last executing test programs: 5m21.181233684s ago: executing program 32 (id=443): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffe72, &(0x7f0000000200)={&(0x7f0000000640)={0x24, r2, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 5m21.139951935s ago: executing program 33 (id=447): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 5m21.076953496s ago: executing program 34 (id=448): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x4}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x26ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 5m18.552994062s ago: executing program 35 (id=450): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='contention_end\x00', r1}, 0x18) 3m47.048019651s ago: executing program 36 (id=4094): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 2m21.861828181s ago: executing program 6 (id=7562): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000280)=""/35, 0x23}], 0x2}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m21.843703531s ago: executing program 6 (id=7563): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4000) 2m21.818240212s ago: executing program 6 (id=7564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0x8}, 0x18) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 2m21.803505702s ago: executing program 6 (id=7565): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x8, &(0x7f0000000580)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@flush}, {@nodots}, {@fat=@quiet}, {@dots}, {@nodots}, {@dots}, {@dots}, {@fat=@nfs}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@nfs}, {@nodots}, {@dots}, {@fat=@uid}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@fat=@tz_utc}, {@fat=@flush}, {@dots}]}, 0xfd, 0x1c7, &(0x7f0000000200)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x1000) 2m21.733442343s ago: executing program 6 (id=7566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "47ec0c4636696b70", "90075b0a3d117289002bace596b74f103d30d18fa0943999058992389851193b", "7d9107e0", "3eb14b2fbecaddf3"}, 0x81) 2m21.688003183s ago: executing program 6 (id=7567): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 2m21.677244174s ago: executing program 37 (id=7567): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1m28.71335266s ago: executing program 5 (id=10121): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f00000004c0)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x17, 0x0) 1m27.681473825s ago: executing program 5 (id=10148): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1m27.634651265s ago: executing program 5 (id=10150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) 1m27.605332346s ago: executing program 5 (id=10152): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 1m27.589104346s ago: executing program 5 (id=10153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") 1m27.433872208s ago: executing program 9 (id=10158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) setregid(0x0, 0xee01) 1m27.382998159s ago: executing program 9 (id=10159): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000440), 0x0, 0x0, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0x8}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xba, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) 1m27.33703021s ago: executing program 9 (id=10161): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xa, 0x8, 0x81, 0x1, 0x8, 0x35}}, {0x4}}]}]}, 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.263689001s ago: executing program 9 (id=10164): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 1m27.223681121s ago: executing program 9 (id=10165): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1m27.132842342s ago: executing program 5 (id=10166): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x40) 1m27.132616292s ago: executing program 9 (id=10167): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1m27.129492962s ago: executing program 38 (id=10166): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x40) 1m27.124716562s ago: executing program 39 (id=10167): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 48.94752634s ago: executing program 1 (id=11856): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700044000000040000000800090002"], 0x40}}, 0x0) 48.905314251s ago: executing program 1 (id=11858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') pread64(r2, 0x0, 0x0, 0x0) 48.878441981s ago: executing program 1 (id=11862): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') unshare(0x24020400) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 48.838500572s ago: executing program 1 (id=11864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 48.739469243s ago: executing program 1 (id=11866): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000000006001f0000000000080003"], 0x7c}}, 0x0) 48.413622188s ago: executing program 1 (id=11870): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 33.37686848s ago: executing program 40 (id=11870): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 20.57854472s ago: executing program 7 (id=13047): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 20.513280461s ago: executing program 7 (id=13049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='io_uring_cqring_wait\x00', r0, 0x0, 0x103}, 0x18) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 20.429173142s ago: executing program 7 (id=13053): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000040)='eth0\x00\xdd\xad4=2k\xf1\x05\x9bG\xeb\x85\xe6u*\x03\xb6J\x91y\xe1;F\xa2\x8df\xe6\x04\x00\x00\x00\x02\x0078z=\x8f\xd5F\xa4AR\xa1\v\x00\x00\x00\x00\x00\x00\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0@\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15\x05\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8OF\xa7^\x8c\xaf\fu\xb7w\x9eF', 0x1, 0x0, 0x0) 19.609043934s ago: executing program 7 (id=13077): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 19.607724114s ago: executing program 7 (id=13078): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 19.508810135s ago: executing program 7 (id=13080): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x9300, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x4, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 19.485738976s ago: executing program 41 (id=13080): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x9300, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x4, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 2.215814559s ago: executing program 8 (id=13713): r0 = inotify_init1(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xd0000121) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) open(&(0x7f0000000000)='./file0\x00', 0x100000, 0xa0) 2.167907269s ago: executing program 8 (id=13714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 2.058763641s ago: executing program 8 (id=13715): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 1.327669821s ago: executing program 3 (id=13736): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070d000000000000020007000000", @ANYRES32=r1, @ANYBLOB="800087000a00020001"], 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000000) 1.319161922s ago: executing program 0 (id=13737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.244380612s ago: executing program 3 (id=13738): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) sigaltstack(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pause() 1.120996104s ago: executing program 0 (id=13739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.003511046s ago: executing program 0 (id=13740): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 639.431631ms ago: executing program 4 (id=13742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x40006) 618.559222ms ago: executing program 4 (id=13743): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 569.303222ms ago: executing program 4 (id=13745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}}, 0x0) 566.265522ms ago: executing program 8 (id=13746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 531.909092ms ago: executing program 4 (id=13747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 477.330724ms ago: executing program 8 (id=13748): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) 477.024324ms ago: executing program 4 (id=13749): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x2) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="a2aaaaaaaaaa0180c200000008"], 0x0) 476.640504ms ago: executing program 4 (id=13758): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 380.940465ms ago: executing program 2 (id=13750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='sys_enter\x00', r1, 0x0, 0x62}, 0x18) ioperm(0x80000000004, 0x1fd, 0x6) 281.394016ms ago: executing program 3 (id=13751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) 227.338837ms ago: executing program 2 (id=13752): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 213.096537ms ago: executing program 3 (id=13753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0xf5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4800) 186.446107ms ago: executing program 2 (id=13754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}, 0xa6}], 0x2, 0x4008440) 130.586938ms ago: executing program 0 (id=13755): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) unshare(0x2000400) 119.990458ms ago: executing program 2 (id=13756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) 119.124498ms ago: executing program 3 (id=13767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 89.470379ms ago: executing program 0 (id=13757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 82.375059ms ago: executing program 2 (id=13759): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) rt_tgsigqueueinfo(0x0, 0x0, 0x37, 0x0) 31.09418ms ago: executing program 8 (id=13760): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) fsetxattr$security_selinux(r0, &(0x7f0000000bc0), &(0x7f0000000c00)='system_u:object_r:system_cron_spool_t:s0\x00', 0x29, 0x1) 30.61469ms ago: executing program 0 (id=13761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 18.46939ms ago: executing program 3 (id=13762): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 2 (id=13763): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) kernel console output (not intermixed with test programs): 0] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.000879][ T3390] IPVS: starting estimator thread 0... [ 282.003541][T26622] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 282.020473][T26410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.029294][T26410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.038057][T26410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.046769][T26410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.127309][T26627] IPVS: using max 2064 ests per chain, 103200 per kthread [ 282.213605][T26411] veth0_vlan: entered promiscuous mode [ 282.235116][T26411] veth1_vlan: entered promiscuous mode [ 282.285142][T26411] veth0_macvtap: entered promiscuous mode [ 282.306288][T26411] veth1_macvtap: entered promiscuous mode [ 282.329839][T26411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.340401][T26411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.377812][T26411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.403002][T26667] SELinux: ebitmap: truncated map [ 282.409263][T26667] SELinux: failed to load policy [ 282.416330][T26411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.427123][T26411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.443820][T26411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.453406][T26411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.462155][T26411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.471053][T26411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.479902][T26411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.697467][T26697] __nla_validate_parse: 2 callbacks suppressed [ 282.697483][T26697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10274'. [ 282.757608][T26705] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10280'. [ 282.766986][T26705] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10280'. [ 283.241258][T26764] netlink: 87 bytes leftover after parsing attributes in process `syz.2.10305'. [ 283.265078][T26769] netlink: 'syz.7.10308': attribute type 2 has an invalid length. [ 283.272946][T26769] netlink: 'syz.7.10308': attribute type 1 has an invalid length. [ 283.280848][T26769] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.10308'. [ 283.577986][T26802] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10325'. [ 283.731458][T26823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10334'. [ 283.740680][T26823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10334'. [ 283.789308][T26828] program syz.0.10336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.869397][T26834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.959190][T26834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.065915][T26834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.087648][T26845] futex_wake_op: syz.2.10344 tries to shift op by -1; fix this program [ 284.157492][T26834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.211209][T26852] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 284.222625][T26851] IPVS: stopping master sync thread 26852 ... [ 284.246051][T26834] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.276295][T26834] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.293286][T26834] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.306836][T26834] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.427692][T26870] netlink: 'syz.1.10356': attribute type 21 has an invalid length. [ 284.439404][T26873] netlink: 14 bytes leftover after parsing attributes in process `syz.7.10357'. [ 284.451851][T26873] bond0 (unregistering): Released all slaves [ 284.608003][T26895] netlink: 11 bytes leftover after parsing attributes in process `syz.1.10367'. [ 284.684829][T26909] loop7: detected capacity change from 0 to 512 [ 284.702570][T26909] EXT4-fs (loop7): orphan cleanup on readonly fs [ 284.709570][T26909] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10374: bg 0: block 248: padding at end of block bitmap is not set [ 284.724424][T26909] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10374: Failed to acquire dquot type 1 [ 284.736737][T26909] EXT4-fs (loop7): 1 truncate cleaned up [ 284.744231][T26909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.771836][T19666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.814443][T26919] binfmt_misc: register: failed to install interpreter file ./file2 [ 285.520171][T27012] program syz.0.10422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.789157][T27042] IPv6: Can't replace route, no match found [ 286.410786][T27114] bridge0: entered promiscuous mode [ 286.416104][T27114] macvlan3: entered promiscuous mode [ 286.428295][T27114] bridge0: port 1(macvlan3) entered blocking state [ 286.435039][T27114] bridge0: port 1(macvlan3) entered disabled state [ 286.447609][T27114] macvlan3: entered allmulticast mode [ 286.453118][T27114] bridge0: entered allmulticast mode [ 286.468728][T27114] macvlan3: left allmulticast mode [ 286.473939][T27114] bridge0: left allmulticast mode [ 286.484258][T27114] bridge0: left promiscuous mode [ 286.608155][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 286.608173][ T29] audit: type=1400 audit(2000262766.892:11049): avc: denied { execute } for pid=27133 comm="syz.1.10479" path="/541/cpu.stat" dev="tmpfs" ino=2779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 286.702722][ T29] audit: type=1326 audit(2000262766.952:11050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 286.726518][ T29] audit: type=1326 audit(2000262766.952:11051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 286.751492][ T29] audit: type=1326 audit(2000262766.952:11052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 286.776593][ T29] audit: type=1326 audit(2000262766.952:11053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 286.801061][ T29] audit: type=1326 audit(2000262766.952:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 286.825278][ T29] audit: type=1326 audit(2000262766.952:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 286.849146][ T29] audit: type=1326 audit(2000262766.952:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 286.872987][ T29] audit: type=1326 audit(2000262766.952:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 286.896699][ T29] audit: type=1326 audit(2000262766.952:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27137 comm="syz.0.10482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 287.375135][T27214] bridge0: entered promiscuous mode [ 287.392059][T27214] bridge0: port 3(macvlan2) entered blocking state [ 287.398708][T27214] bridge0: port 3(macvlan2) entered disabled state [ 287.399503][T27217] netlink: 'syz.2.10519': attribute type 21 has an invalid length. [ 287.407518][T27214] macvlan2: entered allmulticast mode [ 287.418774][T27214] bridge0: entered allmulticast mode [ 287.426576][T27214] macvlan2: left allmulticast mode [ 287.431816][T27214] bridge0: left allmulticast mode [ 287.444647][T27214] bridge0: left promiscuous mode [ 287.553996][T27229] bridge0: entered promiscuous mode [ 287.559400][T27229] macvlan3: entered promiscuous mode [ 287.565061][T27229] bridge0: port 1(macvlan3) entered blocking state [ 287.571664][T27229] bridge0: port 1(macvlan3) entered disabled state [ 287.589556][T27229] macvlan3: entered allmulticast mode [ 287.594979][T27229] bridge0: entered allmulticast mode [ 287.607328][T27229] macvlan3: left allmulticast mode [ 287.612544][T27229] bridge0: left allmulticast mode [ 287.620178][T27229] bridge0: left promiscuous mode [ 287.791280][T27246] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 287.825557][ T51] tipc: Subscription rejected, illegal request [ 287.950500][T27271] io-wq is not configured for unbound workers [ 288.179795][T27295] Invalid ELF header magic: != ELF [ 288.198189][T27299] binfmt_misc: register: failed to install interpreter file ./file0 [ 288.328483][T27312] netlink: 'syz.1.10564': attribute type 13 has an invalid length. [ 288.336450][T27312] __nla_validate_parse: 10 callbacks suppressed [ 288.336464][T27312] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10564'. [ 288.360640][T27316] loop7: detected capacity change from 0 to 512 [ 288.378955][T27312] erspan0: refused to change device tx_queue_len [ 288.386957][T27312] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 288.406798][T27316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.458340][T27316] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.493798][T27331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.521329][T19666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.567938][T27331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.611045][T27342] program syz.7.10577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.620860][T27342] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 288.788211][T27356] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10584'. [ 288.880298][T27368] SELinux: ebitmap start bit (2147614744) is not a multiple of the map unit size (64) [ 288.890413][T27368] SELinux: failed to load policy [ 288.912529][T27372] hub 9-0:1.0: USB hub found [ 288.928602][T27372] hub 9-0:1.0: 8 ports detected [ 289.011937][T27384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10598'. [ 289.055547][T27389] netlink: 'syz.7.10600': attribute type 3 has an invalid length. [ 289.215060][T27413] bond_slave_1: entered promiscuous mode [ 289.229697][T27412] bond_slave_1: left promiscuous mode [ 289.238727][T27416] netlink: 'syz.4.10612': attribute type 13 has an invalid length. [ 289.362881][T27416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.444377][T27432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8210 sclass=netlink_route_socket pid=27432 comm=syz.4.10619 [ 289.633130][T27457] 9pnet: p9_errstr2errno: server reported unknown error HID v0.00 Device [syz1] on syz0 [ 296.328657][T28032] program syz.0.10886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.361867][T28034] bridge0: entered promiscuous mode [ 296.368108][T28034] macvlan2: entered promiscuous mode [ 296.374296][T28034] bridge0: port 1(macvlan2) entered blocking state [ 296.381061][T28034] bridge0: port 1(macvlan2) entered disabled state [ 296.393403][T28034] macvlan2: entered allmulticast mode [ 296.399459][T28034] bridge0: entered allmulticast mode [ 296.406089][T28034] macvlan2: left allmulticast mode [ 296.411414][T28034] bridge0: left allmulticast mode [ 296.419322][T28034] bridge0: left promiscuous mode [ 296.494485][T28042] pim6reg: entered allmulticast mode [ 296.543708][T28046] Invalid ELF header magic: != ELF [ 296.551191][T28042] pim6reg: left allmulticast mode [ 296.643101][T28054] loop7: detected capacity change from 0 to 512 [ 296.658465][T28054] EXT4-fs: Ignoring removed oldalloc option [ 296.673559][T28059] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 296.673559][T28059] program syz.4.10899 not setting count and/or reply_len properly [ 296.698836][T28054] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.10896: Parent and EA inode have the same ino 15 [ 296.777127][T28054] EXT4-fs (loop7): Remounting filesystem read-only [ 296.785570][T28054] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 296.818474][T28054] EXT4-fs (loop7): 1 orphan inode deleted [ 296.834305][T28054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.871380][T19666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.954328][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 296.954345][ T29] audit: type=1400 audit(2000262777.232:11362): avc: denied { write } for pid=28082 comm="syz.7.10910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 297.081476][T28092] openvswitch: netlink: Message has 6 unknown bytes. [ 297.488918][ T29] audit: type=1400 audit(2000262777.772:11363): avc: denied { getopt } for pid=28123 comm="syz.0.10927" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.634198][ T29] audit: type=1400 audit(2000262777.912:11364): avc: denied { map_create } for pid=28140 comm="syz.1.10933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.654015][ T29] audit: type=1400 audit(2000262777.912:11365): avc: denied { bpf } for pid=28140 comm="syz.1.10933" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.675131][ T29] audit: type=1400 audit(2000262777.912:11366): avc: denied { map_read map_write } for pid=28140 comm="syz.1.10933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.695513][ T29] audit: type=1400 audit(2000262777.912:11367): avc: denied { prog_load } for pid=28140 comm="syz.1.10933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.714950][ T29] audit: type=1400 audit(2000262777.912:11368): avc: denied { perfmon } for pid=28140 comm="syz.1.10933" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.754784][ T29] audit: type=1400 audit(2000262777.912:11369): avc: denied { prog_run } for pid=28140 comm="syz.1.10933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.774123][ T29] audit: type=1400 audit(2000262777.962:11370): avc: denied { read } for pid=28140 comm="syz.1.10933" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 297.797856][ T29] audit: type=1400 audit(2000262777.962:11371): avc: denied { open } for pid=28140 comm="syz.1.10933" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 298.038769][T28161] SELinux: ebitmap start bit (2147614744) is not a multiple of the map unit size (64) [ 298.049887][T28161] SELinux: failed to load policy [ 298.502525][T28199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28199 comm=syz.0.10957 [ 299.102156][T28221] IPVS: stopping master sync thread 28222 ... [ 299.111757][T28222] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 299.216816][T28228] loop7: detected capacity change from 0 to 128 [ 299.246182][T28228] FAT-fs (loop7): Directory bread(block 32) failed [ 299.287585][T28228] FAT-fs (loop7): Directory bread(block 33) failed [ 299.326078][T28228] FAT-fs (loop7): Directory bread(block 34) failed [ 299.347596][T28228] FAT-fs (loop7): Directory bread(block 35) failed [ 299.354408][T28228] FAT-fs (loop7): Directory bread(block 36) failed [ 299.384781][T28228] FAT-fs (loop7): Directory bread(block 37) failed [ 299.410151][T28228] FAT-fs (loop7): Directory bread(block 38) failed [ 299.417076][T28228] FAT-fs (loop7): Directory bread(block 39) failed [ 299.437191][T28228] FAT-fs (loop7): Directory bread(block 40) failed [ 299.454029][T28228] FAT-fs (loop7): Directory bread(block 41) failed [ 299.586618][T28228] __nla_validate_parse: 4 callbacks suppressed [ 299.586637][T28228] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10968'. [ 299.602169][T28228] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10968'. [ 299.612793][T28248] openvswitch: netlink: Message has 6 unknown bytes. [ 299.702115][T28258] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10983'. [ 299.716482][T28258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.754561][T28258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.773244][T28258] bond0 (unregistering): Released all slaves [ 299.845545][T28268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10987'. [ 299.898207][T28273] program syz.2.10989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.917171][T28273] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 299.919743][T28274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.968135][T28279] 9pnet: p9_errstr2errno: server reported unknown error , priority 10 [ 304.421460][T28652] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 304.429210][T28652] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 305.276942][ T3390] tipc: Node number set to 2886997007 [ 305.285776][T28724] netlink: 'syz.7.11195': attribute type 21 has an invalid length. [ 305.287218][T28728] __nla_validate_parse: 2 callbacks suppressed [ 305.287236][T28728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11196'. [ 305.293772][T28724] netlink: 128 bytes leftover after parsing attributes in process `syz.7.11195'. [ 305.321953][T28724] netlink: 'syz.7.11195': attribute type 5 has an invalid length. [ 305.330015][T28724] netlink: 'syz.7.11195': attribute type 6 has an invalid length. [ 305.338171][T28724] netlink: 3 bytes leftover after parsing attributes in process `syz.7.11195'. [ 305.378716][T28728] bond0: entered promiscuous mode [ 305.383826][T28728] bond0: entered allmulticast mode [ 305.440333][T28728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.453629][T28739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11201'. [ 305.516381][T28741] bridge0: entered promiscuous mode [ 305.531292][T28741] macvlan3: entered promiscuous mode [ 305.545047][T28741] bridge0: port 1(macvlan3) entered blocking state [ 305.551717][T28741] bridge0: port 1(macvlan3) entered disabled state [ 305.575257][T28741] macvlan3: entered allmulticast mode [ 305.580813][T28741] bridge0: entered allmulticast mode [ 305.590579][T28741] macvlan3: left allmulticast mode [ 305.595884][T28741] bridge0: left allmulticast mode [ 305.607561][T28741] bridge0: left promiscuous mode [ 305.988805][T28762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28762 comm=syz.0.11211 [ 306.001666][T28762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28762 comm=syz.0.11211 [ 306.136502][T28782] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 306.165139][T28784] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 306.172790][T28784] vhci_hcd: default hub control req: 1f31 v0017 i0001 l0 [ 306.375493][T28811] bridge0: entered promiscuous mode [ 306.392814][T28811] macvlan2: entered promiscuous mode [ 306.400858][T28811] bridge0: port 3(macvlan2) entered blocking state [ 306.407880][T28811] bridge0: port 3(macvlan2) entered disabled state [ 306.414992][T28811] macvlan2: entered allmulticast mode [ 306.420502][T28811] bridge0: entered allmulticast mode [ 306.436114][T28811] macvlan2: left allmulticast mode [ 306.441374][T28811] bridge0: left allmulticast mode [ 306.447033][T28811] bridge0: left promiscuous mode [ 306.482991][T28819] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 306.490738][T28822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11239'. [ 306.500056][T28822] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11239'. [ 306.510679][T28822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11239'. [ 306.728515][T28855] wireguard0: entered promiscuous mode [ 306.868953][T28867] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 306.881719][T28867] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 307.077988][T28898] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 307.092164][T28898] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 307.141009][T28909] bridge0: entered promiscuous mode [ 307.151792][T28909] macvlan2: entered promiscuous mode [ 307.163029][T28909] bridge0: port 3(macvlan2) entered blocking state [ 307.169713][T28909] bridge0: port 3(macvlan2) entered disabled state [ 307.185992][T28909] macvlan2: entered allmulticast mode [ 307.191477][T28909] bridge0: entered allmulticast mode [ 307.227789][T28909] macvlan2: left allmulticast mode [ 307.233011][T28909] bridge0: left allmulticast mode [ 307.243604][T28909] bridge0: left promiscuous mode [ 307.270478][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 307.270496][ T29] audit: type=1326 audit(2000262787.552:11807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.2.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.316828][ T29] audit: type=1326 audit(2000262787.582:11808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.2.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.340708][ T29] audit: type=1326 audit(2000262787.582:11809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.2.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.364589][ T29] audit: type=1326 audit(2000262787.582:11810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.2.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.455924][T28932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11289'. [ 307.485046][T28934] sd 0:0:1:0: device reset [ 307.490682][ T29] audit: type=1326 audit(2000262787.762:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.2.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.514763][ T29] audit: type=1326 audit(2000262787.772:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.2.11292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.538587][ T29] audit: type=1326 audit(2000262787.772:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.561773][ T29] audit: type=1326 audit(2000262787.772:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.587702][ T29] audit: type=1326 audit(2000262787.772:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.610847][ T29] audit: type=1326 audit(2000262787.772:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 307.927718][T28986] bridge0: entered promiscuous mode [ 307.934732][T28986] macvlan2: entered promiscuous mode [ 307.941696][T28986] bridge0: port 1(macvlan2) entered blocking state [ 307.948451][T28986] bridge0: port 1(macvlan2) entered disabled state [ 307.966606][T28986] macvlan2: entered allmulticast mode [ 307.972157][T28986] bridge0: entered allmulticast mode [ 307.996311][T28986] macvlan2: left allmulticast mode [ 308.001587][T28986] bridge0: left allmulticast mode [ 308.007567][T28986] bridge0: left promiscuous mode [ 308.091723][T29002] netlink: 452 bytes leftover after parsing attributes in process `syz.1.11321'. [ 308.200042][T29022] syzkaller1: entered promiscuous mode [ 308.205666][T29022] syzkaller1: entered allmulticast mode [ 308.318517][T29031] hsr0: entered promiscuous mode [ 308.438135][T29046] SELinux: failed to load policy [ 308.470658][T29052] syzkaller1: entered promiscuous mode [ 308.477721][T29052] syzkaller1: entered allmulticast mode [ 308.688643][T29079] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.749400][T29079] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.808622][T29079] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.868415][T29079] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.942453][T29079] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.962558][T29079] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.972836][T29085] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11360'. [ 308.976369][T29079] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.996360][T29079] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.114281][T29101] batadv_slave_1: entered promiscuous mode [ 309.120783][T29101] veth1_virt_wifi: entered promiscuous mode [ 309.127898][T29100] veth1_virt_wifi: left promiscuous mode [ 309.133658][T29100] batadv_slave_1: left promiscuous mode [ 309.140418][T29103] SELinux: policydb version 47706891 does not match my version range 15-34 [ 309.159434][T29103] SELinux: failed to load policy [ 309.611446][T29126] Set syz1 is full, maxelem 65536 reached [ 309.682588][T29156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.693461][T29156] bridge0: port 1(bond2) entered blocking state [ 309.699938][T29156] bridge0: port 1(bond2) entered disabled state [ 309.710805][T29156] bond2: entered allmulticast mode [ 309.724197][T29156] bond2: entered promiscuous mode [ 309.739928][T29156] bridge0: port 1(bond2) entered blocking state [ 309.746321][T29156] bridge0: port 1(bond2) entered forwarding state [ 309.755509][ T5011] bridge0: port 1(bond2) entered disabled state [ 310.026859][T29208] ALSA: seq fatal error: cannot create timer (-22) [ 310.510135][T29288] ALSA: seq fatal error: cannot create timer (-22) [ 310.516301][T29291] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.11455'. [ 310.526122][T29291] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.11455'. [ 310.535453][T29291] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11455'. [ 310.812421][T29338] syz.1.11478: attempt to access beyond end of device [ 310.812421][T29338] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 310.872959][T29344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11480'. [ 310.965648][T29359] netlink: 'syz.4.11487': attribute type 1 has an invalid length. [ 310.973595][T29359] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.11487'. [ 311.048008][T29376] xt_CT: No such helper "netbios-ns" [ 311.144117][T29393] xt_hashlimit: max too large, truncated to 1048576 [ 311.201872][T29407] xt_TPROXY: Can be used only with -p tcp or -p udp [ 311.437413][T29457] wireguard0: entered promiscuous mode [ 311.443076][T29457] wireguard0: entered allmulticast mode [ 311.872952][T29527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11569'. [ 311.901693][T29529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11570'. [ 311.910993][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11570'. [ 311.926384][T29532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=29532 comm=syz.0.11571 [ 311.929354][T29527] bond1: entered promiscuous mode [ 311.944696][T29527] bond1: entered allmulticast mode [ 311.950142][T29527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.040917][T29548] netlink: 'syz.1.11578': attribute type 1 has an invalid length. [ 312.049007][T29548] netlink: 'syz.1.11578': attribute type 4 has an invalid length. [ 312.056859][T29548] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11578'. [ 312.243269][T29580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11593'. [ 312.311945][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 312.311980][ T29] audit: type=1400 audit(2000262792.592:12471): avc: denied { module_request } for pid=29585 comm="syz.4.11596" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 312.346625][ T29] audit: type=1400 audit(2000262792.632:12472): avc: denied { map_create } for pid=29587 comm="syz.1.11598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.382685][ T29] audit: type=1400 audit(2000262792.662:12473): avc: denied { prog_load } for pid=29587 comm="syz.1.11598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.409825][ T29] audit: type=1400 audit(2000262792.692:12474): avc: denied { write } for pid=29587 comm="syz.1.11598" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 312.433234][ T29] audit: type=1400 audit(2000262792.692:12475): avc: denied { prog_load } for pid=29591 comm="syz.4.11599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.452814][ T29] audit: type=1400 audit(2000262792.692:12476): avc: denied { open } for pid=29591 comm="syz.4.11599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 312.472536][ T29] audit: type=1400 audit(2000262792.692:12477): avc: denied { map_create } for pid=29593 comm="syz.0.11600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.494209][ T29] audit: type=1400 audit(2000262792.692:12478): avc: denied { prog_load } for pid=29595 comm="syz.2.11601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.513879][ T29] audit: type=1400 audit(2000262792.762:12479): avc: denied { map_create } for pid=29593 comm="syz.0.11600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.533654][ T29] audit: type=1400 audit(2000262792.762:12480): avc: denied { prog_load } for pid=29593 comm="syz.0.11600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.713692][T29626] ALSA: seq fatal error: cannot create timer (-19) [ 313.087689][T29708] netlink: 'syz.2.11652': attribute type 1 has an invalid length. [ 313.119122][T29708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.144787][T29708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.157777][T29708] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 313.203798][T29708] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 313.625192][T29759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29759 comm=syz.0.11676 [ 313.859729][T29780] ipvlan2: entered promiscuous mode [ 313.865017][T29780] ipvlan2: entered allmulticast mode [ 313.870465][T29780] macvlan0: entered allmulticast mode [ 313.876040][T29780] veth1_vlan: entered allmulticast mode [ 314.395367][T29800] netlink: 'syz.7.11696': attribute type 1 has an invalid length. [ 314.436329][T29805] block device autoloading is deprecated and will be removed. [ 314.438554][T29800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.444047][T29805] syz.4.11698: attempt to access beyond end of device [ 314.444047][T29805] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 314.503944][T29806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.511871][T29806] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 314.528505][T29806] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 315.059658][T29894] IPv6: NLM_F_CREATE should be specified when creating new route [ 315.107117][T29898] syz.2.11743: attempt to access beyond end of device [ 315.107117][T29898] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 315.339463][T29927] netlink: 'syz.1.11756': attribute type 1 has an invalid length. [ 315.354279][T29927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.377941][T29927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.385399][T29927] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 315.397603][T29927] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 315.498650][T29932] syz.1.11757: attempt to access beyond end of device [ 315.498650][T29932] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 315.688161][T29961] syz.7.11771: attempt to access beyond end of device [ 315.688161][T29961] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 316.314655][T30054] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 316.690402][T30097] __nla_validate_parse: 2 callbacks suppressed [ 316.690421][T30097] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.11834'. [ 316.706558][T30097] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.11834'. [ 316.716134][T30097] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11834'. [ 316.993717][T30111] geneve0: left allmulticast mode [ 317.215046][T30138] netlink: 'syz.4.11854': attribute type 13 has an invalid length. [ 317.305746][T30138] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.312996][T30138] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.334453][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 317.334472][ T29] audit: type=1400 audit(2000262797.612:13111): avc: denied { map_create } for pid=30154 comm="syz.2.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 317.369420][ T29] audit: type=1400 audit(2000262797.612:13112): avc: denied { prog_load } for pid=30154 comm="syz.2.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 317.388969][ T29] audit: type=1400 audit(2000262797.612:13113): avc: denied { create } for pid=30154 comm="syz.2.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 317.410015][ T29] audit: type=1400 audit(2000262797.612:13114): avc: denied { create } for pid=30154 comm="syz.2.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 317.431351][ T29] audit: type=1400 audit(2000262797.632:13115): avc: denied { prog_load } for pid=30156 comm="syz.1.11864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 317.450762][ T29] audit: type=1326 audit(2000262797.632:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30156 comm="syz.1.11864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b53ee969 code=0x7ffc0000 [ 317.474843][ T29] audit: type=1326 audit(2000262797.632:13117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30156 comm="syz.1.11864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b53ee969 code=0x7ffc0000 [ 317.498863][ T29] audit: type=1326 audit(2000262797.632:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30156 comm="syz.1.11864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f04b53ee969 code=0x7ffc0000 [ 317.522927][ T29] audit: type=1326 audit(2000262797.632:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30156 comm="syz.1.11864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b53ee969 code=0x7ffc0000 [ 317.546730][ T29] audit: type=1326 audit(2000262797.632:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30156 comm="syz.1.11864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b53ee969 code=0x7ffc0000 [ 317.612269][T30138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.623426][T30138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.663575][T30138] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.672098][T30138] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.680987][T30138] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.689737][T30138] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.702116][T30167] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 318.036372][T30210] netlink: 'syz.7.11889': attribute type 10 has an invalid length. [ 318.054505][T30210] batman_adv: batadv0: Adding interface: team0 [ 318.060850][T30210] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.088064][T30210] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 318.324278][T30254] xt_TPROXY: Can be used only with -p tcp or -p udp [ 318.545520][T30289] bridge0: entered promiscuous mode [ 318.551742][T30289] bridge0: port 1(macvlan2) entered blocking state [ 318.558581][T30289] bridge0: port 1(macvlan2) entered disabled state [ 318.566577][T30289] macvlan2: entered allmulticast mode [ 318.572041][T30289] bridge0: entered allmulticast mode [ 318.583069][T30289] macvlan2: left allmulticast mode [ 318.589151][T30289] bridge0: left allmulticast mode [ 318.596032][T30289] bridge0: left promiscuous mode [ 318.825643][T30332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11947'. [ 318.985653][T30354] netlink: 'syz.0.11959': attribute type 13 has an invalid length. [ 319.028877][T30354] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.036143][T30354] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.083757][T30354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.094863][T30354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.135227][T30354] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.144299][T30354] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.153298][T30354] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.162656][T30354] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.183649][T30360] vti0: entered promiscuous mode [ 319.254472][T30378] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11969'. [ 319.346747][T30396] binfmt_misc: register: failed to install interpreter file ./file2 [ 319.379996][T30398] netlink: 'syz.7.11981': attribute type 6 has an invalid length. [ 319.386405][T30400] syz.2.11982: attempt to access beyond end of device [ 319.386405][T30400] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 319.387938][T30398] netlink: 100 bytes leftover after parsing attributes in process `syz.7.11981'. [ 319.441168][T30406] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 319.544278][T30419] bridge0: entered promiscuous mode [ 319.550966][T30419] bridge0: port 1(macvlan2) entered blocking state [ 319.557676][T30419] bridge0: port 1(macvlan2) entered disabled state [ 319.564610][T30419] macvlan2: entered allmulticast mode [ 319.570171][T30419] bridge0: entered allmulticast mode [ 319.589836][T30419] macvlan2: left allmulticast mode [ 319.595119][T30419] bridge0: left allmulticast mode [ 319.602696][T30419] bridge0: left promiscuous mode [ 319.615876][T30427] netlink: 'syz.4.11995': attribute type 21 has an invalid length. [ 319.649177][T30433] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11997'. [ 319.798301][T30462] bridge0: port 3(macvlan2) entered blocking state [ 319.804885][T30462] bridge0: port 3(macvlan2) entered disabled state [ 319.811576][T30462] macvlan2: entered allmulticast mode [ 319.817025][T30462] bridge0: entered allmulticast mode [ 319.823677][T30462] macvlan2: left allmulticast mode [ 319.828990][T30462] bridge0: left allmulticast mode [ 319.914694][T30482] netlink: 'syz.2.12020': attribute type 13 has an invalid length. [ 320.043674][T30482] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.052174][T30482] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.060669][T30482] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.069253][T30482] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.081730][T30492] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 320.294140][T30529] netlink: 'syz.7.12042': attribute type 13 has an invalid length. [ 320.363806][T30538] syz.2.12049: attempt to access beyond end of device [ 320.363806][T30538] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 320.412276][T30529] hsr0: left promiscuous mode [ 320.435930][T30529] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.444550][T30529] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.452967][T30529] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.461606][T30529] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.479430][T30546] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.618113][T30562] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 320.699604][T30580] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 320.816736][T30604] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12079'. [ 322.326720][T30790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12164'. [ 322.340378][T30790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12164'. [ 322.365946][ T29] kauditd_printk_skb: 885 callbacks suppressed [ 322.365966][ T29] audit: type=1400 audit(2000262802.642:14006): avc: denied { module_request } for pid=30789 comm="syz.2.12164" kmod="rtnl-link-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 322.394293][ T29] audit: type=1400 audit(2000262802.642:14007): avc: denied { create } for pid=30787 comm="syz.0.12163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 322.415343][ T29] audit: type=1400 audit(2000262802.642:14008): avc: denied { create } for pid=30787 comm="syz.0.12163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 322.436322][ T29] audit: type=1400 audit(2000262802.642:14009): avc: denied { read write } for pid=26410 comm="syz-executor" name="loop0" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 322.462784][ T29] audit: type=1400 audit(2000262802.652:14010): avc: denied { map_create } for pid=30793 comm="syz.0.12167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 322.482305][ T29] audit: type=1400 audit(2000262802.652:14011): avc: denied { prog_load } for pid=30793 comm="syz.0.12167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 322.501644][ T29] audit: type=1400 audit(2000262802.652:14012): avc: denied { create } for pid=30793 comm="syz.0.12167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 322.521624][ T29] audit: type=1400 audit(2000262802.692:14013): avc: denied { map_create } for pid=30795 comm="syz.2.12168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 322.541048][ T29] audit: type=1400 audit(2000262802.692:14014): avc: denied { prog_load } for pid=30795 comm="syz.2.12168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 322.560457][ T29] audit: type=1400 audit(2000262802.692:14015): avc: denied { open } for pid=30795 comm="syz.2.12168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 322.650075][T30819] geneve0: entered allmulticast mode [ 322.815037][T30843] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 324.668145][T31098] macvtap0: refused to change device tx_queue_len [ 326.555393][T31194] netlink: 'syz.2.12355': attribute type 4 has an invalid length. [ 326.622230][T31203] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.12358'. [ 326.692934][T31218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12366'. [ 326.704417][T31218] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.712727][T31218] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.721006][T31218] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.729374][T31218] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.738907][T31218] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.747410][T31218] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.755764][T31218] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.764239][T31218] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.028143][T31236] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.12372'. [ 327.376565][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 327.376579][ T29] audit: type=1400 audit(2000262807.652:14597): avc: denied { read write } for pid=26410 comm="syz-executor" name="loop0" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.406678][ T29] audit: type=1400 audit(2000262807.652:14598): avc: denied { open } for pid=26410 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.430220][ T29] audit: type=1400 audit(2000262807.652:14599): avc: denied { ioctl } for pid=26410 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=739 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.455245][ T29] audit: type=1400 audit(2000262807.672:14600): avc: denied { prog_load } for pid=31250 comm="syz.0.12379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 327.474631][ T29] audit: type=1400 audit(2000262807.672:14601): avc: denied { bpf } for pid=31250 comm="syz.0.12379" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 327.495439][ T29] audit: type=1400 audit(2000262807.672:14602): avc: denied { perfmon } for pid=31250 comm="syz.0.12379" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 327.516647][ T29] audit: type=1400 audit(2000262807.672:14603): avc: denied { prog_run } for pid=31250 comm="syz.0.12379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 327.538553][ T29] audit: type=1400 audit(2000262807.822:14604): avc: denied { name_bind } for pid=31252 comm="syz.0.12380" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 327.560563][ T29] audit: type=1400 audit(2000262807.822:14605): avc: denied { node_bind } for pid=31252 comm="syz.0.12380" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 327.584314][ T29] audit: type=1400 audit(2000262807.852:14606): avc: denied { read } for pid=31254 comm="syz.4.12381" dev="nsfs" ino=4026533145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 327.619058][T31259] loop0: detected capacity change from 0 to 2048 [ 327.638417][T31259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.681569][T31265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12384'. [ 327.707952][T31259] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12383: bg 0: block 234: padding at end of block bitmap is not set [ 327.722963][T31259] EXT4-fs (loop0): Remounting filesystem read-only [ 327.817699][T26410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.881986][T31282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31282 comm=syz.0.12391 [ 327.902991][T31286] netlink: 'syz.2.12393': attribute type 4 has an invalid length. [ 327.910977][T31286] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.12393'. [ 328.079652][T31305] loop0: detected capacity change from 0 to 1024 [ 328.086731][T31305] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 328.118662][T31305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.133955][T31305] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.12411: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 328.164218][T26410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.531992][T31318] loop0: detected capacity change from 0 to 1024 [ 328.548720][T31318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.589939][T31326] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31326 comm=syz.4.12404 [ 328.654772][T31330] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12406'. [ 328.665276][T26410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.886203][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 332.886218][ T29] audit: type=1400 audit(2000262813.162:14647): avc: denied { mounton } for pid=31361 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 332.946950][ T29] audit: type=1400 audit(2000262813.202:14648): avc: denied { module_request } for pid=31361 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 332.969139][ T29] audit: type=1400 audit(2000262813.222:14649): avc: denied { sys_module } for pid=31361 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 333.169466][ T29] audit: type=1400 audit(2000262813.452:14650): avc: denied { setcurrent } for pid=31384 comm="syz.7.12427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 333.189564][ T29] audit: type=1401 audit(2000262813.452:14651): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 333.220059][T31361] chnl_net:caif_netlink_parms(): no params data found [ 333.248134][ T29] audit: type=1400 audit(2000262813.502:14652): avc: denied { setopt } for pid=31388 comm="syz.2.12428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.298994][T31361] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.306163][T31361] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.326482][T31401] No such timeout policy "syz0" [ 333.327085][T31361] bridge_slave_0: entered allmulticast mode [ 333.347681][T31361] bridge_slave_0: entered promiscuous mode [ 333.354519][T31361] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.361668][T31361] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.377878][T31361] bridge_slave_1: entered allmulticast mode [ 333.384614][T31361] bridge_slave_1: entered promiscuous mode [ 333.424425][ T29] audit: type=1400 audit(2000262813.702:14653): avc: denied { relabelfrom } for pid=31400 comm="syz.2.12436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 333.435624][T31410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.444564][ T29] audit: type=1400 audit(2000262813.702:14654): avc: denied { relabelto } for pid=31400 comm="syz.2.12436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 333.472971][ T29] audit: type=1400 audit(2000262813.702:14655): avc: denied { attach_queue } for pid=31400 comm="syz.2.12436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 333.479525][T31410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.511601][T31361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.517008][ T29] audit: type=1400 audit(2000262813.702:14656): avc: denied { read write } for pid=31409 comm="syz.7.12439" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.527649][T31361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.606673][T31361] team0: Port device team_slave_0 added [ 333.617539][T31361] team0: Port device team_slave_1 added [ 333.649829][T31361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.656897][T31361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.683019][T31361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.712917][T31361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.719952][T31361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.746002][T31361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.795019][T31361] hsr_slave_0: entered promiscuous mode [ 333.807574][T31361] hsr_slave_1: entered promiscuous mode [ 333.815522][T31361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.846929][T31361] Cannot create hsr debugfs directory [ 334.068163][T31442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.169277][T31453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12458'. [ 334.254391][T31465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.271134][T31465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.287916][T31361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.314153][T31361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.339997][T31361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.349067][T31361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.405442][T31361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.419647][T31361] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.439579][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.446700][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.468869][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.475959][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.580027][T31361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.677350][T31361] veth0_vlan: entered promiscuous mode [ 334.689574][T31361] veth1_vlan: entered promiscuous mode [ 334.689767][T31518] loop0: detected capacity change from 0 to 1024 [ 334.703234][T31518] EXT4-fs: Ignoring removed nobh option [ 334.708925][T31518] EXT4-fs: Ignoring removed bh option [ 334.719818][T31361] veth0_macvtap: entered promiscuous mode [ 334.733084][T31361] veth1_macvtap: entered promiscuous mode [ 334.745251][T31361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.759425][T31518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.774002][T31361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.786681][T31518] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.12492: Allocating blocks 385-513 which overlap fs metadata [ 334.803486][T31361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.806375][T31518] EXT4-fs (loop0): pa ffff8881007ff620: logic 16, phys. 129, len 24 [ 334.812325][T31361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.812364][T31361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.812433][T31361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.846748][T31518] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 334.862223][T31518] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 334.874630][T31518] EXT4-fs (loop0): This should not happen!! Data will be lost [ 334.874630][T31518] [ 334.884382][T31518] EXT4-fs (loop0): Total free blocks count 0 [ 334.890574][T31518] EXT4-fs (loop0): Free/Dirty block details [ 334.896559][T31518] EXT4-fs (loop0): free_blocks=128 [ 334.901740][T31518] EXT4-fs (loop0): dirty_blocks=0 [ 334.906797][T31518] EXT4-fs (loop0): Block reservation details [ 334.912827][T31518] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 334.920329][T31533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12491'. [ 334.971120][T31537] SELinux: ebitmap: truncated map [ 334.976832][T31537] SELinux: failed to load policy [ 335.137018][T31570] serio: Serial port ptm0 [ 335.173726][T31576] SELinux: ebitmap: truncated map [ 335.180910][T31576] SELinux: failed to load policy [ 335.201777][T31585] 9pnet_fd: Insufficient options for proto=fd [ 335.258102][T31597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12520'. [ 335.323041][T31608] netlink: 'syz.0.12526': attribute type 4 has an invalid length. [ 335.343042][T31608] netlink: 'syz.0.12526': attribute type 4 has an invalid length. [ 335.509923][T31643] netlink: 'syz.2.12541': attribute type 4 has an invalid length. [ 335.525927][T31643] netlink: 'syz.2.12541': attribute type 4 has an invalid length. [ 335.854140][T31675] netlink: 'syz.3.12555': attribute type 4 has an invalid length. [ 335.869489][T31675] netlink: 'syz.3.12555': attribute type 4 has an invalid length. [ 336.242818][T31719] SELinux: ebitmap: map size 1701995264 does not match my size 64 (high bit was 191198305) [ 336.253348][T31719] SELinux: failed to load policy [ 336.310860][T31736] xt_hashlimit: max too large, truncated to 1048576 [ 336.495800][T31755] vhci_hcd: default hub control req: 230b v0011 i0002 l0 [ 336.658985][T31783] loop0: detected capacity change from 0 to 1024 [ 336.679366][T31783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.704559][T26410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.861484][T31811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=31811 comm=syz.7.12618 [ 336.874515][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12618'. [ 336.883694][T31811] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 336.892488][T31811] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 337.150536][T31837] netlink: 'syz.3.12630': attribute type 10 has an invalid length. [ 337.162724][T31837] team0: Device veth0_macvtap failed to register rx_handler [ 337.278723][T31853] netlink: 'syz.7.12638': attribute type 4 has an invalid length. [ 337.286644][T31853] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.12638'. [ 337.378066][T31871] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 337.416847][T31877] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12650'. [ 337.516125][T31893] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 337.644457][T31908] syz_tun: entered allmulticast mode [ 337.650761][T31907] syz_tun: left allmulticast mode [ 337.700711][T31917] loop0: detected capacity change from 0 to 164 [ 337.711247][T31917] rock: directory entry would overflow storage [ 337.717487][T31917] rock: sig=0x4f50, size=4, remaining=3 [ 337.723262][T31917] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 337.824315][T31929] SELinux: failed to load policy [ 337.925146][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 337.925159][ T29] audit: type=1326 audit(2000262818.202:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.0.12680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 337.955774][ T29] audit: type=1326 audit(2000262818.202:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.0.12680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 337.979556][ T29] audit: type=1326 audit(2000262818.202:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.0.12680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1908bd2d0 code=0x7ffc0000 [ 338.003382][ T29] audit: type=1326 audit(2000262818.202:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.0.12680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1908bd2d0 code=0x7ffc0000 [ 338.027179][ T29] audit: type=1326 audit(2000262818.202:14886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.0.12680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 338.051039][ T29] audit: type=1326 audit(2000262818.202:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.0.12680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 338.074787][ T29] audit: type=1326 audit(2000262818.202:14888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.0.12680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1908be969 code=0x7ffc0000 [ 338.114020][T31946] netlink: 'syz.0.12682': attribute type 16 has an invalid length. [ 338.122103][T31946] netlink: 'syz.0.12682': attribute type 17 has an invalid length. [ 338.250500][ T29] audit: type=1400 audit(2000262818.532:14889): avc: denied { connect } for pid=31954 comm="syz.7.12686" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.291115][ T29] audit: type=1400 audit(2000262818.572:14890): avc: denied { mount } for pid=31956 comm="syz.7.12688" name="/" dev="configfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 338.314140][ T29] audit: type=1400 audit(2000262818.572:14891): avc: denied { search } for pid=31956 comm="syz.7.12688" name="/" dev="configfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 338.469948][T31980] xt_hashlimit: max too large, truncated to 1048576 [ 338.533221][T31995] sd 0:0:1:0: device reset [ 338.698667][T32023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12719'. [ 338.707810][T32023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12719'. [ 338.743834][T32027] bond0: entered promiscuous mode [ 338.758727][T32027] batadv0: entered promiscuous mode [ 338.764820][T32027] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 338.774326][T32027] Cannot create hsr debugfs directory [ 338.779892][T32027] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 338.789793][T32027] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 338.801949][T32027] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 338.810207][T32027] bond0: left promiscuous mode [ 338.815543][T32027] batadv0: left promiscuous mode [ 338.905481][T32039] serio: Serial port ttyS3 [ 339.647686][T32067] loop0: detected capacity change from 0 to 1024 [ 339.654424][T32067] EXT4-fs: Ignoring removed orlov option [ 339.664633][T32067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.724194][T32021] --map-set only usable from mangle table [ 340.439306][T32160] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 340.515353][T26410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.632651][T32189] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 340.639194][T32189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.646827][T32189] vhci_hcd vhci_hcd.0: Device attached [ 340.676218][T32190] vhci_hcd: connection closed [ 340.678832][ T5073] vhci_hcd: stop threads [ 340.687831][ T5073] vhci_hcd: release socket [ 340.692258][ T5073] vhci_hcd: disconnect device [ 340.752938][T32204] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 340.836690][T32215] xt_hashlimit: size too large, truncated to 1048576 [ 341.080445][T32238] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 341.262845][T32256] hub 9-0:1.0: USB hub found [ 341.268019][T32256] hub 9-0:1.0: 8 ports detected [ 341.344139][T32267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12824'. [ 341.711828][T32299] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12841'. [ 341.842150][T32315] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 341.923038][T32323] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 342.329068][T32359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12868'. [ 342.433177][T32367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12873'. [ 342.455231][T32371] validate_nla: 1 callbacks suppressed [ 342.455246][T32371] netlink: 'syz.7.12874': attribute type 6 has an invalid length. [ 342.527090][T32377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12876'. [ 342.536188][T32377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12876'. [ 342.545266][T32377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12876'. [ 342.569115][T32379] netlink: 'syz.2.12877': attribute type 1 has an invalid length. [ 342.592884][T32377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12876'. [ 342.602095][T32377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12876'. [ 342.686645][T32396] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 342.926664][T32434] ALSA: seq fatal error: cannot create timer (-16) [ 342.988758][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 342.988772][ T29] audit: type=1400 audit(2000262823.272:15157): avc: denied { name_connect } for pid=32441 comm="syz.0.12907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 343.029426][ T29] audit: type=1326 audit(2000262823.312:15158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32443 comm="syz.2.12908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 343.083950][ T29] audit: type=1326 audit(2000262823.312:15159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32443 comm="syz.2.12908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 343.107857][ T29] audit: type=1326 audit(2000262823.312:15160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32443 comm="syz.2.12908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 343.131582][ T29] audit: type=1326 audit(2000262823.312:15161): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32443 comm="syz.2.12908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 343.155916][ T29] audit: type=1326 audit(2000262823.312:15162): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32443 comm="syz.2.12908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 343.218577][ T29] audit: type=1326 audit(2000262823.482:15163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32458 comm="syz.3.12915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b8ace969 code=0x7ffc0000 [ 343.242566][ T29] audit: type=1326 audit(2000262823.482:15164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32458 comm="syz.3.12915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b8ace969 code=0x7ffc0000 [ 343.266485][ T29] audit: type=1326 audit(2000262823.482:15165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32458 comm="syz.3.12915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49b8ace969 code=0x7ffc0000 [ 343.290559][ T29] audit: type=1326 audit(2000262823.482:15166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32458 comm="syz.3.12915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b8ace969 code=0x7ffc0000 [ 344.041208][T32562] SELinux: failed to load policy [ 344.050390][T32566] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 344.110403][T32569] binfmt_misc: register: failed to install interpreter file ./file2 [ 344.122113][T32577] ALSA: seq fatal error: cannot create timer (-22) [ 344.259255][T32610] 9pnet: p9_errstr2errno: server reported unknown error [ 344.397987][T32620] SELinux: failed to load policy [ 344.424058][T32623] Unknown options in mask 5 [ 344.752992][T32665] netlink: 'syz.4.13008': attribute type 1 has an invalid length. [ 344.795742][T32669] xt_connbytes: Forcing CT accounting to be enabled [ 344.802774][T32669] set match dimension is over the limit! [ 345.141598][T32680] msdos: Unknown parameter '01777777777777777777777' [ 345.235921][T32697] block device autoloading is deprecated and will be removed. [ 345.243814][T32697] syz.0.13022: attempt to access beyond end of device [ 345.243814][T32697] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 345.440307][T32730] netlink: 'syz.2.13037': attribute type 21 has an invalid length. [ 345.448388][T32730] netlink: 'syz.2.13037': attribute type 20 has an invalid length. [ 345.456284][T32730] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.464995][T32732] netlink: 'syz.0.13038': attribute type 298 has an invalid length. [ 345.513428][T32737] program syz.7.13040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.548709][T32745] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 345.753487][ T338] 9pnet: p9_errstr2errno: server reported unknown error HID v0.00 Device [syz1] on syz0 [ 352.466236][ T425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.558283][ T1517] loop0: detected capacity change from 0 to 1024 [ 352.594855][ T1517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 352.683655][T26410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 352.956674][ T1580] loop8: detected capacity change from 0 to 2048 [ 353.005845][ T1580] EXT4-fs (loop8): failed to initialize system zone (-117) [ 353.024127][ T1580] EXT4-fs (loop8): mount failed [ 353.037286][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 353.037303][ T29] audit: type=1400 audit(2000262833.322:15694): avc: denied { watch } for pid=1590 comm="syz.3.13347" path="/178" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 353.137746][ T1604] loop8: detected capacity change from 0 to 512 [ 353.146496][ T1604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.160774][ T1604] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.198618][ T1612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13354'. [ 353.216554][ T425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.238047][ T29] audit: type=1326 audit(2000262833.522:15695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.3.13357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b8ace969 code=0x7ffc0000 [ 353.271615][ T29] audit: type=1326 audit(2000262833.542:15696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.3.13357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f49b8ace969 code=0x7ffc0000 [ 353.295383][ T29] audit: type=1326 audit(2000262833.542:15697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1615 comm="syz.3.13357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b8ace969 code=0x7ffc0000 [ 353.347675][ T29] audit: type=1400 audit(2000262833.632:15698): avc: denied { write } for pid=1627 comm="syz.3.13361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.387830][ T29] audit: type=1400 audit(2000262833.672:15699): avc: denied { name_bind } for pid=1631 comm="syz.3.13363" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 353.448839][ T1636] SELinux: failed to load policy [ 353.475160][ T1646] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13369'. [ 353.599276][ T1662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.617019][ T29] audit: type=1326 audit(2000262833.892:15700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.4.13379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89a93e969 code=0x7ffc0000 [ 353.640766][ T29] audit: type=1326 audit(2000262833.892:15701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.4.13379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89a93e969 code=0x7ffc0000 [ 353.707236][ T29] audit: type=1326 audit(2000262833.902:15702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.4.13379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc89a93e969 code=0x7ffc0000 [ 353.731180][ T29] audit: type=1326 audit(2000262833.902:15703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.4.13379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89a93e969 code=0x7ffc0000 [ 353.825825][ T1684] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13386'. [ 353.835002][ T1684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13386'. [ 353.897574][ T1691] vhci_hcd: invalid port number 96 [ 353.902814][ T1691] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 354.031026][ T1742] loop0: detected capacity change from 0 to 1024 [ 354.058243][ T1742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.088552][ T1742] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 354.116177][ T1742] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 483 with error 28 [ 354.128620][ T1742] EXT4-fs (loop0): This should not happen!! Data will be lost [ 354.128620][ T1742] [ 354.138352][ T1742] EXT4-fs (loop0): Total free blocks count 0 [ 354.144366][ T1742] EXT4-fs (loop0): Free/Dirty block details [ 354.150413][ T1742] EXT4-fs (loop0): free_blocks=20480 [ 354.155724][ T1742] EXT4-fs (loop0): dirty_blocks=496 [ 354.160967][ T1742] EXT4-fs (loop0): Block reservation details [ 354.166992][ T1742] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 354.192287][ T5073] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 354.248248][ T1771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13411'. [ 354.334007][ T1783] ip6gre1: entered allmulticast mode [ 354.455020][ T1813] bond2: entered promiscuous mode [ 354.460287][ T1813] bond2: entered allmulticast mode [ 354.466232][ T1813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.490064][ T1813] bond2 (unregistering): Released all slaves [ 354.562662][ T1897] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 355.006056][ T1918] loop0: detected capacity change from 0 to 128 [ 355.017387][ T1919] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 355.039625][ T1918] EXT4-fs: Ignoring removed nobh option [ 355.053302][ T1918] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.066978][ T1919] SELinux: failed to load policy [ 355.081358][ T1918] ext4 filesystem being mounted at /751/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.231972][T26410] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.305919][ T1940] program syz.3.13453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.348241][ T1946] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 355.348241][ T1946] program wg1 not setting count and/or reply_len properly [ 355.358915][ T1950] loop0: detected capacity change from 0 to 512 [ 355.475740][ T1950] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 355.484862][ T1950] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 355.558558][ T1950] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 355.575132][ T1962] SELinux: ebitmap: truncated map [ 355.587429][ T1962] SELinux: failed to load policy [ 355.619715][ T1968] serio: Serial port ptm0 [ 355.625067][ T1950] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 355.633285][ T1950] System zones: 0-2, 18-18, 34-34 [ 355.641165][ T1950] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 355.656195][ T1950] EXT4-fs (loop0): 1 truncate cleaned up [ 355.664180][ T1950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.842276][T26410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.877214][ T2010] __nla_validate_parse: 2 callbacks suppressed [ 356.877231][ T2010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13478'. [ 357.136726][ T2055] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 357.136726][ T2055] program syz.3.13498 not setting count and/or reply_len properly [ 357.805379][ T2082] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 357.811923][ T2082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 357.819573][ T2082] vhci_hcd vhci_hcd.0: Device attached [ 357.825950][ T2083] vhci_hcd: connection closed [ 357.826159][ T5084] vhci_hcd: stop threads [ 357.835156][ T5084] vhci_hcd: release socket [ 357.839625][ T5084] vhci_hcd: disconnect device [ 358.054636][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 358.054650][ T29] audit: type=1326 audit(2000262838.332:15813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.4.13520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89a93e969 code=0x7ffc0000 [ 358.084919][ T29] audit: type=1326 audit(2000262838.332:15814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.4.13520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc89a93e969 code=0x7ffc0000 [ 358.108733][ T29] audit: type=1326 audit(2000262838.332:15815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.4.13520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89a93e969 code=0x7ffc0000 [ 358.132411][ T29] audit: type=1326 audit(2000262838.332:15816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.4.13520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89a93e969 code=0x7ffc0000 [ 358.156377][ T29] audit: type=1326 audit(2000262838.422:15817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.2.13517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 358.180051][ T29] audit: type=1326 audit(2000262838.422:15818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2099 comm="syz.2.13517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 358.317543][ T29] audit: type=1400 audit(2000262838.602:15819): avc: denied { mounton } for pid=2134 comm="syz.3.13533" path="/222/file0" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 358.384348][ T2139] SELinux: ebitmap: map size 1701995264 does not match my size 64 (high bit was 191198305) [ 358.395840][ T2139] SELinux: failed to load policy [ 358.451169][ T2148] xt_hashlimit: max too large, truncated to 1048576 [ 358.515661][ T29] audit: type=1326 audit(2000262838.792:15820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2150 comm="syz.8.13539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a188fe969 code=0x7ffc0000 [ 358.539571][ T29] audit: type=1326 audit(2000262838.792:15821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2150 comm="syz.8.13539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a188fe969 code=0x7ffc0000 [ 358.563362][ T29] audit: type=1326 audit(2000262838.792:15822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2150 comm="syz.8.13539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a188fe969 code=0x7ffc0000 [ 359.118252][ T2181] ALSA: seq fatal error: cannot create timer (-19) [ 359.148497][ T2188] vhci_hcd: default hub control req: 230b v0011 i0002 l0 [ 359.456701][ T2236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2236 comm=syz.3.13577 [ 359.484821][ T2236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13577'. [ 359.495487][ T2236] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 359.504461][ T2236] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 359.855813][ T2292] netlink: 'syz.8.13592': attribute type 10 has an invalid length. [ 359.879342][ T2292] team0: Device veth0_macvtap failed to register rx_handler [ 359.985378][ T2306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13599'. [ 359.994812][ T2306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13599'. [ 360.339597][ T2335] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 360.361324][ T2337] loop0: detected capacity change from 0 to 512 [ 360.368552][ T2337] EXT4-fs: dax option not supported [ 360.376477][ T2339] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13617'. [ 360.476996][ T2356] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 360.616206][ T2375] syz_tun: entered allmulticast mode [ 360.622644][ T2373] syz_tun: left allmulticast mode [ 360.803685][ T2392] SELinux: failed to load policy [ 362.503745][ T2494] netlink: 'syz.4.13679': attribute type 1 has an invalid length. [ 362.616768][ T2508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13688'. [ 362.626112][ T2508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13688'. [ 362.664079][ T2514] batadv0: entered promiscuous mode [ 362.676756][ T2514] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 362.694753][ T2514] Cannot create hsr debugfs directory [ 362.703466][ T2514] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 362.713491][ T2514] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 362.727160][ T2514] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 362.744639][ T2514] batadv0: left promiscuous mode [ 363.824797][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 363.824815][ T29] audit: type=1326 audit(2000262844.102:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 363.854816][ T29] audit: type=1326 audit(2000262844.102:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 363.903708][ T29] audit: type=1326 audit(2000262844.102:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 363.927609][ T29] audit: type=1326 audit(2000262844.102:15922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 363.952046][ T29] audit: type=1326 audit(2000262844.102:15923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 363.975666][ T29] audit: type=1326 audit(2000262844.102:15924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 363.999560][ T29] audit: type=1326 audit(2000262844.102:15925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 364.023377][ T29] audit: type=1326 audit(2000262844.102:15926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 364.047023][ T29] audit: type=1326 audit(2000262844.102:15927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 364.070703][ T29] audit: type=1326 audit(2000262844.102:15928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2568 comm="syz.2.13710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454c61e969 code=0x7ffc0000 [ 364.862441][ T2584] syz.8.13715 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 364.873605][ T2584] CPU: 1 UID: 0 PID: 2584 Comm: syz.8.13715 Tainted: G W 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 364.873691][ T2584] Tainted: [W]=WARN [ 364.873698][ T2584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 364.873711][ T2584] Call Trace: [ 364.873717][ T2584] [ 364.873726][ T2584] __dump_stack+0x1d/0x30 [ 364.873782][ T2584] dump_stack_lvl+0xe8/0x140 [ 364.873800][ T2584] dump_stack+0x15/0x1b [ 364.873815][ T2584] dump_header+0x81/0x220 [ 364.873846][ T2584] oom_kill_process+0x334/0x3f0 [ 364.873937][ T2584] out_of_memory+0x979/0xb80 [ 364.874036][ T2584] ? css_next_descendant_pre+0x138/0x160 [ 364.874059][ T2584] mem_cgroup_out_of_memory+0x13d/0x190 [ 364.874092][ T2584] try_charge_memcg+0x5e2/0x870 [ 364.874148][ T2584] charge_memcg+0x51/0xc0 [ 364.874178][ T2584] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 364.874206][ T2584] __read_swap_cache_async+0x1df/0x350 [ 364.874365][ T2584] swap_cluster_readahead+0x277/0x3e0 [ 364.874394][ T2584] swapin_readahead+0xde/0x6f0 [ 364.874473][ T2584] ? __filemap_get_folio+0x49f/0x650 [ 364.874507][ T2584] ? swap_cache_get_folio+0x77/0x200 [ 364.874595][ T2584] do_swap_page+0x301/0x2460 [ 364.874704][ T2584] ? cgroup_rstat_updated+0xa3/0x510 [ 364.874813][ T2584] ? perf_trace_memcg_rstat_events+0x7c/0x1d0 [ 364.874926][ T2584] ? __pfx_default_wake_function+0x10/0x10 [ 364.874952][ T2584] handle_mm_fault+0xb60/0x2ae0 [ 364.875009][ T2584] ? mas_walk+0xf2/0x120 [ 364.875032][ T2584] do_user_addr_fault+0x636/0x1090 [ 364.875139][ T2584] ? switch_fpu_return+0xe/0x20 [ 364.875173][ T2584] ? fpregs_assert_state_consistent+0x84/0xa0 [ 364.875304][ T2584] exc_page_fault+0x54/0xc0 [ 364.875328][ T2584] asm_exc_page_fault+0x26/0x30 [ 364.875353][ T2584] RIP: 0033:0x7f0a187d53ac [ 364.875371][ T2584] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 364.875388][ T2584] RSP: 002b:00007ffe3c7b9030 EFLAGS: 00010206 [ 364.875403][ T2584] RAX: 0000000000000000 RBX: 00007f0a18b25fa0 RCX: 0000000000000000 [ 364.875448][ T2584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555583c52808 [ 364.875459][ T2584] RBP: 00007f0a18b27ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 364.875471][ T2584] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000059188 [ 364.875482][ T2584] R13: 00007ffe3c7b9120 R14: ffffffffffffffff R15: 00007ffe3c7b9140 [ 364.875532][ T2584] [ 364.875540][ T2584] memory: usage 307200kB, limit 307200kB, failcnt 443 [ 365.127100][ T2584] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 365.135040][ T2584] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 365.142629][ T2584] Memory cgroup stats for /syz8: [ 365.143673][ T2584] cache 0 [ 365.151611][ T2584] rss 0 [ 365.154385][ T2584] shmem 0 [ 365.157473][ T2584] mapped_file 0 [ 365.161006][ T2584] dirty 0 [ 365.164151][ T2584] writeback 0 [ 365.167556][ T2584] workingset_refault_anon 73 [ 365.172160][ T2584] workingset_refault_file 0 [ 365.176745][ T2584] swap 380928 [ 365.180219][ T2584] swapcached 4096 [ 365.183854][ T2584] pgpgin 93089 [ 365.187281][ T2584] pgpgout 93085 [ 365.190769][ T2584] pgfault 158076 [ 365.194319][ T2584] pgmajfault 58 [ 365.197853][ T2584] inactive_anon 4096 [ 365.201807][ T2584] active_anon 0 [ 365.205298][ T2584] inactive_file 12288 [ 365.209304][ T2584] active_file 0 [ 365.212778][ T2584] unevictable 0 [ 365.216251][ T2584] hierarchical_memory_limit 314572800 [ 365.221717][ T2584] hierarchical_memsw_limit 9223372036854771712 [ 365.228047][ T2584] total_cache 0 [ 365.231560][ T2584] total_rss 0 [ 365.234853][ T2584] total_shmem 0 [ 365.238389][ T2584] total_mapped_file 0 [ 365.242391][ T2584] total_dirty 0 [ 365.245928][ T2584] total_writeback 0 [ 365.249868][ T2584] total_workingset_refault_anon 73 [ 365.255010][ T2584] total_workingset_refault_file 0 [ 365.260063][ T2584] total_swap 380928 [ 365.263911][ T2584] total_swapcached 4096 [ 365.268097][ T2584] total_pgpgin 93089 [ 365.272218][ T2584] total_pgpgout 93085 [ 365.276231][ T2584] total_pgfault 158076 [ 365.280379][ T2584] total_pgmajfault 58 [ 365.284367][ T2584] total_inactive_anon 4096 [ 365.288874][ T2584] total_active_anon 0 [ 365.292870][ T2584] total_inactive_file 12288 [ 365.297398][ T2584] total_active_file 0 [ 365.301385][ T2584] total_unevictable 0 [ 365.305365][ T2584] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.13715,pid=2584,uid=0 [ 365.320079][ T2584] Memory cgroup out of memory: Killed process 2584 (syz.8.13715) total-vm:95664kB, anon-rss:916kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 365.559729][ T2589] Cannot find add_set index 0 as target [ 365.618991][ T2658] xt_hashlimit: max too large, truncated to 1048576 [ 365.654940][ T2663] loop8: detected capacity change from 0 to 128 [ 365.706943][ T2663] loop8: detected capacity change from 128 to 0 [ 365.721300][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.721300][ T2663] loop8: rw=524288, sector=33, nr_sectors = 1 limit=0 [ 365.748157][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.748157][ T2663] loop8: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 365.772255][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.772255][ T2663] loop8: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 365.793505][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.793505][ T2663] loop8: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 365.807119][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.807119][ T2663] loop8: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 365.826754][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.826754][ T2663] loop8: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 365.840576][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.840576][ T2663] loop8: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 365.854399][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.854399][ T2663] loop8: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 365.890149][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.890149][ T2663] loop8: rw=0, sector=33, nr_sectors = 1 limit=0 [ 365.903859][ T2663] FAT-fs (loop8): Directory bread(block 33) failed [ 365.910823][ T2663] syz.8.13748: attempt to access beyond end of device [ 365.910823][ T2663] loop8: rw=0, sector=34, nr_sectors = 1 limit=0 [ 365.924042][ T2663] FAT-fs (loop8): Directory bread(block 34) failed [ 365.930791][ T2663] FAT-fs (loop8): Directory bread(block 35) failed [ 365.968603][ T2663] FAT-fs (loop8): Directory bread(block 36) failed [ 365.982218][ T2663] FAT-fs (loop8): Directory bread(block 37) failed [ 365.995142][ T2663] FAT-fs (loop8): Directory bread(block 38) failed [ 366.002071][ T2663] FAT-fs (loop8): Directory bread(block 39) failed [ 366.010554][ T2663] FAT-fs (loop8): Directory bread(block 40) failed [ 366.017265][ T2663] FAT-fs (loop8): Directory bread(block 33) failed [ 366.023880][ T2663] FAT-fs (loop8): Directory bread(block 34) failed [ 366.178846][ T2668] ================================================================== [ 366.186972][ T2668] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 366.195612][ T2668] [ 366.197933][ T2668] write to 0xffff888104671e28 of 8 bytes by task 2670 on cpu 0: [ 366.205586][ T2668] shmem_file_splice_read+0x444/0x5d0 [ 366.210990][ T2668] splice_direct_to_actor+0x26c/0x680 [ 366.216378][ T2668] do_splice_direct+0xda/0x150 [ 366.221157][ T2668] do_sendfile+0x380/0x640 [ 366.225613][ T2668] __x64_sys_sendfile64+0x105/0x150 [ 366.230843][ T2668] x64_sys_call+0xb39/0x2fb0 [ 366.235455][ T2668] do_syscall_64+0xd0/0x1a0 [ 366.239979][ T2668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.245903][ T2668] [ 366.248244][ T2668] write to 0xffff888104671e28 of 8 bytes by task 2668 on cpu 1: [ 366.255897][ T2668] shmem_file_splice_read+0x444/0x5d0 [ 366.261316][ T2668] splice_direct_to_actor+0x26c/0x680 [ 366.266724][ T2668] do_splice_direct+0xda/0x150 [ 366.271518][ T2668] do_sendfile+0x380/0x640 [ 366.275956][ T2668] __x64_sys_sendfile64+0x105/0x150 [ 366.281185][ T2668] x64_sys_call+0xb39/0x2fb0 [ 366.285805][ T2668] do_syscall_64+0xd0/0x1a0 [ 366.290349][ T2668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.296263][ T2668] [ 366.298611][ T2668] value changed: 0x0000000000005199 -> 0x00000000000051a1 [ 366.305728][ T2668] [ 366.308063][ T2668] Reported by Kernel Concurrency Sanitizer on: [ 366.314223][ T2668] CPU: 1 UID: 0 PID: 2668 Comm: syz.4.13758 Tainted: G W 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 366.328310][ T2668] Tainted: [W]=WARN [ 366.332129][ T2668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 366.342207][ T2668] ================================================================== [ 366.367952][ T5070] FAT-fs (loop8): bread failed in fat_clusters_flush [ 366.375561][ T2146] FAT-fs (loop8): unable to read boot sector to mark fs as dirty