last executing test programs: 3m34.757843269s ago: executing program 32 (id=3858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) utime(&(0x7f0000000100)='./file0\x00', 0x0) 3m34.506049449s ago: executing program 33 (id=3860): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2e, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m25.174906245s ago: executing program 34 (id=7008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 2m13.67238024s ago: executing program 35 (id=7574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000140)=0x0) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x100, r0, 0x0}]) 1m57.530674548s ago: executing program 36 (id=8363): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x38}, 0x2}, 0x24000895) 50.375989758s ago: executing program 8 (id=11481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80000) 50.287990305s ago: executing program 8 (id=11487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x26c, @remote, 0x10}]}, &(0x7f0000000140)=0x10) 49.871582159s ago: executing program 37 (id=11502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)) 49.421964085s ago: executing program 8 (id=11518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 49.387552788s ago: executing program 8 (id=11520): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 49.357635431s ago: executing program 8 (id=11522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000300)="$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") syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) 49.128539639s ago: executing program 8 (id=11528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000400)=@req={0x3fd, 0xfffffffe, 0x0, 0x2}, 0x10) close(r2) 49.11275595s ago: executing program 38 (id=11528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000400)=@req={0x3fd, 0xfffffffe, 0x0, 0x2}, 0x10) close(r2) 43.277256149s ago: executing program 4 (id=11689): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000180)=0xfffeffff, 0x4) 43.241175723s ago: executing program 4 (id=11692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 43.070289686s ago: executing program 4 (id=11702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0f, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r2, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0) 43.02177388s ago: executing program 4 (id=11704): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 42.976420663s ago: executing program 4 (id=11707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000f80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="140000005200"], &(0x7f0000000000), 0x0) 42.747191882s ago: executing program 4 (id=11715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x14048841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 42.746955732s ago: executing program 39 (id=11715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x14048841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.66179683s ago: executing program 2 (id=12662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 16.611069834s ago: executing program 2 (id=12654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 16.553448849s ago: executing program 2 (id=12656): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 16.482498454s ago: executing program 2 (id=12658): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) 16.454077056s ago: executing program 2 (id=12659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) 15.935765488s ago: executing program 2 (id=12683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 15.91130175s ago: executing program 40 (id=12683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 9.350018568s ago: executing program 5 (id=12847): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000800000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) setitimer(0x2, &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) 9.173925362s ago: executing program 5 (id=12849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 9.102163288s ago: executing program 5 (id=12850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 9.053192832s ago: executing program 5 (id=12852): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 9.003196486s ago: executing program 5 (id=12855): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[], 0xd4}}, 0xc840) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 8.424721352s ago: executing program 5 (id=12864): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000140), 0x3, 0x4fa, &(0x7f0000000640)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 8.424551572s ago: executing program 41 (id=12864): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000140), 0x3, 0x4fa, &(0x7f0000000640)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 6.891424195s ago: executing program 6 (id=12916): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) 6.873953707s ago: executing program 6 (id=12917): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1bd}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.83687463s ago: executing program 6 (id=12918): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e3000007f00ee58c3b213130c36deb87a62f94328dd66eb824097979bd90cb8b44e6e1592b6da8736135fabc342bb167a276bcca186c0b5e71b7f8b07018935572b1b81f4246b9d02e9cb3d6c0eb75a30cf778c45513aae6d3c54bda223da9f6282cf37f8db3a44cd09f41832a189a7ccd9411e91096a55242c7dc9a9bcb4cc1d70320a46d6989e8913fd81b2169738e03e224d30d721c7cc1bc3a8a0e8967f7f9b3f7c135a"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 6.192327412s ago: executing program 6 (id=12934): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,utf8=1,utf8\x00\x00,utf8=1,shortname=win95,errors=remount-ro,uni_xlate=1,\x00'], 0x3, 0x236, &(0x7f0000000380)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='K', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008014) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 6.042654084s ago: executing program 6 (id=12939): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 5.502829277s ago: executing program 6 (id=12957): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) 5.480154479s ago: executing program 42 (id=12957): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) 1.348937271s ago: executing program 0 (id=13043): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x8d14, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1.142639008s ago: executing program 9 (id=13051): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.105145121s ago: executing program 9 (id=13053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000"], 0x58}}, 0x0) 1.084463423s ago: executing program 7 (id=13056): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) 1.040736746s ago: executing program 7 (id=13057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 1.029125187s ago: executing program 9 (id=13058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 1.006847678s ago: executing program 7 (id=13059): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x244) 964.887262ms ago: executing program 7 (id=13061): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 964.332612ms ago: executing program 9 (id=13062): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 911.426787ms ago: executing program 9 (id=13063): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e24, @rand_addr=0x5}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)='^', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x8, 0x7, 0x2, 0x0, 0x6c6d, 0x8, 0x0, 0xff}, 0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000640)={0x0, 0x51}, &(0x7f0000000680)=0x8) 792.408866ms ago: executing program 7 (id=13066): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 515.176218ms ago: executing program 3 (id=13069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 480.770841ms ago: executing program 3 (id=13070): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 470.423542ms ago: executing program 0 (id=13072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) 434.801175ms ago: executing program 3 (id=13073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3933dabd7000000000781500"], 0x30}}, 0x0) 341.883952ms ago: executing program 7 (id=13074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 341.678892ms ago: executing program 43 (id=13074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 316.232684ms ago: executing program 1 (id=13077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 304.661175ms ago: executing program 3 (id=13078): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x34, r3, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 266.584358ms ago: executing program 1 (id=13079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0x1}, @sack_perm, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 250.54185ms ago: executing program 0 (id=13080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 241.97409ms ago: executing program 3 (id=13081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 225.088822ms ago: executing program 1 (id=13082): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x100000007f, 0x442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000000200, 0x4, 0x9, 0x0, 0x400000a, 0xfffc, 0x0, 0x5, 0x0, 0x63}, 0x0, 0x1, r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x0) 205.584483ms ago: executing program 0 (id=13083): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x50, 0x4}, 0x4, 0x10000, 0xc, 0x1, 0x6, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000200)={&(0x7f0000000380)=""/112, 0x70}) 195.671614ms ago: executing program 1 (id=13084): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 174.790716ms ago: executing program 3 (id=13085): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_usbip_server_init(0x2) 155.990417ms ago: executing program 0 (id=13086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 135.005549ms ago: executing program 0 (id=13087): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 47.549746ms ago: executing program 1 (id=13088): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00a80a00000c001600fed0000000000000060001000400000008000b"], 0x40}}, 0x0) 42.823586ms ago: executing program 9 (id=13089): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 0s ago: executing program 1 (id=13090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001f000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29137 comm="syz.6.11021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 270.011714][ T29] audit: type=1326 audit(1755168500.795:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29137 comm="syz.6.11021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 270.031187][T29148] loop8: detected capacity change from 0 to 512 [ 270.035519][ T29] audit: type=1326 audit(1755168500.795:11940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29137 comm="syz.6.11021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 270.052295][T29148] EXT4-fs: Ignoring removed orlov option [ 270.065593][ T29] audit: type=1400 audit(1755168500.795:11941): avc: denied { kexec_image_load } for pid=29137 comm="syz.6.11021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 270.065623][ T29] audit: type=1326 audit(1755168500.795:11942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29137 comm="syz.6.11021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 270.086526][T29148] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 270.091457][ T29] audit: type=1326 audit(1755168500.815:11943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29137 comm="syz.6.11021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 270.147170][ T29] audit: type=1400 audit(1755168500.855:11944): avc: denied { audit_write } for pid=29142 comm="syz.1.11024" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 270.168826][ T29] audit: type=1107 audit(1755168500.855:11945): pid=29142 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 270.182388][ T29] audit: type=1400 audit(1755168500.865:11946): avc: denied { read write } for pid=29136 comm="syz.8.11022" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 270.200540][T29148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 270.206863][ T29] audit: type=1400 audit(1755168500.865:11947): avc: denied { open } for pid=29136 comm="syz.8.11022" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 270.216276][T29148] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.11027: corrupted in-inode xattr: e_value size too large [ 270.264691][T29148] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.11027: couldn't read orphan inode 15 (err -117) [ 270.277396][T29148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.345592][T21288] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.458727][T29183] rdma_op ffff8881311d4980 conn xmit_rdma 0000000000000000 [ 271.576147][T29345] __nla_validate_parse: 3 callbacks suppressed [ 271.576164][T29345] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11116'. [ 271.591488][T29345] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11116'. [ 271.593978][ C0] net_ratelimit: 5 callbacks suppressed [ 271.593996][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.600589][T29345] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11116'. [ 271.660394][T29349] bond2: entered promiscuous mode [ 271.665539][T29349] bond2: entered allmulticast mode [ 271.682921][T29349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.692145][T29349] bond2 (unregistering): Released all slaves [ 271.703249][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11118'. [ 271.712372][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11118'. [ 271.753609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.760589][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.374818][T29428] loop9: detected capacity change from 0 to 512 [ 272.384548][T29428] EXT4-fs (loop9): orphan cleanup on readonly fs [ 272.391425][T29428] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11155: bg 0: block 248: padding at end of block bitmap is not set [ 272.407513][T29428] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.11155: Failed to acquire dquot type 1 [ 272.420754][T29428] EXT4-fs (loop9): 1 truncate cleaned up [ 272.429952][T29428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.498767][T23054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.633217][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.793087][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.800095][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.057760][T29497] netlink: 256 bytes leftover after parsing attributes in process `syz.6.11187'. [ 273.086499][T29501] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 273.461258][T29513] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.11192'. [ 273.471218][T29512] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.11192'. [ 273.580333][T29531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11201'. [ 273.672625][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.787496][T29568] GUP no longer grows the stack in syz.9.11215 (29568): 200000004000-20000000a000 (200000002000) [ 273.798195][T29568] CPU: 1 UID: 0 PID: 29568 Comm: syz.9.11215 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 273.798233][T29568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.798254][T29568] Call Trace: [ 273.798262][T29568] [ 273.798272][T29568] __dump_stack+0x1d/0x30 [ 273.798305][T29568] dump_stack_lvl+0xe8/0x140 [ 273.798338][T29568] dump_stack+0x15/0x1b [ 273.798360][T29568] __get_user_pages+0x198d/0x1fa0 [ 273.798408][T29568] ? __rcu_read_unlock+0x4f/0x70 [ 273.798444][T29568] get_user_pages_remote+0x1d5/0x6d0 [ 273.798514][T29568] __access_remote_vm+0x15c/0x590 [ 273.798551][T29568] access_remote_vm+0x32/0x40 [ 273.798581][T29568] proc_pid_cmdline_read+0x32b/0x6c0 [ 273.798638][T29568] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 273.798696][T29568] vfs_readv+0x3f8/0x690 [ 273.798744][T29568] __x64_sys_preadv+0xfd/0x1c0 [ 273.798774][T29568] x64_sys_call+0x282a/0x2ff0 [ 273.798795][T29568] do_syscall_64+0xd2/0x200 [ 273.798830][T29568] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 273.798860][T29568] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 273.798891][T29568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.798993][T29568] RIP: 0033:0x7f8897ccebe9 [ 273.799012][T29568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.799036][T29568] RSP: 002b:00007f8896737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 273.799097][T29568] RAX: ffffffffffffffda RBX: 00007f8897ef5fa0 RCX: 00007f8897ccebe9 [ 273.799114][T29568] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 273.799157][T29568] RBP: 00007f8897d51e19 R08: 0000000000000000 R09: 0000000000000000 [ 273.799173][T29568] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 273.799206][T29568] R13: 00007f8897ef6038 R14: 00007f8897ef5fa0 R15: 00007ffd95a22df8 [ 273.799232][T29568] [ 273.832580][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.840613][T29570] loop6: detected capacity change from 0 to 512 [ 273.844688][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 274.172746][T29570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.192464][T29570] ext4 filesystem being mounted at /1371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.272094][T29599] sctp: [Deprecated]: syz.9.11226 (pid 29599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.272094][T29599] Use struct sctp_sack_info instead [ 274.328684][T13045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.470716][T29632] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 274.585420][T29649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11249'. [ 274.598099][T29649] bridge0: entered promiscuous mode [ 274.604479][T29649] bridge0: port 3(macvlan2) entered blocking state [ 274.611065][T29649] bridge0: port 3(macvlan2) entered disabled state [ 274.618254][T29649] macvlan2: entered allmulticast mode [ 274.623728][T29649] bridge0: entered allmulticast mode [ 274.633924][T29649] macvlan2: left allmulticast mode [ 274.639061][T29649] bridge0: left allmulticast mode [ 274.645143][T29649] bridge0: left promiscuous mode [ 274.678268][T29659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 274.712192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 274.733330][T29665] netlink: 'syz.5.11255': attribute type 3 has an invalid length. [ 274.990132][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 274.990150][ T29] audit: type=1400 audit(1755168505.857:12216): avc: denied { setopt } for pid=29689 comm="syz.5.11267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 275.037812][ T29] audit: type=1400 audit(1755168505.907:12217): avc: denied { bind } for pid=29695 comm="syz.5.11270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.074499][ T29] audit: type=1400 audit(1755168505.947:12218): avc: denied { mount } for pid=29693 comm="syz.1.11269" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 275.161618][ T29] audit: type=1400 audit(1755168506.027:12219): avc: denied { read write } for pid=29707 comm="syz.9.11275" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 275.187735][ T29] audit: type=1400 audit(1755168506.027:12220): avc: denied { open } for pid=29707 comm="syz.9.11275" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 275.246998][ T29] audit: type=1400 audit(1755168506.107:12221): avc: denied { ioctl } for pid=29711 comm="syz.9.11277" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 275.341765][T29727] loop9: detected capacity change from 0 to 1024 [ 275.348760][T29727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.386541][T29727] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.400584][ T29] audit: type=1326 audit(1755168506.268:12222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.6.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 275.424473][ T29] audit: type=1326 audit(1755168506.268:12223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.6.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 275.449263][ T29] audit: type=1326 audit(1755168506.268:12224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.6.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 275.473034][ T29] audit: type=1326 audit(1755168506.268:12225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29735 comm="syz.6.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 275.498475][T23054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.584842][T29750] siw: device registration error -23 [ 275.661509][T29767] Invalid ELF header magic: != ELF [ 276.277766][ T3368] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 276.286372][ T3368] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.791060][ C0] net_ratelimit: 5 callbacks suppressed [ 276.791076][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.818605][T29871] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 276.825291][T29871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.832870][T29871] vhci_hcd vhci_hcd.0: Device attached [ 276.843942][T29873] vhci_hcd: connection closed [ 276.844203][ T4069] vhci_hcd: stop threads [ 276.853257][ T4069] vhci_hcd: release socket [ 276.857681][ T4069] vhci_hcd: disconnect device [ 276.933663][T29889] __nla_validate_parse: 7 callbacks suppressed [ 276.933683][T29889] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11350'. [ 276.951003][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.957974][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.014115][T29900] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11355'. [ 277.043300][T29905] loop9: detected capacity change from 0 to 128 [ 277.070277][T23054] FAT-fs (loop9): error, invalid access to FAT (entry 0x266f0005) [ 277.078184][T23054] FAT-fs (loop9): Filesystem has been set read-only [ 277.311661][T29939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.357894][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11375'. [ 277.367530][T29946] IPVS: Error joining to the multicast group [ 277.597610][T29990] loop9: detected capacity change from 0 to 512 [ 277.597825][T29988] loop8: detected capacity change from 0 to 1024 [ 277.610674][T29988] EXT4-fs: Ignoring removed orlov option [ 277.638057][T29988] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.652125][T29990] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.669305][T29990] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.687939][T21288] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.696910][T29990] EXT4-fs (loop9): shut down requested (1) [ 277.722367][T23054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.795283][T30020] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 277.830596][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.846798][T30026] pim6reg: entered allmulticast mode [ 277.858181][T30026] pim6reg: left allmulticast mode [ 277.919460][T30034] netlink: 'syz.6.11412': attribute type 21 has an invalid length. [ 277.935186][T30034] netlink: 'syz.6.11412': attribute type 1 has an invalid length. [ 277.943184][T30034] netlink: 144 bytes leftover after parsing attributes in process `syz.6.11412'. [ 277.990015][T30042] siw: device registration error -23 [ 277.990493][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.002267][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.130686][T30053] ref_ctr_offset mismatch. inode: 0x20bc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 278.155633][T30052] netlink: 'syz.6.11421': attribute type 298 has an invalid length. [ 278.489371][T30088] loop6: detected capacity change from 0 to 128 [ 278.532534][T30088] syz.6.11437: attempt to access beyond end of device [ 278.532534][T30088] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 278.548507][T30086] loop9: detected capacity change from 0 to 8192 [ 278.870989][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.029933][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.036870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.112360][T30135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30135 comm=syz.8.11458 [ 279.244279][T30151] netlink: 'syz.6.11466': attribute type 4 has an invalid length. [ 279.252183][T30151] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11466'. [ 279.272023][T30155] bond2: entered promiscuous mode [ 279.277143][T30155] bond2: entered allmulticast mode [ 279.299923][T30155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.348188][T30155] bond2 (unregistering): Released all slaves [ 279.370982][T30151] : renamed from bond0 [ 279.431314][T30170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11475'. [ 279.440556][T30170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11475'. [ 279.478797][T30174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11478'. [ 279.487892][T30174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11478'. [ 279.497434][T30170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11475'. [ 279.530502][T30179] netlink: 'syz.1.11480': attribute type 3 has an invalid length. [ 279.547725][T30183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30183 comm=syz.9.11477 [ 279.560515][T30183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30183 comm=syz.9.11477 [ 279.871811][ T4080] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.909516][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.921738][ T4080] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.990998][ T4080] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.050399][ T4080] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.089515][T30230] macvlan1: entered promiscuous mode [ 280.102245][T30230] ipvlan0: entered promiscuous mode [ 280.117094][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 280.117110][ T29] audit: type=1400 audit(1755168510.990:12491): avc: denied { mounton } for pid=30233 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 280.143859][T30230] ipvlan0: left promiscuous mode [ 280.152471][T30230] macvlan1: left promiscuous mode [ 280.209060][ T4080] bridge_slave_1: left allmulticast mode [ 280.214907][ T4080] bridge_slave_1: left promiscuous mode [ 280.220612][ T4080] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.233404][ T4080] bridge_slave_0: left allmulticast mode [ 280.239134][ T4080] bridge_slave_0: left promiscuous mode [ 280.244886][ T4080] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.327525][ T4080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.336608][ T4080] bond_slave_0: left promiscuous mode [ 280.342881][ T4080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.352215][ T4080] bond_slave_1: left promiscuous mode [ 280.358023][ T4080] bond0 (unregistering): Released all slaves [ 280.425801][ T29] audit: type=1400 audit(1755168511.300:12492): avc: denied { write } for pid=30255 comm="syz.1.11513" path="socket:[92116]" dev="sockfs" ino=92116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 280.485868][ T4080] hsr_slave_0: left promiscuous mode [ 280.492066][ T4080] hsr_slave_1: left promiscuous mode [ 280.559678][ T4080] team0 (unregistering): Port device team_slave_1 removed [ 280.569655][ T4080] team0 (unregistering): Port device team_slave_0 removed [ 280.624387][ T29] audit: type=1400 audit(1755168511.500:12493): avc: denied { mount } for pid=30276 comm="syz.5.11523" name="/" dev="configfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 280.661068][ T29] audit: type=1400 audit(1755168511.520:12494): avc: denied { search } for pid=30276 comm="syz.5.11523" name="/" dev="configfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.699304][ T29] audit: type=1326 audit(1755168511.570:12495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30282 comm="syz.5.11525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 280.723057][ T29] audit: type=1326 audit(1755168511.570:12496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30282 comm="syz.5.11525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 280.746783][ T29] audit: type=1326 audit(1755168511.570:12497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30282 comm="syz.5.11525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 280.877133][T30233] chnl_net:caif_netlink_parms(): no params data found [ 280.925886][T30300] netlink: 'syz.6.11532': attribute type 1 has an invalid length. [ 281.003216][T30233] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.010374][T30233] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.030018][T30233] bridge_slave_0: entered allmulticast mode [ 281.042727][T30233] bridge_slave_0: entered promiscuous mode [ 281.066361][ T4080] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.080936][T30233] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.088066][T30233] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.101169][T30233] bridge_slave_1: entered allmulticast mode [ 281.107796][T30233] bridge_slave_1: entered promiscuous mode [ 281.130237][ T29] audit: type=1326 audit(1755168512.010:12498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.6.11534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 281.154008][ T29] audit: type=1326 audit(1755168512.010:12499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.6.11534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 281.183512][ T4080] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.198973][ T29] audit: type=1326 audit(1755168512.030:12500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.6.11534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 281.199745][T30233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.235873][T30233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.246317][ T4080] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.281837][T30233] team0: Port device team_slave_0 added [ 281.288497][T30233] team0: Port device team_slave_1 added [ 281.295074][ T4080] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.330121][T30233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.337103][T30233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.363157][T30233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.400590][T30233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.407612][T30233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.433653][T30233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.510028][T30233] hsr_slave_0: entered promiscuous mode [ 281.516384][T30233] hsr_slave_1: entered promiscuous mode [ 281.522608][T30233] debugfs: 'hsr0' already exists in 'hsr' [ 281.528373][T30233] Cannot create hsr debugfs directory [ 281.535220][ T4080] bridge_slave_1: left allmulticast mode [ 281.540968][ T4080] bridge_slave_1: left promiscuous mode [ 281.546656][ T4080] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.566017][ T4080] bridge_slave_0: left allmulticast mode [ 281.571790][ T4080] bridge_slave_0: left promiscuous mode [ 281.577499][ T4080] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.697114][ T4080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.713641][ T4080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.725893][ T4080] bond0 (unregistering): Released all slaves [ 281.735285][ T4080] bond1 (unregistering): Released all slaves [ 281.855940][T30296] chnl_net:caif_netlink_parms(): no params data found [ 281.880040][ T4080] hsr_slave_0: left promiscuous mode [ 281.889528][ T4080] hsr_slave_1: left promiscuous mode [ 281.901861][ T4080] dummy0: left allmulticast mode [ 281.906948][ T4080] dummy0: left promiscuous mode [ 281.917340][ T4080] team0: left allmulticast mode [ 281.922344][ T4080] team_slave_0: left allmulticast mode [ 281.927915][ T4080] team_slave_1: left allmulticast mode [ 281.933444][ T4080] team0: left promiscuous mode [ 281.938218][ T4080] team_slave_0: left promiscuous mode [ 281.943761][ T4080] team_slave_1: left promiscuous mode [ 281.988509][ C0] net_ratelimit: 5 callbacks suppressed [ 281.988525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.004368][ T4080] team0 (unregistering): Port device team_slave_1 removed [ 282.021050][ T4080] team0 (unregistering): Port device team_slave_0 removed [ 282.039044][T30362] __nla_validate_parse: 22 callbacks suppressed [ 282.039062][T30362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11555'. [ 282.039119][T30362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11555'. [ 282.067395][T30362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11555'. [ 282.067452][T30362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11555'. [ 282.099689][T30362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11555'. [ 282.128764][T30362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11555'. [ 282.148490][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.148536][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.168684][T30371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11556'. [ 282.168830][T30296] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.185052][T30296] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.209314][T30296] bridge_slave_0: entered allmulticast mode [ 282.210361][T30296] bridge_slave_0: entered promiscuous mode [ 282.226641][T30296] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.226679][T30296] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.226740][T30296] bridge_slave_1: entered allmulticast mode [ 282.227288][T30296] bridge_slave_1: entered promiscuous mode [ 282.254105][T30375] batadv_slave_1: entered promiscuous mode [ 282.255015][T30374] batadv_slave_1: left promiscuous mode [ 282.268139][T30296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.275253][T30296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.312041][T30296] team0: Port device team_slave_0 added [ 282.313299][T30296] team0: Port device team_slave_1 added [ 282.368356][T30296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.368369][T30296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.368444][T30296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.368999][T30296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.369009][T30296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.369087][T30296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.407499][T30233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.491210][T30233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.502845][T30233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.530102][ T4080] IPVS: stop unused estimator thread 0... [ 282.537183][T30296] hsr_slave_0: entered promiscuous mode [ 282.537663][T30296] hsr_slave_1: entered promiscuous mode [ 282.537946][T30296] debugfs: 'hsr0' already exists in 'hsr' [ 282.537961][T30296] Cannot create hsr debugfs directory [ 282.538037][T30233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.677122][T30233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.687940][T30233] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.696602][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.696635][ T4069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.698218][ T4069] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.698253][ T4069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.822901][T30233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.865614][T30296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.876182][T30296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.879034][T30296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.888363][T30296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.954532][T30296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.990702][T30296] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.010556][ T4080] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.017707][ T4080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.027961][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.040284][ T4080] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.047423][ T4080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.071612][T30296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.142602][T30233] veth0_vlan: entered promiscuous mode [ 283.151389][T30233] veth1_vlan: entered promiscuous mode [ 283.167745][T30296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.180671][T30233] veth0_macvtap: entered promiscuous mode [ 283.187885][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.188830][T30233] veth1_macvtap: entered promiscuous mode [ 283.194994][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.209710][T30233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.224576][T30233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.237295][ T4028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.268009][ T4028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.283734][ T4028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.298133][ T4028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.333579][T30479] netlink: 'syz.5.11586': attribute type 3 has an invalid length. [ 283.355184][T30482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11587'. [ 283.377535][T30296] veth0_vlan: entered promiscuous mode [ 283.385598][T30296] veth1_vlan: entered promiscuous mode [ 283.409774][T30296] veth0_macvtap: entered promiscuous mode [ 283.419050][T30296] veth1_macvtap: entered promiscuous mode [ 283.440361][T30296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.452108][T30296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.462768][ T4085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.472074][ T4085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.481346][ T4085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.492252][ T4085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.927094][T30509] netlink: 'syz.0.11595': attribute type 6 has an invalid length. [ 284.018658][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.026184][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.033637][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.043503][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.050986][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.058588][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.066030][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.073510][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.080492][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.087921][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.095364][T12593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 284.106511][T12593] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz1] on syz0 [ 284.227362][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.234380][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.333582][T30544] netlink: 'syz.6.11610': attribute type 27 has an invalid length. [ 284.362022][T30544] : left promiscuous mode [ 284.366537][T30544] bond_slave_0: left promiscuous mode [ 284.372156][T30544] bond_slave_1: left promiscuous mode [ 284.395858][T30544] dummy0: left promiscuous mode [ 284.405705][T30544] bridge2: left promiscuous mode [ 284.410817][T30544] bridge2: left allmulticast mode [ 284.416130][T30544] veth3: left allmulticast mode [ 284.424760][T30546] syzkaller0: entered promiscuous mode [ 284.430341][T30546] syzkaller0: entered allmulticast mode [ 284.742199][T30579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11625'. [ 284.899461][T12593] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.917873][T30585] vhci_hcd: invalid port number 96 [ 284.923094][T30585] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 285.106899][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.165099][T30602] rdma_op ffff888126bd4d80 conn xmit_rdma 0000000000000000 [ 285.314474][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 285.314489][ T29] audit: type=1326 audit(1755168516.193:12630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.356703][ T29] audit: type=1326 audit(1755168516.223:12631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.380048][ T29] audit: type=1326 audit(1755168516.223:12632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.403525][ T29] audit: type=1326 audit(1755168516.223:12633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.426770][ T29] audit: type=1326 audit(1755168516.223:12634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.450012][ T29] audit: type=1326 audit(1755168516.223:12635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.473080][ T29] audit: type=1326 audit(1755168516.223:12636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.496329][ T29] audit: type=1326 audit(1755168516.223:12637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.519429][ T29] audit: type=1326 audit(1755168516.223:12638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.542741][ T29] audit: type=1326 audit(1755168516.223:12639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30617 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 285.768974][T30649] netlink: 'syz.4.11657': attribute type 6 has an invalid length. [ 286.169086][T30679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.172384][T30681] batman_adv: batadv0: Adding interface: dummy0 [ 286.183810][T30681] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.209291][T30679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.227101][T30681] batman_adv: batadv0: Interface activated: dummy0 [ 286.304220][T30690] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 286.319695][T30689] IPVS: stopping master sync thread 30690 ... [ 286.378828][T30695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11677'. [ 286.429455][T30700] usb usb7: usbfs: process 30700 (syz.4.11679) did not claim interface 0 before use [ 286.838386][T30747] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 286.851251][T30747] 0ªî{X¹¦: entered allmulticast mode [ 287.129861][ T4075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.185859][ C0] net_ratelimit: 26 callbacks suppressed [ 287.185876][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.202642][ T4075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.269687][T30780] ref_ctr_offset mismatch. inode: 0x318e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 287.298934][ T4075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.345816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.352820][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.389813][ T4075] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.452296][T30794] netlink: 'syz.5.11723': attribute type 21 has an invalid length. [ 287.475138][ T4075] bridge_slave_1: left allmulticast mode [ 287.480866][ T4075] bridge_slave_1: left promiscuous mode [ 287.486563][ T4075] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.495438][ T4075] bridge_slave_0: left allmulticast mode [ 287.501188][ T4075] bridge_slave_0: left promiscuous mode [ 287.507043][ T4075] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.609048][ T4075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.621417][ T4075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.631613][ T4075] bond0 (unregistering): Released all slaves [ 287.648511][T30794] netlink: 'syz.5.11723': attribute type 1 has an invalid length. [ 287.656376][T30794] __nla_validate_parse: 2 callbacks suppressed [ 287.656394][T30794] netlink: 144 bytes leftover after parsing attributes in process `syz.5.11723'. [ 287.875672][T30807] sd 0:0:1:0: device reset [ 288.011651][ T4075] hsr_slave_0: left promiscuous mode [ 288.026492][ T4075] hsr_slave_1: left promiscuous mode [ 288.035813][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.043267][ T4075] batadv0: mtu less than device minimum [ 288.049249][ T4075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.060196][ T4075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.070875][ T4075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.081678][ T4075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.092410][ T4075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.103278][ T4075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.119649][ T4075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.142218][T30821] sd 0:0:1:0: device reset [ 288.170362][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.185899][ T4075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.201776][ T4075] batman_adv: batadv0: Interface deactivated: dummy0 [ 288.208762][ T4075] batman_adv: batadv0: Removing interface: dummy0 [ 288.245488][ T4075] veth1_macvtap: left promiscuous mode [ 288.251145][ T4075] veth0_macvtap: left promiscuous mode [ 288.261255][ T4075] veth1_vlan: left promiscuous mode [ 288.272446][ T4075] veth0_vlan: left promiscuous mode [ 288.460703][ T4075] team0 (unregistering): Port device team_slave_1 removed [ 288.477360][ T4075] team0 (unregistering): Port device team_slave_0 removed [ 288.550091][T30775] chnl_net:caif_netlink_parms(): no params data found [ 288.582539][T30846] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11742'. [ 288.636683][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11742'. [ 288.722186][T30860] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11748'. [ 288.762286][T30775] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.769568][T30775] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.826746][T30775] bridge_slave_0: entered allmulticast mode [ 288.856947][T30775] bridge_slave_0: entered promiscuous mode [ 288.868609][T30863] netlink: 'syz.6.11749': attribute type 3 has an invalid length. [ 288.892830][T30775] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.899999][T30775] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.935224][T30775] bridge_slave_1: entered allmulticast mode [ 288.947975][T30775] bridge_slave_1: entered promiscuous mode [ 289.025013][T30775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.037041][T30775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.086203][T30878] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 289.140529][T30775] team0: Port device team_slave_0 added [ 289.180758][T30775] team0: Port device team_slave_1 added [ 289.269127][T30775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.276228][T30775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.302264][T30775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.380519][T30775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.387600][T30775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.413687][T30775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.480639][T30775] hsr_slave_0: entered promiscuous mode [ 289.490336][T30775] hsr_slave_1: entered promiscuous mode [ 289.500026][T30775] debugfs: 'hsr0' already exists in 'hsr' [ 289.505867][T30775] Cannot create hsr debugfs directory [ 289.994470][T30775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.002786][T30935] program syz.0.11782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.018060][T30775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.039348][T30775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.094151][T30775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.140421][T30941] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.11783'. [ 290.187192][T30951] loop6: detected capacity change from 0 to 512 [ 290.193742][T30951] EXT4-fs: Ignoring removed bh option [ 290.229775][T30951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.238326][T30951] EXT4-fs (loop6): fragment/cluster size (4096) != block size (2048) [ 290.269940][T30775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.312394][T30775] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.344128][ T4069] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.351427][ T4069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.372212][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 290.372276][ T29] audit: type=1400 audit(1755168521.245:12721): avc: denied { wake_alarm } for pid=30962 comm="syz.1.11791" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 290.400999][T30959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11788'. [ 290.442654][ T29] audit: type=1400 audit(1755168521.315:12722): avc: denied { bind } for pid=30971 comm="syz.1.11803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.471925][T30775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.482372][T30775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.521057][ T29] audit: type=1400 audit(1755168521.375:12723): avc: denied { getopt } for pid=30969 comm="syz.6.11794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.546704][ T4069] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.553933][ T4069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.713124][T30775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.836073][T30992] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 290.849428][T30992] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 290.876444][T30775] veth0_vlan: entered promiscuous mode [ 290.906437][T30775] veth1_vlan: entered promiscuous mode [ 290.947949][T30775] veth0_macvtap: entered promiscuous mode [ 290.957586][T30775] veth1_macvtap: entered promiscuous mode [ 290.995011][T30775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.011617][T30775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.054051][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.087363][ T4028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.122299][ T29] audit: type=1400 audit(1755168521.995:12724): avc: denied { read write } for pid=30775 comm="syz-executor" name="loop2" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.134017][ T4028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.145896][ T29] audit: type=1400 audit(1755168521.995:12725): avc: denied { open } for pid=30775 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.145931][ T29] audit: type=1400 audit(1755168521.995:12726): avc: denied { ioctl } for pid=30775 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=629 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.273216][ T4028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.507009][T31031] veth5: entered promiscuous mode [ 291.546369][ T29] audit: type=1400 audit(1755168522.426:12727): avc: denied { write } for pid=31034 comm="syz.6.11817" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 291.589864][ T29] audit: type=1400 audit(1755168522.466:12728): avc: denied { bind } for pid=31036 comm="syz.1.11818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.750942][ T29] audit: type=1400 audit(1755168522.626:12729): avc: denied { create } for pid=31053 comm="syz.0.11826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 291.772745][ T29] audit: type=1400 audit(1755168522.656:12730): avc: denied { bind } for pid=31053 comm="syz.0.11826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 291.972935][T31085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11841'. [ 291.989182][T31085] IPVS: Error joining to the multicast group [ 292.002331][T31089] program syz.6.11843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.095645][T31103] loop9: detected capacity change from 0 to 7 [ 292.101922][T31103] buffer_io_error: 1175 callbacks suppressed [ 292.101939][T31103] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.123976][T31103] Buffer I/O error on dev loop9, logical block 0, async page read [ 292.131891][T31103] loop9: unable to read partition table [ 292.139389][T31103] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 292.139389][T31103] ) failed (rc=-5) [ 292.157217][T31109] tipc: Started in network mode [ 292.162200][T31109] tipc: Node identity ac14140f, cluster identity 4711 [ 292.189666][T31109] tipc: New replicast peer: 255.255.255.255 [ 292.195836][T31109] tipc: Enabled bearer , priority 10 [ 292.291269][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11857'. [ 292.383278][ C0] net_ratelimit: 46 callbacks suppressed [ 292.383294][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.417218][T31130] bond0: (slave dummy0): Releasing backup interface [ 292.424558][T31120] loop2: detected capacity change from 0 to 8192 [ 292.442142][T31130] bridge_slave_0: left allmulticast mode [ 292.448010][T31130] bridge_slave_0: left promiscuous mode [ 292.453868][T31130] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.479338][T31130] bridge_slave_1: left allmulticast mode [ 292.485095][T31130] bridge_slave_1: left promiscuous mode [ 292.490872][T31130] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.532271][T31130] bond0: (slave bond_slave_0): Releasing backup interface [ 292.542285][T31130] bond0: (slave bond_slave_1): Releasing backup interface [ 292.549650][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.549709][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.570058][T31130] team0: Port device team_slave_0 removed [ 292.577472][T31130] team0: Port device team_slave_1 removed [ 292.585062][T31130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.653962][T31139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.664031][T31139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.730880][T31148] netlink: 'syz.0.11872': attribute type 21 has an invalid length. [ 292.739490][T31148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11872'. [ 293.202875][T12577] tipc: Node number set to 2886997007 [ 293.364068][T31200] loop9: detected capacity change from 0 to 7 [ 293.380643][T31200] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.399280][T31200] Buffer I/O error on dev loop9, logical block 0, async page read [ 293.407330][T31200] loop9: unable to read partition table [ 293.413344][T31200] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 293.413344][T31200] ) failed (rc=-5) [ 293.426675][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.574137][T31217] netlink: 'syz.0.11903': attribute type 298 has an invalid length. [ 293.582685][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.589661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.326134][T31266] netlink: 'syz.2.11926': attribute type 1 has an invalid length. [ 294.366294][T31266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.462245][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.558922][T31254] Set syz1 is full, maxelem 65536 reached [ 294.622147][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.629133][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.926030][T31275] cgroup: fork rejected by pids controller in /syz1 [ 295.332263][T31391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11973'. [ 295.353181][T31391] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11973'. [ 295.711612][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 295.711658][ T29] audit: type=1326 audit(1755168526.568:12824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.741766][ T29] audit: type=1326 audit(1755168526.568:12825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.765483][ T29] audit: type=1326 audit(1755168526.568:12826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.789198][ T29] audit: type=1326 audit(1755168526.568:12827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.813030][ T29] audit: type=1326 audit(1755168526.568:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.836838][ T29] audit: type=1326 audit(1755168526.578:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.840131][T31420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11986'. [ 295.860600][ T29] audit: type=1326 audit(1755168526.578:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.886557][T31420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11986'. [ 295.893324][ T29] audit: type=1326 audit(1755168526.578:12831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.893359][ T29] audit: type=1326 audit(1755168526.578:12832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 295.949630][ T29] audit: type=1326 audit(1755168526.578:12833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31411 comm="syz.5.11983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0725febe9 code=0x7ffc0000 [ 296.113436][T31436] veth3: entered promiscuous mode [ 296.252812][T31460] loop2: detected capacity change from 0 to 1024 [ 296.292162][T31460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 296.317046][T31460] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.393428][T30775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 296.781799][T31500] netlink: 'syz.0.12020': attribute type 1 has an invalid length. [ 296.797841][T31500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.853456][T31507] loop2: detected capacity change from 0 to 512 [ 296.873576][T31507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.888303][T31507] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.992397][T31523] sd 0:0:1:0: device reset [ 297.057938][T30775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.144682][T31545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12039'. [ 297.171561][T31548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12042'. [ 297.182662][T31548] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12042'. [ 297.580664][ C0] net_ratelimit: 7 callbacks suppressed [ 297.580685][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.740605][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.747566][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.783451][T31644] 9pnet_fd: Insufficient options for proto=fd [ 297.918323][T31657] loop6: detected capacity change from 0 to 512 [ 297.942463][T31657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.006326][T31657] ext4 filesystem being mounted at /1533/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.089524][T31646] Set syz1 is full, maxelem 65536 reached [ 298.195538][T13045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.299571][T31685] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 298.474775][T31734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=256 sclass=netlink_audit_socket pid=31734 comm=syz.2.12093 [ 298.563883][T31744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12098'. [ 298.621860][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.754475][T31753] 9pnet: Could not find request transport: f [ 298.781273][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.788286][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.817193][T31756] loop6: detected capacity change from 0 to 512 [ 298.827728][T31756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.858061][T31758] loop2: detected capacity change from 0 to 128 [ 298.866538][T31758] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.878905][T31758] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 298.879187][T31756] EXT4-fs error (device loop6): ext4_quota_enable:7120: comm syz.6.12103: Bad quota inum: 29696, type: 1 [ 298.924032][T31756] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 298.939285][T31758] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.949809][T31758] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.966636][T31756] EXT4-fs (loop6): mount failed [ 298.973747][T30775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.115764][T31781] loop6: detected capacity change from 0 to 2048 [ 299.145860][T31781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.250443][T31781] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.12113: bg 0: block 408: padding at end of block bitmap is not set [ 299.289714][T31781] EXT4-fs (loop6): Remounting filesystem read-only [ 299.388223][T31777] Set syz1 is full, maxelem 65536 reached [ 299.476584][T13045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.526898][T31820] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12127'. [ 299.538925][T31820] netlink: 'syz.6.12127': attribute type 1 has an invalid length. [ 299.546867][T31820] netlink: 'syz.6.12127': attribute type 2 has an invalid length. [ 299.554733][T31820] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12127'. [ 299.659624][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.710665][T31850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12144'. [ 299.819606][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.881679][T31875] batman_adv: batadv0: Adding interface: ipvlan2 [ 299.888078][T31875] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.913700][T31875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.924178][T31875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.935959][T31875] batman_adv: batadv0: Interface activated: ipvlan2 [ 300.662979][T31936] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12160'. [ 300.700781][T31939] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12159'. [ 300.739766][T31934] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12159'. [ 300.856064][T31938] syzkaller0: entered promiscuous mode [ 300.861774][T31938] syzkaller0: entered allmulticast mode [ 300.927325][T31944] bridge_slave_0: left allmulticast mode [ 300.933204][T31944] bridge_slave_0: left promiscuous mode [ 300.939059][T31944] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.957741][T31944] bridge_slave_1: left allmulticast mode [ 300.963475][T31944] bridge_slave_1: left promiscuous mode [ 300.969218][T31944] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.995545][T31944] bond0: (slave bond_slave_0): Releasing backup interface [ 301.005583][T31944] bond0: (slave bond_slave_1): Releasing backup interface [ 301.022538][T31944] team0: Port device team_slave_0 removed [ 301.033119][T31944] team0: Port device team_slave_1 removed [ 301.048986][T31944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.056602][T31944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.077908][T31960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12172'. [ 301.089985][T31944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.097428][T31944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.154165][T31944] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 301.161174][T31944] batman_adv: batadv0: Removing interface: ipvlan2 [ 301.442897][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 301.442916][ T29] audit: type=1326 audit(1755168532.331:12954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.524884][ T29] audit: type=1326 audit(1755168532.331:12955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.548641][ T29] audit: type=1326 audit(1755168532.341:12956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.572349][ T29] audit: type=1326 audit(1755168532.341:12957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.596041][ T29] audit: type=1326 audit(1755168532.341:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.619767][ T29] audit: type=1326 audit(1755168532.341:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.643523][ T29] audit: type=1326 audit(1755168532.341:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.667279][ T29] audit: type=1326 audit(1755168532.341:12961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.690969][ T29] audit: type=1326 audit(1755168532.341:12962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.714786][ T29] audit: type=1326 audit(1755168532.341:12963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31978 comm="syz.1.12179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55aac2ebe9 code=0x7ffc0000 [ 301.764854][T31989] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12184'. [ 301.876422][T31997] netlink: 'syz.2.12189': attribute type 21 has an invalid length. [ 301.912699][T31997] netlink: 'syz.2.12189': attribute type 1 has an invalid length. [ 301.920617][T31997] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12189'. [ 302.091717][T32006] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 302.429741][T32029] 9pnet_fd: Insufficient options for proto=fd [ 302.457026][T32033] ref_ctr_offset mismatch. inode: 0x33ed offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 302.606851][T32043] serio: Serial port ttyS3 [ 302.778081][ C0] net_ratelimit: 7 callbacks suppressed [ 302.778100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.937974][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.945066][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.976565][T32076] netlink: 'syz.5.12226': attribute type 1 has an invalid length. [ 303.387573][T32142] batman_adv: batadv0: Adding interface: ipvlan2 [ 303.394033][T32142] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.419543][T32142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.430187][T32142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.443355][T32142] batman_adv: batadv0: Interface activated: ipvlan2 [ 303.579214][T32159] loop6: detected capacity change from 0 to 128 [ 303.753526][T32178] wireguard1: entered promiscuous mode [ 303.759197][T32178] wireguard1: entered allmulticast mode [ 303.780602][T32183] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 303.817589][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.825699][T32190] macvtap0: refused to change device tx_queue_len [ 303.977478][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.984481][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.036309][T32220] __nla_validate_parse: 2 callbacks suppressed [ 304.036346][T32220] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12270'. [ 304.061048][T32215] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12270'. [ 304.095503][T32230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12276'. [ 304.108603][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12278'. [ 304.116495][T32230] netlink: 312 bytes leftover after parsing attributes in process `syz.6.12276'. [ 304.117676][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12278'. [ 304.136157][T32230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12276'. [ 304.401691][T32270] syzkaller0: entered promiscuous mode [ 304.407355][T32270] syzkaller0: entered allmulticast mode [ 304.581472][T12591] hid_parser_main: 19 callbacks suppressed [ 304.581495][T12591] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 304.595190][T12591] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 304.650426][T12591] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3 [ 304.684972][T32305] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12305'. [ 304.685451][T12591] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 304.706448][T32299] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12305'. [ 304.857050][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.870861][T32326] loop6: detected capacity change from 0 to 2048 [ 304.899949][T32326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.930219][T32333] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 305.016967][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.023972][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.332674][T13045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.509921][T32397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12347'. [ 305.629001][T32406] vhci_hcd: invalid port number 96 [ 305.634201][T32406] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 305.896558][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 306.263528][T32466] wireguard1: entered promiscuous mode [ 306.269233][T32466] wireguard1: entered allmulticast mode [ 306.516434][T32485] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 306.590676][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 306.590694][ T29] audit: type=1400 audit(1755168537.483:13341): avc: denied { create } for pid=32495 comm="syz.5.12391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.630633][ T29] audit: type=1400 audit(1755168537.483:13342): avc: denied { bind } for pid=32495 comm="syz.5.12391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.650230][ T29] audit: type=1326 audit(1755168537.523:13343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.0.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 306.673971][ T29] audit: type=1326 audit(1755168537.523:13344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.0.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 306.703749][ T29] audit: type=1326 audit(1755168537.523:13345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.0.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 306.727545][ T29] audit: type=1326 audit(1755168537.523:13346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.0.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 306.751382][ T29] audit: type=1326 audit(1755168537.523:13347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.0.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 306.817342][ T29] audit: type=1326 audit(1755168537.613:13348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.0.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 306.841269][ T29] audit: type=1326 audit(1755168537.613:13349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.0.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 306.865053][ T29] audit: type=1326 audit(1755168537.613:13350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32498 comm="syz.0.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 306.923344][T32511] netlink: 'syz.6.12399': attribute type 3 has an invalid length. [ 306.984891][T32518] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 307.018636][T32518] SELinux: failed to load policy [ 307.033530][T32515] SELinux: failed to load policy [ 307.451302][T32558] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 307.465228][T32557] hub 2-0:1.0: USB hub found [ 307.475879][T32557] hub 2-0:1.0: 8 ports detected [ 307.975522][ C0] net_ratelimit: 5 callbacks suppressed [ 307.975540][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.090880][T32598] bridge0: entered promiscuous mode [ 308.117082][T32598] bridge0: port 1(macsec0) entered blocking state [ 308.123678][T32598] bridge0: port 1(macsec0) entered disabled state [ 308.135401][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.142369][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.182775][T32598] macsec0: entered allmulticast mode [ 308.188210][T32598] bridge0: entered allmulticast mode [ 308.228765][T32598] macsec0: left allmulticast mode [ 308.233873][T32598] bridge0: left allmulticast mode [ 308.263590][T32598] bridge0: left promiscuous mode [ 308.718717][T32651] ref_ctr_offset mismatch. inode: 0x2496 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 308.776173][T32658] tipc: New replicast peer: 255.255.255.255 [ 308.782429][T32658] tipc: Enabled bearer , priority 10 [ 309.015004][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.167605][T32686] SELinux: failed to load policy [ 309.174882][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.181832][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.212225][T32692] loop6: detected capacity change from 0 to 128 [ 309.222122][T32692] FAT-fs (loop6): Directory bread(block 32) failed [ 309.231099][T32692] FAT-fs (loop6): Directory bread(block 33) failed [ 309.239154][T32692] FAT-fs (loop6): Directory bread(block 34) failed [ 309.247035][T32692] FAT-fs (loop6): Directory bread(block 35) failed [ 309.253733][T32692] FAT-fs (loop6): Directory bread(block 36) failed [ 309.260816][T32692] FAT-fs (loop6): Directory bread(block 37) failed [ 309.268633][T32692] FAT-fs (loop6): Directory bread(block 38) failed [ 309.275703][T32692] FAT-fs (loop6): Directory bread(block 39) failed [ 309.288258][T32692] FAT-fs (loop6): Directory bread(block 40) failed [ 309.295631][T32692] FAT-fs (loop6): Directory bread(block 41) failed [ 309.666407][T32721] sd 0:0:1:0: device reset [ 309.875501][T32736] can0: slcan on ttyS3. [ 309.904673][T32736] can0 (unregistered): slcan off ttyS3. [ 309.911892][T32736] Falling back ldisc for ttyS3. [ 310.054500][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.155845][T32764] __nla_validate_parse: 11 callbacks suppressed [ 310.155967][T32764] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12513'. [ 310.214469][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.221464][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.293658][ T319] netlink: '+}[@': attribute type 10 has an invalid length. [ 310.320435][ T319] team0: Device hsr_slave_0 failed to register rx_handler [ 310.548621][ T342] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12531'. [ 310.730858][ T354] netlink: '+}[@': attribute type 10 has an invalid length. [ 310.753609][ T354] team0: Device hsr_slave_0 failed to register rx_handler [ 310.843220][ T361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12539'. [ 310.853052][ T363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12540'. [ 310.895711][ T363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12540'. [ 310.906917][ T365] netlink: 332 bytes leftover after parsing attributes in process `syz.1.12541'. [ 311.093934][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 311.247841][ T398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12557'. [ 311.649875][ T435] can0: slcan on ttyS3. [ 311.686377][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 311.686445][ T29] audit: type=1326 audit(1755168542.576:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=440 comm="syz.0.12579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 311.727962][ T434] can0 (unregistered): slcan off ttyS3. [ 311.753707][ T29] audit: type=1326 audit(1755168542.576:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=440 comm="syz.0.12579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 311.777387][ T29] audit: type=1326 audit(1755168542.616:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=440 comm="syz.0.12579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 311.801021][ T29] audit: type=1326 audit(1755168542.616:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=440 comm="syz.0.12579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 311.824629][ T29] audit: type=1326 audit(1755168542.616:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=440 comm="syz.0.12579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 311.848191][ T29] audit: type=1326 audit(1755168542.616:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=440 comm="syz.0.12579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 311.871743][ T29] audit: type=1326 audit(1755168542.616:13492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=440 comm="syz.0.12579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 311.895782][ T29] audit: type=1326 audit(1755168542.616:13493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=440 comm="syz.0.12579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 311.919348][ T29] audit: type=1326 audit(1755168542.616:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=442 comm="syz.6.12580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 311.942849][ T29] audit: type=1326 audit(1755168542.616:13495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=442 comm="syz.6.12580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 312.017985][ T3368] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 312.025728][ T3368] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 312.035961][ T3368] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x3 [ 312.044480][ T3368] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 312.130178][ T478] netlink: 7 bytes leftover after parsing attributes in process `syz.5.12595'. [ 312.149952][ T478] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12595'. [ 312.159152][ T478] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12595'. [ 312.376093][ T525] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 312.548347][ T552] can0: slcan on ttyS3. [ 312.603397][ T551] can0 (unregistered): slcan off ttyS3. [ 312.656830][ T566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=566 comm=syz.6.12631 [ 312.741698][ T576] loop6: detected capacity change from 0 to 512 [ 312.788449][ T576] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.12633: corrupted inode contents [ 312.801227][ T576] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.12633: mark_inode_dirty error [ 312.815405][ T576] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.12633: corrupted inode contents [ 312.827970][ T576] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.12633: mark_inode_dirty error [ 312.841114][ T576] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.12633: corrupted inode contents [ 312.854515][ T576] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 312.863517][ T576] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.12633: corrupted inode contents [ 312.876861][ T576] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.12633: mark_inode_dirty error [ 312.889941][ T576] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 312.900161][ T576] EXT4-fs (loop6): 1 truncate cleaned up [ 312.906316][ T576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.919860][ T576] ext4 filesystem being mounted at /1640/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.920616][ T4099] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 1 [ 312.990479][T13045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.075460][ T609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.137335][ T609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.172875][ C0] net_ratelimit: 6 callbacks suppressed [ 313.172895][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.194464][ T613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.210305][ T611] syz_tun: entered allmulticast mode [ 313.223185][ T609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.236911][ T610] syz_tun: left allmulticast mode [ 313.270315][ T609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.295065][ T619] can0: slcan on ttyS3. [ 313.323697][ T4045] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.332816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.339784][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.341930][ T4045] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.360162][ T4045] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.373018][ T617] can0 (unregistered): slcan off ttyS3. [ 313.385981][ T4045] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.509247][ T639] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 313.509247][ T639] program syz.5.12663 not setting count and/or reply_len properly [ 313.978728][ T4061] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.037551][ T4061] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.085459][ T4061] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.126728][ T4061] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.209565][ T4061] bridge_slave_1: left allmulticast mode [ 314.215385][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.222404][ T4061] bridge_slave_1: left promiscuous mode [ 314.228067][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.236126][ T4061] bridge_slave_0: left allmulticast mode [ 314.241902][ T4061] bridge_slave_0: left promiscuous mode [ 314.247562][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.324814][ T4061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.335084][ T4061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.344596][ T4061] bond0 (unregistering): Released all slaves [ 314.353520][ T4061] bond1 (unregistering): Released all slaves [ 314.372301][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.379291][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.524718][ T4061] hsr_slave_0: left promiscuous mode [ 314.530494][ T4061] hsr_slave_1: left promiscuous mode [ 314.537540][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.545045][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.553337][ T708] Falling back ldisc for ttyS3. [ 314.563243][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.570845][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.578504][ T4061] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 314.585436][ T4061] batman_adv: batadv0: Removing interface: ipvlan2 [ 314.597101][ T4061] veth1_macvtap: left promiscuous mode [ 314.602714][ T4061] veth0_macvtap: left promiscuous mode [ 314.608783][ T4061] veth1_vlan: left promiscuous mode [ 314.615657][ T4061] veth0_vlan: left promiscuous mode [ 314.717696][ T4061] team0 (unregistering): Port device team_slave_1 removed [ 314.732935][ T4061] team0 (unregistering): Port device team_slave_0 removed [ 314.844294][ T687] chnl_net:caif_netlink_parms(): no params data found [ 314.929116][ T687] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.936341][ T687] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.963307][ T687] bridge_slave_0: entered allmulticast mode [ 314.981406][ T687] bridge_slave_0: entered promiscuous mode [ 315.020348][ T687] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.027586][ T687] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.037585][ T687] bridge_slave_1: entered allmulticast mode [ 315.045711][ T687] bridge_slave_1: entered promiscuous mode [ 315.070250][ T687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.081046][ T687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.163749][ T687] team0: Port device team_slave_0 added [ 315.170793][ T687] team0: Port device team_slave_1 added [ 315.235162][ T687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.242210][ T687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.268180][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.275174][ T687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.322695][ T772] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.354266][ T687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.361252][ T687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.387253][ T687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.411738][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.418717][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.469337][ T687] hsr_slave_0: entered promiscuous mode [ 315.477793][ T687] hsr_slave_1: entered promiscuous mode [ 315.483961][ T687] debugfs: 'hsr0' already exists in 'hsr' [ 315.489735][ T687] Cannot create hsr debugfs directory [ 315.498160][ T772] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.034118][ T772] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.122811][ T772] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.187738][ T4061] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.205415][ T4061] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.221919][ T4061] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.243746][ T4061] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.385227][ T687] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.409848][ T687] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.427966][ T687] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.441757][ T687] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.499685][ T825] vlan0: entered allmulticast mode [ 316.505095][ T825] bridge_slave_0: entered allmulticast mode [ 316.587125][ T687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.609217][ T687] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.618901][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.625999][ T4036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.640624][ T4099] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.647733][ T4099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.728566][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 316.728584][ T29] audit: type=1400 audit(1755168547.618:13780): avc: denied { create } for pid=838 comm="syz.5.12745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.807693][ T687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.841757][ T29] audit: type=1400 audit(1755168547.738:13781): avc: denied { write } for pid=838 comm="syz.5.12745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 316.931752][ T855] raw_sendmsg: syz.6.12748 forgot to set AF_INET. Fix it! [ 316.949800][ T687] veth0_vlan: entered promiscuous mode [ 316.954232][ T855] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 316.958287][ T687] veth1_vlan: entered promiscuous mode [ 316.988375][ T687] veth0_macvtap: entered promiscuous mode [ 317.000865][ T861] netlink: 'syz.1.12751': attribute type 1 has an invalid length. [ 317.012261][ T687] veth1_macvtap: entered promiscuous mode [ 317.025632][ T687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.037165][ T687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.052214][ T4061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.053423][ T29] audit: type=1400 audit(1755168547.938:13782): avc: denied { read } for pid=862 comm="syz.6.12752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 317.062865][ T4061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.099242][ T4061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.113884][ T4061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.128366][ T29] audit: type=1400 audit(1755168548.018:13783): avc: denied { mounton } for pid=687 comm="syz-executor" path="/root/syzkaller.yiqQ6s/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 317.160010][ T29] audit: type=1400 audit(1755168548.048:13784): avc: denied { mounton } for pid=687 comm="syz-executor" path="/root/syzkaller.yiqQ6s/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 317.186972][ T29] audit: type=1400 audit(1755168548.048:13785): avc: denied { mounton } for pid=687 comm="syz-executor" path="/root/syzkaller.yiqQ6s/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=104309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 317.221967][ T29] audit: type=1400 audit(1755168548.118:13786): avc: denied { mounton } for pid=687 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 317.245068][ T29] audit: type=1400 audit(1755168548.118:13787): avc: denied { mount } for pid=687 comm="syz-executor" name="/" dev="gadgetfs" ino=3728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 317.343414][T12585] Process accounting resumed [ 317.389587][ T29] audit: type=1400 audit(1755168548.209:13788): avc: denied { unmount } for pid=873 comm="syz.3.12685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 317.409552][ T29] audit: type=1400 audit(1755168548.279:13789): avc: denied { create } for pid=868 comm="syz.5.12754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 317.527033][ T882] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 317.539183][ T882] SELinux: failed to load policy [ 317.694536][ T891] ipvlan2: entered promiscuous mode [ 317.707414][ T891] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 317.722947][ T891] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 317.797610][ T895] netlink: 'syz.5.12764': attribute type 4 has an invalid length. [ 317.828550][ T895] netlink: 'syz.5.12764': attribute type 4 has an invalid length. [ 317.939590][ T903] sctp: [Deprecated]: syz.5.12766 (pid 903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.939590][ T903] Use struct sctp_sack_info instead [ 317.994073][ T908] __nla_validate_parse: 28 callbacks suppressed [ 317.994094][ T908] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 318.262087][ T927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12779'. [ 318.280631][ T927] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 318.283088][ T929] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 318.370298][ C0] net_ratelimit: 6 callbacks suppressed [ 318.370317][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.394477][ T935] bridge0: port 3(batadv0) entered blocking state [ 318.401206][ T935] bridge0: port 3(batadv0) entered disabled state [ 318.422512][ T935] batadv0: entered allmulticast mode [ 318.438409][ T935] batadv0: entered promiscuous mode [ 318.519490][ T953] vlan2: entered allmulticast mode [ 318.524823][ T953] bridge_slave_0: entered allmulticast mode [ 318.530258][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.537727][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.784056][ T973] bridge0: port 1(batadv1) entered blocking state [ 318.790701][ T973] bridge0: port 1(batadv1) entered disabled state [ 318.803368][ T973] batadv1: entered allmulticast mode [ 318.809428][ T973] batadv1: entered promiscuous mode [ 318.900913][ T4061] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 318.906221][ T983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.910259][ T4061] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 319.289832][ T4036] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 319.299100][ T4036] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 319.357958][ T1002] bridge0: port 3(batadv0) entered blocking state [ 319.364552][ T1002] bridge0: port 3(batadv0) entered disabled state [ 319.371390][ T1002] batadv0: entered allmulticast mode [ 319.377661][ T1002] batadv0: entered promiscuous mode [ 319.409777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.454989][ T1013] loop6: detected capacity change from 0 to 512 [ 319.463958][ T1013] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 319.494966][ T1013] EXT4-fs (loop6): 1 truncate cleaned up [ 319.502982][ T1013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.569705][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.576672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.685729][T13045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.744731][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.808796][ T1037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12832'. [ 319.837539][ T1037] bridge0: port 1(macvlan2) entered blocking state [ 319.837885][ T1039] netlink: 9 bytes leftover after parsing attributes in process `syz.6.12831'. [ 319.844293][ T1037] bridge0: port 1(macvlan2) entered disabled state [ 319.855105][ T4061] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 319.869404][ T4061] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 319.921711][ T1037] macvlan2: entered allmulticast mode [ 319.927146][ T1037] bridge0: entered allmulticast mode [ 319.949307][ T1037] macvlan2: left allmulticast mode [ 319.954528][ T1037] bridge0: left allmulticast mode [ 319.977225][ T1039] 0·: renamed from hsr0 [ 319.991440][ T1039] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.001810][ T1039] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.048398][ T1039] 0·: entered allmulticast mode [ 320.053526][ T1039] hsr_slave_0: entered allmulticast mode [ 320.059194][ T1039] hsr_slave_1: entered allmulticast mode [ 320.078209][ T1039] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 320.102443][ T1042] bridge0: port 1(batadv1) entered blocking state [ 320.108982][ T1042] bridge0: port 1(batadv1) entered disabled state [ 320.154067][ T1042] batadv1: entered allmulticast mode [ 320.172135][ T1042] batadv1: entered promiscuous mode [ 320.178052][ T1048] loop6: detected capacity change from 0 to 128 [ 320.210055][ T1048] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 320.239495][ T1048] ext4 filesystem being mounted at /1682/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.334289][ T1057] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.362688][T13045] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.420654][ T1057] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.449223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.449806][ T1062] sd 0:0:1:0: device reset [ 320.494463][ T1057] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.541591][ T1057] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.602352][ T4061] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 320.611715][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.611756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.625584][ T4061] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 320.751706][ T4061] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.793513][ T4036] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.823725][ T4036] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.837391][ T4036] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.920513][ T1084] tipc: New replicast peer: 255.255.255.83 [ 320.926431][ T1084] tipc: Enabled bearer , priority 10 [ 321.103758][ T4061] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 321.595398][ T1128] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12871'. [ 321.610155][ T1128] 0·: renamed from hsr0 (while UP) [ 321.620543][ T1128] 0·: entered allmulticast mode [ 321.625438][ T1128] hsr_slave_0: entered allmulticast mode [ 321.631123][ T1128] hsr_slave_1: entered allmulticast mode [ 321.702042][ T1141] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 321.709914][ T1143] netlink: 'syz.1.12876': attribute type 29 has an invalid length. [ 321.729087][ T1143] netlink: 'syz.1.12876': attribute type 29 has an invalid length. [ 321.739880][ T1143] netlink: 480 bytes leftover after parsing attributes in process `syz.1.12876'. [ 321.750582][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 321.750601][ T29] audit: type=1400 audit(1755168552.651:14003): avc: denied { name_bind } for pid=1144 comm="syz.3.12877" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 321.827659][ T1148] netlink: 'syz.0.12879': attribute type 29 has an invalid length. [ 321.840908][ T29] audit: type=1400 audit(1755168552.651:14004): avc: denied { node_bind } for pid=1144 comm="syz.3.12877" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 321.866449][ T1148] netlink: 'syz.0.12879': attribute type 29 has an invalid length. [ 321.882887][ T1148] netlink: 500 bytes leftover after parsing attributes in process `syz.0.12879'. [ 321.913476][ T1121] chnl_net:caif_netlink_parms(): no params data found [ 321.937290][ T1160] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12883'. [ 321.985297][ T1165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.001271][ T1165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.018452][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.025637][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.037376][ T1121] bridge_slave_0: entered allmulticast mode [ 322.044275][ T1121] bridge_slave_0: entered promiscuous mode [ 322.051578][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.058805][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.058957][ T29] audit: type=1400 audit(1755168552.951:14005): avc: denied { name_bind } for pid=1176 comm="syz.3.12890" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 322.066064][ T1121] bridge_slave_1: entered allmulticast mode [ 322.093809][ T1121] bridge_slave_1: entered promiscuous mode [ 322.127991][ T1121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.151954][ T1121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.183674][ T29] audit: type=1326 audit(1755168553.081:14006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.6.12894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 322.207422][ T29] audit: type=1326 audit(1755168553.081:14007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.6.12894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 322.231365][ T29] audit: type=1326 audit(1755168553.081:14008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.6.12894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 322.263529][ T29] audit: type=1326 audit(1755168553.101:14009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.6.12894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 322.287224][ T29] audit: type=1326 audit(1755168553.101:14010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.6.12894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 322.310968][ T29] audit: type=1326 audit(1755168553.101:14011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.6.12894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 322.334637][ T29] audit: type=1326 audit(1755168553.101:14012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.6.12894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd158cebe9 code=0x7ffc0000 [ 322.379324][ T1121] team0: Port device team_slave_0 added [ 322.386555][ T1121] team0: Port device team_slave_1 added [ 322.419263][ T1121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.426267][ T1121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.452391][ T1121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.488985][ T1121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.495979][ T1121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.521938][ T1121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.611817][ T1121] hsr_slave_0: entered promiscuous mode [ 322.624264][ T1121] hsr_slave_1: entered promiscuous mode [ 322.800629][ T1213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12906'. [ 322.809722][ T1213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12906'. [ 322.894497][ T1219] bridge0: port 3(macvlan2) entered blocking state [ 322.901185][ T1219] bridge0: port 3(macvlan2) entered disabled state [ 322.914571][ T1219] macvlan2: entered allmulticast mode [ 322.920188][ T1219] bridge0: entered allmulticast mode [ 322.927119][ T1219] macvlan2: left allmulticast mode [ 322.932346][ T1219] bridge0: left allmulticast mode [ 323.109893][ T1229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.183614][ T1229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.264459][ T1229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.313275][ T1121] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 323.340339][ T1121] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.350720][ T1121] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.361562][ T1253] __nla_validate_parse: 1 callbacks suppressed [ 323.361627][ T1253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12924'. [ 323.380044][ T1229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.394216][ T1121] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 323.412305][ T1253] bridge0: port 4(macvlan2) entered blocking state [ 323.418928][ T1253] bridge0: port 4(macvlan2) entered disabled state [ 323.425655][ T1253] macvlan2: entered allmulticast mode [ 323.431153][ T1253] bridge0: entered allmulticast mode [ 323.437026][ T1253] macvlan2: left allmulticast mode [ 323.442252][ T1253] bridge0: left allmulticast mode [ 323.466673][ T4084] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.478669][ T4036] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.493229][ T4084] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.505451][ T4061] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.546969][ T1121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.622901][ T1121] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.662536][ T4061] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.669693][ T4061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.688852][ T4061] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.695986][ T4061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.727596][ C0] net_ratelimit: 5 callbacks suppressed [ 323.727617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.740140][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.774250][ T1293] loop6: detected capacity change from 0 to 128 [ 323.843741][ T1121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.132212][ T1121] veth0_vlan: entered promiscuous mode [ 324.150712][ T1121] veth1_vlan: entered promiscuous mode [ 324.176010][ T1121] veth0_macvtap: entered promiscuous mode [ 324.190795][ T1121] veth1_macvtap: entered promiscuous mode [ 324.212692][ T1121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.229295][ T1121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.251265][ T4053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.272350][ T4053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.297632][ T4053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.306565][ T4084] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.612885][ T4084] batadv0: left allmulticast mode [ 324.618005][ T4084] batadv0: left promiscuous mode [ 324.623055][ T4084] bridge0: port 3(batadv0) entered disabled state [ 324.632563][ T4084] bridge_slave_1: left allmulticast mode [ 324.638320][ T4084] bridge_slave_1: left promiscuous mode [ 324.644031][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.652073][ T4084] bridge_slave_0: left allmulticast mode [ 324.657858][ T4084] bridge_slave_0: left promiscuous mode [ 324.663693][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.686241][ T4084] erspan0 (unregistering): left promiscuous mode [ 324.695837][ T4084] gretap0 (unregistering): left promiscuous mode [ 324.767118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.774128][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.829756][ T4084]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.838972][ T4084]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.850717][ T4084]  (unregistering): (slave dummy0): Releasing backup interface [ 324.859191][ T4084]  (unregistering): Released all slaves [ 324.870178][ T1357] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 324.919193][ T4084] tipc: Disabling bearer [ 324.924229][ T4084] tipc: Disabling bearer [ 324.929625][ T4084] tipc: Left network mode [ 325.071013][ T4084] batadv_slave_1: left promiscuous mode [ 325.082346][ T4084] hsr_slave_0: left promiscuous mode [ 325.099515][ T4084] hsr_slave_1: left promiscuous mode [ 325.177075][ T4084] team0 (unregistering): Port device team_slave_1 removed [ 325.194443][ T4084] team0 (unregistering): Port device team_slave_0 removed [ 325.316630][ T1342] chnl_net:caif_netlink_parms(): no params data found [ 325.477287][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.484412][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.526364][ T1342] bridge_slave_0: entered allmulticast mode [ 325.549231][ T1342] bridge_slave_0: entered promiscuous mode [ 325.571961][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.579103][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.617323][ T1342] bridge_slave_1: entered allmulticast mode [ 325.631003][ T1400] hub 6-0:1.0: USB hub found [ 325.634352][ T1342] bridge_slave_1: entered promiscuous mode [ 325.648284][ T1400] hub 6-0:1.0: 8 ports detected [ 325.700100][ T1342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.722051][ T4084] IPVS: stop unused estimator thread 0... [ 325.725236][ T1342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.797431][ T1342] team0: Port device team_slave_0 added [ 325.806553][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.814912][ T1342] team0: Port device team_slave_1 added [ 325.876213][ T1342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.883247][ T1342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.909320][ T1342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.935781][ T1342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.942891][ T1342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.968946][ T1342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.040337][ T1342] hsr_slave_0: entered promiscuous mode [ 326.066856][ T1342] hsr_slave_1: entered promiscuous mode [ 326.087471][ T1342] debugfs: 'hsr0' already exists in 'hsr' [ 326.093281][ T1342] Cannot create hsr debugfs directory [ 326.135976][ T1437] rdma_op ffff88811d1dbd80 conn xmit_rdma 0000000000000000 [ 326.553870][ T1444] Set syz1 is full, maxelem 65536 reached [ 326.560053][ T1453] Set syz1 is full, maxelem 65536 reached [ 326.603210][ T1342] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 326.614060][ T1470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13001'. [ 326.625496][ T1342] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 326.648908][ T1470] IPVS: Error joining to the multicast group [ 326.655142][ T1342] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 326.665846][ T1342] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 326.757088][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 326.757106][ T29] audit: type=1326 audit(1755168557.663:14152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.0.13003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 326.797950][ T1342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.830032][ T1342] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.840248][ T29] audit: type=1326 audit(1755168557.693:14153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.0.13003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 326.846032][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.864007][ T29] audit: type=1326 audit(1755168557.693:14154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.0.13003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 326.894513][ T29] audit: type=1326 audit(1755168557.693:14155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.0.13003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 326.918320][ T29] audit: type=1326 audit(1755168557.703:14156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.0.13003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 326.931167][ T4099] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.941997][ T29] audit: type=1326 audit(1755168557.703:14157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.0.13003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 326.949056][ T4099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.971518][ T1342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.972742][ T29] audit: type=1326 audit(1755168557.703:14158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.0.13003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472164ebe9 code=0x7ffc0000 [ 326.979954][ T1342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.067639][ T4099] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.074747][ T4099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.130384][ T29] audit: type=1400 audit(1755168558.013:14159): avc: denied { setopt } for pid=1490 comm="syz.0.13008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.262057][ T1342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.406179][ T29] audit: type=1326 audit(1755168558.304:14160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.3.13013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87b7debe9 code=0x7ffc0000 [ 327.429923][ T29] audit: type=1326 audit(1755168558.304:14161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.3.13013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87b7debe9 code=0x7ffc0000 [ 327.641382][ T1342] veth0_vlan: entered promiscuous mode [ 327.666949][ T1342] veth1_vlan: entered promiscuous mode [ 327.680962][ T1342] veth0_macvtap: entered promiscuous mode [ 327.692916][ T1342] veth1_macvtap: entered promiscuous mode [ 327.708667][ T1342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.722178][ T1342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.734797][ T4099] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.754932][ T4099] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.796725][ T4099] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.816036][ T4099] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.885530][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.011271][ T1562] netlink: 'syz.9.13028': attribute type 4 has an invalid length. [ 328.089914][ T1568] loop9: detected capacity change from 0 to 512 [ 328.107186][ T1568] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.115604][ T1568] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 328.137634][ T1568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 328.152323][ T1568] System zones: 1-12 [ 328.163184][ T1568] EXT4-fs (loop9): 1 truncate cleaned up [ 328.170330][ T1568] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.371689][ T1342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.688250][ T1584] Set syz1 is full, maxelem 65536 reached [ 328.791943][ T1620] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 328.805101][ T1619] IPVS: stopping master sync thread 1620 ... [ 328.839012][ T1622] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13053'. [ 328.855322][ T1629] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 328.892679][ T1634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13055'. [ 328.924972][ C0] net_ratelimit: 1 callbacks suppressed [ 328.924994][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.963299][ T1644] loop7: detected capacity change from 0 to 512 [ 328.991916][ T1644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.018551][ T1644] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.089118][ T1644] loop7: detected capacity change from 512 to 64 [ 329.096570][ T1644] syz.7.13061: attempt to access beyond end of device [ 329.096570][ T1644] loop7: rw=2051, sector=104, nr_sectors = 408 limit=64 [ 329.125939][ T1121] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Out of memory [ 329.135454][ T1121] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 329.330933][ T1660] hub 6-0:1.0: USB hub found [ 329.338547][ T1660] hub 6-0:1.0: 8 ports detected [ 329.369750][ T1654] Set syz1 is full, maxelem 65536 reached [ 329.379019][ T1652] Set syz1 is full, maxelem 65536 reached [ 329.452298][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13072'. [ 329.461647][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13072'. [ 329.471575][ T1121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.483974][ T4084] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.496861][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13072'. [ 329.508132][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13072'. [ 329.536195][ T1673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13073'. [ 329.551379][ T4084] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.570608][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13072'. [ 329.594838][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13072'. [ 329.634730][ T4084] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.699771][ T4084] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.791157][ T1703] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 329.797745][ T1703] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 329.805557][ T1703] vhci_hcd vhci_hcd.0: Device attached [ 329.826718][ T1705] vhci_hcd: connection closed [ 329.826833][ T52] vhci_hcd: stop threads [ 329.835914][ T52] vhci_hcd: release socket [ 329.840468][ T52] vhci_hcd: disconnect device [ 329.902441][ T1716] loop9: detected capacity change from 0 to 512 [ 329.914879][ T4084] bridge_slave_1: left allmulticast mode [ 329.920603][ T4084] bridge_slave_1: left promiscuous mode [ 329.926406][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.945887][ T4084] bridge_slave_0: left allmulticast mode [ 329.951601][ T4084] bridge_slave_0: left promiscuous mode [ 329.957376][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.964659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.973060][ T1709] ================================================================== [ 329.981199][ T1709] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 329.989864][ T1709] [ 329.992207][ T1709] write to 0xffff888104446d68 of 8 bytes by task 1714 on cpu 0: [ 329.999871][ T1709] shmem_file_splice_read+0x470/0x600 [ 330.005283][ T1709] splice_direct_to_actor+0x26c/0x680 [ 330.010772][ T1709] do_splice_direct+0xda/0x150 [ 330.015551][ T1709] do_sendfile+0x380/0x650 [ 330.020001][ T1709] __x64_sys_sendfile64+0x105/0x150 [ 330.025229][ T1709] x64_sys_call+0x2bb0/0x2ff0 [ 330.029933][ T1709] do_syscall_64+0xd2/0x200 [ 330.034461][ T1709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.040378][ T1709] [ 330.042724][ T1709] write to 0xffff888104446d68 of 8 bytes by task 1709 on cpu 1: [ 330.050453][ T1709] shmem_file_splice_read+0x470/0x600 [ 330.055852][ T1709] splice_direct_to_actor+0x26c/0x680 [ 330.061249][ T1709] do_splice_direct+0xda/0x150 [ 330.066024][ T1709] do_sendfile+0x380/0x650 [ 330.070490][ T1709] __x64_sys_sendfile64+0x105/0x150 [ 330.075716][ T1709] x64_sys_call+0x2bb0/0x2ff0 [ 330.080407][ T1709] do_syscall_64+0xd2/0x200 [ 330.084932][ T1709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.090872][ T1709] [ 330.093215][ T1709] value changed: 0x00000000000013cd -> 0x00000000000013cf [ 330.100336][ T1709] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.102661][ T1709] Reported by Kernel Concurrency Sanitizer on: [ 330.108857][ T1709] CPU: 1 UID: 0 PID: 1709 Comm: syz.0.13087 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 330.121372][ T1709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.131473][ T1709] ================================================================== [ 330.162230][ T1716] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13089: Failed to acquire dquot type 1 [ 330.197589][ T1716] EXT4-fs (loop9): 1 truncate cleaned up [ 330.216993][ T1716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.257856][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.274521][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.295223][ T4084] bond0 (unregistering): Released all slaves [ 330.333021][ T1716] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.383995][ T1716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.478218][ T4084] hsr_slave_0: left promiscuous mode [ 330.483941][ T4084] hsr_slave_1: left promiscuous mode [ 330.490912][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.498524][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.507999][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.515477][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.526757][ T4084] veth1_macvtap: left promiscuous mode [ 330.532315][ T4084] veth0_macvtap: left promiscuous mode [ 330.538270][ T4084] veth1_vlan: left promiscuous mode [ 330.543623][ T4084] veth0_vlan: left promiscuous mode [ 330.616030][ T4084] team0 (unregistering): Port device team_slave_1 removed [ 330.628538][ T4084] team0 (unregistering): Port device team_slave_0 removed [ 331.319035][ T4084] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.365187][ T4084] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.425577][ T4084] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.475421][ T4084] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.559011][ T4084] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.585577][ T4084] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.655646][ T4084] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.705202][ T4084] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.767960][ T4084] batadv0: left allmulticast mode [ 331.773006][ T4084] batadv0: left promiscuous mode [ 331.778247][ T4084] bridge0: port 3(batadv0) entered disabled state [ 331.785391][ T4084] bridge_slave_1: left allmulticast mode [ 331.791046][ T4084] bridge_slave_1: left promiscuous mode [ 331.796829][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.804936][ T4084] bridge_slave_0: left allmulticast mode [ 331.810612][ T4084] bridge_slave_0: left promiscuous mode [ 331.816316][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.825936][ T4084] batadv1: left allmulticast mode [ 331.830991][ T4084] batadv1: left promiscuous mode [ 331.836181][ T4084] bridge0: port 1(batadv1) entered disabled state [ 331.843716][ T4084] bridge_slave_1: left allmulticast mode [ 331.849398][ T4084] bridge_slave_1: left promiscuous mode [ 331.855123][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.863029][ T4084] bridge_slave_0: left allmulticast mode [ 331.868829][ T4084] bridge_slave_0: left promiscuous mode [ 331.874583][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.095235][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.104624][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.114035][ T4084] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 332.122700][ T4084] bond0 (unregistering): Released all slaves [ 332.131483][ T4084] bond1 (unregistering): (slave bond2): Releasing backup interface [ 332.139687][ T4084] bond2 (unregistering): left promiscuous mode [ 332.145973][ T4084] bond1 (unregistering): Released all slaves [ 332.154688][ T4084] bond2 (unregistering): Released all slaves [ 332.163056][ T4084] bond3 (unregistering): Released all slaves [ 332.224920][ T4084] bond0 (unregistering): Released all slaves [ 332.233177][ T4084] bond1 (unregistering): Released all slaves [ 332.295748][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.305926][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.315578][ T4084] bond0 (unregistering): Released all slaves [ 332.357686][ T4084] tipc: Disabling bearer [ 332.362921][ T4084] tipc: Disabling bearer [ 332.368126][ T4084] tipc: Left network mode [ 332.374473][ T4084] tipc: Disabling bearer [ 332.379732][ T4084] tipc: Disabling bearer [ 332.384874][ T4084] tipc: Left network mode [ 332.489509][ T4084] hsr_slave_0: left promiscuous mode [ 332.495394][ T4084] hsr_slave_1: left promiscuous mode [ 332.502813][ T4084] hsr_slave_0: left promiscuous mode [ 332.508644][ T4084] hsr_slave_1: left promiscuous mode [ 332.516636][ T4084] hsr_slave_0: left promiscuous mode [ 332.522251][ T4084] hsr_slave_1: left promiscuous mode [ 332.528161][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.535809][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.543520][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.550957][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.563936][ T4084] veth1_macvtap: left promiscuous mode [ 332.569437][ T4084] veth0_macvtap: left promiscuous mode [ 332.574982][ T4084] veth1_vlan: left promiscuous mode [ 332.580214][ T4084] veth0_vlan: left promiscuous mode [ 332.586144][ T4084] veth1_macvtap: left promiscuous mode [ 332.591615][ T4084] veth0_macvtap: left promiscuous mode [ 332.597148][ T4084] veth1_vlan: left promiscuous mode [ 332.602429][ T4084] veth0_vlan: left promiscuous mode [ 332.802828][ T4084] team0 (unregistering): Port device team_slave_1 removed [ 332.813073][ T4084] team0 (unregistering): Port device team_slave_0 removed [ 333.556376][ T4084] IPVS: stop unused estimator thread 0... [ 333.646779][ T4084] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.685793][ T4084] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.754973][ T4084] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.805440][ T4084] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.866730][ T4084] bridge_slave_1: left allmulticast mode [ 333.872430][ T4084] bridge_slave_1: left promiscuous mode [ 333.878195][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.886452][ T4084] bridge_slave_0: left allmulticast mode [ 333.892142][ T4084] bridge_slave_0: left promiscuous mode [ 333.897919][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.984846][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.994979][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.004630][ T4084] bond0 (unregistering): Released all slaves [ 334.064688][ T4084] IPVS: stopping backup sync thread 1629 ... [ 334.100818][ T4084] hsr_slave_0: left promiscuous mode [ 334.106501][ T4084] hsr_slave_1: left promiscuous mode [ 334.112286][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.119733][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.127426][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.134980][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.144826][ T4084] veth1_macvtap: left promiscuous mode [ 334.150837][ T4084] veth0_macvtap: left promiscuous mode [ 334.156461][ T4084] veth1_vlan: left promiscuous mode [ 334.161716][ T4084] veth0_vlan: left promiscuous mode [ 334.221870][ T4084] team0 (unregistering): Port device team_slave_1 removed [ 334.231440][ T4084] team0 (unregistering): Port device team_slave_0 removed