit: type=1400 audit(1749460769.496:8244): avc: denied { unmount } for pid=11858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.746191][ T29] audit: type=1400 audit(1749460769.596:8245): avc: denied { mount } for pid=16571 comm="syz.4.5195" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 216.768515][ T29] audit: type=1400 audit(1749460769.596:8246): avc: denied { mounton } for pid=16571 comm="syz.4.5195" path="/107/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 216.790907][ T29] audit: type=1400 audit(1749460769.596:8247): avc: denied { mount } for pid=16571 comm="syz.4.5195" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.909849][ T29] audit: type=1400 audit(1749460769.686:8248): avc: denied { execmem } for pid=16573 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 216.929522][ T29] audit: type=1400 audit(1749460769.696:8249): avc: denied { unmount } for pid=15541 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 217.000919][ T29] audit: type=1400 audit(1749460769.806:8250): avc: denied { read } for pid=16577 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 217.022496][ T29] audit: type=1400 audit(1749460769.806:8251): avc: denied { open } for pid=16577 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 217.202236][T16577] chnl_net:caif_netlink_parms(): no params data found [ 217.260301][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.267512][T16577] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.283727][T16577] bridge_slave_0: entered allmulticast mode [ 217.290396][T16577] bridge_slave_0: entered promiscuous mode [ 217.298634][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.305829][T16577] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.327618][T16577] bridge_slave_1: entered allmulticast mode [ 217.334563][T16577] bridge_slave_1: entered promiscuous mode [ 217.370860][T16577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.396093][T16577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.427786][T16577] team0: Port device team_slave_0 added [ 217.435667][T16577] team0: Port device team_slave_1 added [ 217.442581][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5202'. [ 217.467741][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5202'. [ 217.477114][T16577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.484147][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.510377][T16577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.569633][T16577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.576764][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.602804][T16577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.656403][T16577] hsr_slave_0: entered promiscuous mode [ 217.667882][T16577] hsr_slave_1: entered promiscuous mode [ 217.676603][T16577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.684348][T16577] Cannot create hsr debugfs directory [ 218.034588][T16577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.043733][T16577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.052953][T16577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.067178][T16577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.127419][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.134720][T16577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.142192][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.149319][T16577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.215193][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.223156][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.243333][T16577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.256910][T16577] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.278029][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.285292][ T7455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.316706][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.323851][ T7455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.351420][T16664] -1: renamed from syzkaller0 [ 218.447498][T16577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.607987][T16577] veth0_vlan: entered promiscuous mode [ 218.616643][T16577] veth1_vlan: entered promiscuous mode [ 218.644725][T16577] veth0_macvtap: entered promiscuous mode [ 218.657878][T16577] veth1_macvtap: entered promiscuous mode [ 218.679234][T16577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.692711][T16577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.705610][T16577] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.714522][T16577] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.723393][T16577] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.732241][T16577] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.829983][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5233'. [ 218.871520][T16701] SELinux: failed to load policy [ 218.890776][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5235'. [ 218.916139][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5235'. [ 218.947074][T16716] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5242'. [ 218.958298][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5235'. [ 218.983213][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5235'. [ 219.000984][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5235'. [ 219.021209][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5235'. [ 219.101863][T16736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.112086][T16737] loop5: detected capacity change from 0 to 512 [ 219.112752][T16736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.130585][T16737] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.5250: corrupted in-inode xattr: e_name out of bounds [ 219.145752][T16737] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.5250: couldn't read orphan inode 15 (err -117) [ 219.163786][T16737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.188423][T16577] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.695973][T16753] $Hÿ: renamed from bond0 (while UP) [ 219.717725][T16753] $Hÿ: entered promiscuous mode [ 219.722855][T16753] bond_slave_0: entered promiscuous mode [ 219.728914][T16753] bond_slave_1: entered promiscuous mode [ 219.791371][T16760] bridge0: port 3($Hÿ) entered blocking state [ 219.797880][T16760] bridge0: port 3($Hÿ) entered disabled state [ 219.806030][T16760] $Hÿ: entered allmulticast mode [ 219.811204][T16760] bond_slave_0: entered allmulticast mode [ 219.817131][T16760] bond_slave_1: entered allmulticast mode [ 219.826779][T16760] $Hÿ: left allmulticast mode [ 219.831726][T16760] bond_slave_0: left allmulticast mode [ 219.837325][T16760] bond_slave_1: left allmulticast mode [ 219.842994][T16760] bridge0: port 3($Hÿ) entered disabled state [ 219.845718][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5258'. [ 219.858691][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5258'. [ 220.199054][T16789] $Hÿ: renamed from bond0 [ 220.209240][T16789] $Hÿ: entered promiscuous mode [ 220.214491][T16789] bond_slave_0: entered promiscuous mode [ 220.220242][T16789] bond_slave_1: entered promiscuous mode [ 221.099857][T16859] tipc: Started in network mode [ 221.104959][T16859] tipc: Node identity 68a, cluster identity 4711 [ 221.111474][T16859] tipc: Node number set to 1674 [ 221.117009][T16859] tipc: Cannot configure node identity twice [ 221.155410][T16865] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 221.302318][T16878] sctp: [Deprecated]: syz.0.5309 (pid 16878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.302318][T16878] Use struct sctp_sack_info instead [ 222.009446][T16891] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 222.106403][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 222.106419][ T29] audit: type=1400 audit(1749460774.966:8439): avc: denied { bind } for pid=16898 comm="syz.3.5317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.138261][T16899] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.149822][ T29] audit: type=1400 audit(1749460774.986:8440): avc: denied { setopt } for pid=16898 comm="syz.3.5317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.207960][T16899] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.238636][ T29] audit: type=1326 audit(1749460775.096:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.0.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 222.262249][ T29] audit: type=1326 audit(1749460775.096:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.0.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 222.287785][ T29] audit: type=1326 audit(1749460775.146:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.0.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 222.311400][ T29] audit: type=1326 audit(1749460775.146:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.0.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 222.334961][ T29] audit: type=1326 audit(1749460775.146:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.0.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 222.359619][ T29] audit: type=1326 audit(1749460775.216:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.0.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 222.397405][ T29] audit: type=1326 audit(1749460775.236:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.0.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 222.421014][ T29] audit: type=1326 audit(1749460775.236:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.0.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4026e929 code=0x7ffc0000 [ 222.431512][T16910] syzkaller0: entered promiscuous mode [ 222.450121][T16910] syzkaller0: entered allmulticast mode [ 222.458910][T16899] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.474047][T16908] pim6reg1: entered promiscuous mode [ 222.479479][T16908] pim6reg1: entered allmulticast mode [ 222.506052][T16899] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.608001][T16899] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.633658][T16899] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.657356][T16899] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.669035][T16929] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.677850][T16929] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.686677][T16929] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.695657][T16929] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.708865][T16929] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.717924][T16929] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.726990][T16929] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.736005][T16929] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.753224][T16899] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.896880][T16943] ipvlan2: entered promiscuous mode [ 223.063229][T16960] infiniband syz!: set down [ 223.067924][T16960] infiniband syz!: added team_slave_0 [ 223.110190][T16960] RDS/IB: syz!: added [ 223.116352][T16960] smc: adding ib device syz! with port count 1 [ 223.123691][T16960] smc: ib device syz! port 1 has pnetid [ 223.267081][T16978] syz_tun: entered allmulticast mode [ 223.277940][T16976] syz_tun: left allmulticast mode [ 223.296787][T16979] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 223.303445][T16979] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 223.311111][T16979] vhci_hcd vhci_hcd.0: Device attached [ 223.343739][T16980] vhci_hcd: connection closed [ 223.348375][ T7485] vhci_hcd: stop threads [ 223.357889][ T7485] vhci_hcd: release socket [ 223.362348][ T7485] vhci_hcd: disconnect device [ 223.480509][T16993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.529153][T16993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.689841][T17010] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 223.863608][T17018] __nla_validate_parse: 7 callbacks suppressed [ 223.863627][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5368'. [ 223.885227][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5368'. [ 223.907866][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5368'. [ 223.927026][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5368'. [ 223.984615][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5368'. [ 224.014352][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5368'. [ 224.153046][T17028] SELinux: failed to load policy [ 224.330238][T17040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5377'. [ 224.446843][T17058] program syz.4.5385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.448972][T17056] ipvlan2: entered promiscuous mode [ 224.461374][T17056] ipvlan2: entered allmulticast mode [ 224.467032][T17056] macvlan0: entered allmulticast mode [ 224.509915][T17062] ipvlan2: entered promiscuous mode [ 224.517578][T17062] bridge0: port 3(ipvlan2) entered blocking state [ 224.524189][T17062] bridge0: port 3(ipvlan2) entered disabled state [ 224.536916][T17062] ipvlan2: entered allmulticast mode [ 224.538488][T17068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.542311][T17062] bridge0: entered allmulticast mode [ 224.550994][T17068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.571486][T17062] ipvlan2: left allmulticast mode [ 224.576833][T17062] bridge0: left allmulticast mode [ 224.589134][T17066] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5389'. [ 225.550073][T17127] smc: net device bond0 applied user defined pnetid SYZ0 [ 225.559144][T17127] smc: net device bond0 erased user defined pnetid SYZ0 [ 225.699339][T17136] netlink: 'syz.3.5419': attribute type 62 has an invalid length. [ 225.984029][T17147] ipvlan3: entered promiscuous mode [ 225.993629][T17147] bridge0: port 3(ipvlan3) entered blocking state [ 226.000171][T17147] bridge0: port 3(ipvlan3) entered disabled state [ 226.008500][T17147] ipvlan3: entered allmulticast mode [ 226.014728][T17147] ipvlan3: left allmulticast mode [ 226.414242][T17171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.589950][T17171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.677979][T17171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.777644][T17171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.853620][T17171] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.870193][T17171] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.900360][T17171] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.914679][T17171] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.164320][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 227.164337][ T29] audit: type=1400 audit(1749460780.016:8544): avc: denied { getopt } for pid=17198 comm="syz.6.5445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.246825][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5447'. [ 227.358305][ T29] audit: type=1400 audit(1749460780.216:8545): avc: denied { listen } for pid=17206 comm="syz.6.5450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.423870][ T29] audit: type=1326 audit(1749460780.276:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17208 comm="syz.6.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 227.447565][ T29] audit: type=1326 audit(1749460780.276:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17208 comm="syz.6.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 227.471272][ T29] audit: type=1326 audit(1749460780.276:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17208 comm="syz.6.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 227.494793][ T29] audit: type=1326 audit(1749460780.276:8549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17208 comm="syz.6.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 227.518384][ T29] audit: type=1326 audit(1749460780.276:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17208 comm="syz.6.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 227.542044][ T29] audit: type=1326 audit(1749460780.276:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17208 comm="syz.6.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 227.565698][ T29] audit: type=1326 audit(1749460780.276:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17208 comm="syz.6.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 227.589267][ T29] audit: type=1326 audit(1749460780.276:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17208 comm="syz.6.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 227.626439][T17213] all: renamed from lo [ 227.702915][T17223] netlink: 'syz.5.5457': attribute type 8 has an invalid length. [ 227.819212][T17238] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.921503][T17255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5470'. [ 227.953513][T17227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.047312][T17266] smc: net device bond0 applied user defined pnetid SYZ0 [ 228.055413][T17266] smc: net device bond0 erased user defined pnetid SYZ0 [ 228.081408][T17272] netlink: 'syz.4.5478': attribute type 11 has an invalid length. [ 228.126798][T17278] xt_connbytes: Forcing CT accounting to be enabled [ 228.169264][T17278] Cannot find set identified by id 0 to match [ 228.578645][ T9000] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.586408][ T9000] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.594086][ T9000] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.601690][ T9000] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.609036][ T9000] rtc rtc0: __rtc_set_alarm: err=-22 [ 228.972005][T17291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.981636][T17287] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.041813][T17287] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.108434][T17287] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.195392][T17287] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.249193][T17333] atomic_op ffff8881112ab928 conn xmit_atomic 0000000000000000 [ 229.258571][T17332] syzkaller1: entered promiscuous mode [ 229.264114][T17332] syzkaller1: entered allmulticast mode [ 229.298495][T17287] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.312228][T17287] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.327910][T17287] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.344316][T17287] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.477500][T17344] wireguard1: entered promiscuous mode [ 229.500630][T17347] __nla_validate_parse: 3 callbacks suppressed [ 229.500647][T17347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5513'. [ 229.666514][T17367] loop5: detected capacity change from 0 to 512 [ 229.674347][T17367] EXT4-fs: Ignoring removed orlov option [ 229.682375][T17367] EXT4-fs: inline encryption not supported [ 229.694029][T17367] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.5521: corrupted in-inode xattr: invalid ea_ino [ 229.710417][T17367] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.5521: couldn't read orphan inode 15 (err -117) [ 229.723002][T17367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.739040][T17367] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5521: bg 0: block 411: padding at end of block bitmap is not set [ 229.753819][T17367] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 229.763042][T17367] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5521: invalid indirect mapped block 234881024 (level 0) [ 229.803124][T16577] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.077308][T17380] chnl_net:caif_netlink_parms(): no params data found [ 230.145788][T17380] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.152959][T17380] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.178159][T17380] bridge_slave_0: entered allmulticast mode [ 230.189730][T17380] bridge_slave_0: entered promiscuous mode [ 230.205878][T17380] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.213003][T17380] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.229274][T17380] bridge_slave_1: entered allmulticast mode [ 230.236069][T17380] bridge_slave_1: entered promiscuous mode [ 230.256805][T17380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.268375][T17380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.290595][T17435] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5547'. [ 230.301524][T17380] team0: Port device team_slave_0 added [ 230.311395][T17380] team0: Port device team_slave_1 added [ 230.367174][T17380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.374246][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.400570][T17380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.427236][T17380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.434250][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.460322][T17380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.554873][T17380] hsr_slave_0: entered promiscuous mode [ 230.566602][T17380] hsr_slave_1: entered promiscuous mode [ 230.587761][T17380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.596756][T17380] Cannot create hsr debugfs directory [ 230.675367][T17453] loop5: detected capacity change from 0 to 128 [ 230.682355][T17380] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.683960][T17453] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.704789][T17453] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.769513][T16577] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.779971][T17380] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.816046][T17380] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.875889][T17380] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.969946][T17380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.981839][T17380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.997114][T17380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.017393][T17380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.085542][T17380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.107897][T17380] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.130352][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.137530][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.160243][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.167382][ T7445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.265130][T17499] net_ratelimit: 26 callbacks suppressed [ 231.265147][T17499] netlink: zone id is out of range [ 231.271817][T17502] loop5: detected capacity change from 0 to 164 [ 231.276135][T17499] netlink: zone id is out of range [ 231.287693][T17499] netlink: zone id is out of range [ 231.290548][T17502] syz.5.5571: attempt to access beyond end of device [ 231.290548][T17502] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 231.292809][T17499] netlink: zone id is out of range [ 231.311931][T17499] netlink: zone id is out of range [ 231.315667][T17502] syz.5.5571: attempt to access beyond end of device [ 231.315667][T17502] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 231.317178][T17499] netlink: zone id is out of range [ 231.335903][T17499] netlink: zone id is out of range [ 231.341049][T17499] netlink: zone id is out of range [ 231.346237][T17499] netlink: zone id is out of range [ 231.351375][T17499] netlink: zone id is out of range [ 231.392611][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.400202][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.402416][T17380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.407672][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.414689][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.429653][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.437223][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.439223][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5574'. [ 231.444659][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.444690][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.444718][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.475996][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.483417][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.490887][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.498395][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.505848][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.520467][ T7448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.524772][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.537731][ T9001] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 231.565954][ T9001] hid-generic 0006:0000:0000.0016: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 231.587786][ T7448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.637210][T17521] loop5: detected capacity change from 0 to 256 [ 231.666038][ T7448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.718462][T17530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.731858][T17530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.745615][T17380] veth0_vlan: entered promiscuous mode [ 231.761954][ T7448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.788606][T17380] veth1_vlan: entered promiscuous mode [ 231.835973][T17380] veth0_macvtap: entered promiscuous mode [ 231.879983][T17380] veth1_macvtap: entered promiscuous mode [ 231.937121][T17380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.959696][ T7448] bridge_slave_1: left allmulticast mode [ 231.965839][ T7448] bridge_slave_1: left promiscuous mode [ 231.971847][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.017860][ T7448] bridge_slave_0: left allmulticast mode [ 232.023727][ T7448] bridge_slave_0: left promiscuous mode [ 232.029589][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.187256][ T7448] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.196132][ T7448] bond_slave_0: left promiscuous mode [ 232.202978][ T7448] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.215910][ T7448] bond_slave_1: left promiscuous mode [ 232.222211][ T7448] $Hÿ (unregistering): Released all slaves [ 232.245161][T17380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.254947][T17380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.263796][T17380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.272656][T17380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.281515][T17380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.345242][ T7448] hsr_slave_0: left promiscuous mode [ 232.352718][ T7448] hsr_slave_1: left promiscuous mode [ 232.358757][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.366305][ T7448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.374912][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.382505][ T7448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.393929][ T7448] veth1_macvtap: left promiscuous mode [ 232.399490][ T7448] veth0_macvtap: left promiscuous mode [ 232.405118][ T7448] veth1_vlan: left promiscuous mode [ 232.410514][ T7448] veth0_vlan: left promiscuous mode [ 232.482659][ T7448] team0 (unregistering): Port device team_slave_1 removed [ 232.492716][ T7448] team0 (unregistering): Port device team_slave_0 removed [ 232.534565][T17556] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5591'. [ 232.596478][T17514] chnl_net:caif_netlink_parms(): no params data found [ 232.624885][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 232.624901][ T29] audit: type=1400 audit(1749460785.486:8654): avc: denied { write } for pid=17380 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_acl_exec_t:s0" [ 232.673813][ T29] audit: type=1400 audit(1749460785.486:8655): avc: denied { open } for pid=17380 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_acl_exec_t:s0" [ 232.757943][T17580] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5599'. [ 232.793748][T17514] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.801051][T17514] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.846288][T17514] bridge_slave_0: entered allmulticast mode [ 232.857574][T17514] bridge_slave_0: entered promiscuous mode [ 232.890410][T17514] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.897659][T17514] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.907410][T17514] bridge_slave_1: entered allmulticast mode [ 232.913983][T17514] bridge_slave_1: entered promiscuous mode [ 232.977339][T17514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.997806][T17514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.019614][ T29] audit: type=1400 audit(1749460785.876:8656): avc: denied { mounton } for pid=17599 comm="syz.6.5606" path="/proc/1555/task" dev="proc" ino=54508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 233.073181][T17514] team0: Port device team_slave_0 added [ 233.081454][T17514] team0: Port device team_slave_1 added [ 233.101208][T17514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.108275][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.113810][ T29] audit: type=1326 audit(1749460785.976:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.5609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 233.134399][T17514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.157824][ T29] audit: type=1326 audit(1749460785.976:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.5609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 233.205330][ T29] audit: type=1326 audit(1749460786.056:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.5609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 233.212328][T17514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.229062][ T29] audit: type=1326 audit(1749460786.056:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.5609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 233.235951][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.236032][T17514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.296295][ T29] audit: type=1326 audit(1749460786.056:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.5609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 233.319861][ T29] audit: type=1326 audit(1749460786.056:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.5609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 233.343478][ T29] audit: type=1326 audit(1749460786.056:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.5609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c64c9e929 code=0x7ffc0000 [ 233.394016][T17514] hsr_slave_0: entered promiscuous mode [ 233.402738][T17514] hsr_slave_1: entered promiscuous mode [ 233.428411][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5611'. [ 233.459888][T17614] syzkaller0: entered promiscuous mode [ 233.465525][T17614] syzkaller0: entered allmulticast mode [ 233.477268][T17614] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 233.613432][T17629] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.5618'. [ 233.651394][T17632] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.5616'. [ 233.660820][T17632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5616'. [ 233.680183][T17631] SELinux: ebitmap: truncated map [ 233.688909][T17631] SELinux: failed to load policy [ 233.818502][T17514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.832929][T17514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.844561][T17514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.855936][T17514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.957718][T17514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.972603][T17514] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.983115][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.990257][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.002223][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.009315][ T7445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.073503][T17514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.139297][T17514] veth0_vlan: entered promiscuous mode [ 234.147937][T17514] veth1_vlan: entered promiscuous mode [ 234.163344][T17514] veth0_macvtap: entered promiscuous mode [ 234.170689][T17514] veth1_macvtap: entered promiscuous mode [ 234.182515][T17514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.193873][T17514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.203240][T17514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.212039][T17514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.220958][T17514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.229747][T17514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.286713][T17692] ref_ctr_offset mismatch. inode: 0xe0a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 234.330822][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5643'. [ 234.492022][T17709] netlink: 'syz.5.5639': attribute type 4 has an invalid length. [ 234.515346][T17709] netlink: 'syz.5.5639': attribute type 4 has an invalid length. [ 234.569438][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5642'. [ 234.648738][T17724] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.5647'. [ 234.658013][T17724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5647'. [ 234.978083][T17755] loop5: detected capacity change from 0 to 512 [ 234.997063][T17755] EXT4-fs: Ignoring removed orlov option [ 235.009017][T17755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.024515][T17755] EXT4-fs (loop5): orphan cleanup on readonly fs [ 235.040409][T17755] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5661: bg 0: block 248: padding at end of block bitmap is not set [ 235.064614][T17755] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5661: Failed to acquire dquot type 1 [ 235.075935][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5666'. [ 235.091039][T17755] EXT4-fs (loop5): 1 truncate cleaned up [ 235.111742][T17755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.135668][T17771] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 235.217240][T16577] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.233477][T17776] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 235.264322][T17780] loop5: detected capacity change from 0 to 1024 [ 235.304607][T17780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.392585][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5674'. [ 235.480147][T17798] bridge0: port 3(ipvlan2) entered blocking state [ 235.486882][T17798] bridge0: port 3(ipvlan2) entered disabled state [ 235.524074][T17798] ipvlan2: entered allmulticast mode [ 235.529572][T17798] bridge0: entered allmulticast mode [ 235.545924][T17798] ipvlan2: left allmulticast mode [ 235.551048][T17798] bridge0: left allmulticast mode [ 235.873863][ T7460] ================================================================== [ 235.882024][ T7460] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 235.891538][ T7460] [ 235.893897][ T7460] write to 0xffff8881336422b3 of 1 bytes by task 17780 on cpu 0: [ 235.901647][ T7460] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 235.907589][ T7460] generic_perform_write+0x2c2/0x490 [ 235.912917][ T7460] ext4_buffered_write_iter+0x1ee/0x3c0 [ 235.918510][ T7460] ext4_file_write_iter+0xdbf/0xf00 [ 235.923747][ T7460] iter_file_splice_write+0x5f2/0x970 [ 235.929171][ T7460] direct_splice_actor+0x156/0x2a0 [ 235.934334][ T7460] splice_direct_to_actor+0x312/0x680 [ 235.939765][ T7460] do_splice_direct+0xda/0x150 [ 235.944585][ T7460] do_sendfile+0x380/0x650 [ 235.949040][ T7460] __x64_sys_sendfile64+0x105/0x150 [ 235.954264][ T7460] x64_sys_call+0xb39/0x2fb0 [ 235.958878][ T7460] do_syscall_64+0xd2/0x200 [ 235.963395][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.969309][ T7460] [ 235.971640][ T7460] read to 0xffff888133642000 of 1024 bytes by task 7460 on cpu 1: [ 235.979461][ T7460] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 235.985375][ T7460] generic_perform_write+0x2c2/0x490 [ 235.990685][ T7460] shmem_file_write_iter+0xc5/0xf0 [ 235.995811][ T7460] lo_rw_aio+0x6ea/0x7a0 [ 236.000064][ T7460] loop_process_work+0x52d/0xa60 [ 236.005042][ T7460] loop_workfn+0x31/0x40 [ 236.009297][ T7460] process_scheduled_works+0x4cb/0x9d0 [ 236.014781][ T7460] worker_thread+0x582/0x770 [ 236.019397][ T7460] kthread+0x486/0x510 [ 236.023477][ T7460] ret_from_fork+0xda/0x150 [ 236.027996][ T7460] ret_from_fork_asm+0x1a/0x30 [ 236.032780][ T7460] [ 236.035110][ T7460] Reported by Kernel Concurrency Sanitizer on: [ 236.041284][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: kworker/u8:33 Tainted: G W 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 236.053809][ T7460] Tainted: [W]=WARN [ 236.057621][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.067690][ T7460] Workqueue: loop5 loop_workfn [ 236.072471][ T7460] ================================================================== [ 236.102168][T17813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5683'. [ 236.146328][T16577] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.