last executing test programs: 1m22.231451675s ago: executing program 32 (id=6122): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x38}, {0x0}], 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1m22.186078415s ago: executing program 33 (id=6124): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) geteuid() 1m22.185766195s ago: executing program 34 (id=6126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xf5b}) fcntl$lock(r1, 0x25, &(0x7f0000002200)={0x2, 0x1, 0xc, 0x4}) 1m9.337164326s ago: executing program 5 (id=6568): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) 1m8.942085164s ago: executing program 5 (id=6582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002140)={r0, 0x0, 0x0}, 0x20) 1m8.905897425s ago: executing program 5 (id=6585): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001080)={r1, 0x10}, 0x8) 1m8.899938825s ago: executing program 1 (id=6586): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) 1m8.861026616s ago: executing program 5 (id=6589): io_setup(0x1, &(0x7f0000000b80)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_destroy(r0) 1m8.858496206s ago: executing program 1 (id=6590): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) cachestat(r2, &(0x7f0000000500)={0xfffffffffffffffe, 0x6}, &(0x7f0000000540), 0x0) 1m8.772623388s ago: executing program 1 (id=6592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) alarm(0x5) 1m8.743258388s ago: executing program 1 (id=6593): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<20\t&|') 1m8.697020849s ago: executing program 1 (id=6594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1m8.576327151s ago: executing program 5 (id=6596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) 1m8.470271624s ago: executing program 35 (id=6597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1m8.395069125s ago: executing program 1 (id=6599): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r1, 0xfffffff8}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00000800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.394884085s ago: executing program 36 (id=6599): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r1, 0xfffffff8}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00000800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.384925265s ago: executing program 5 (id=6600): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) tkill(r0, 0x7) 1m8.365880565s ago: executing program 37 (id=6600): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) tkill(r0, 0x7) 1m5.838509615s ago: executing program 6 (id=6627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda", 0x17}], 0x1}}], 0x2, 0x4004040) 1m5.811412435s ago: executing program 6 (id=6629): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1}, 0x7bfd}], 0x1, 0x40010000, 0x0) bind$tipc(r0, 0x0, 0x0) 1m4.917818113s ago: executing program 4 (id=6637): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 1m4.916264283s ago: executing program 6 (id=6638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x3, 0x83, 0x0, 0x40, 0x14, 0x6}, @ipv4=@igmp={{0x6, 0x4, 0x2, 0x7, 0x20, 0x67, 0x0, 0x6f, 0x2, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x8e, 0x3, 0x6}]}}, {0x1e, 0x7, 0x0, @local}}}, 0x2e) 1m4.809405425s ago: executing program 4 (id=6639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) ioctl$TCSBRKP(r1, 0x5425, 0x80000000) 1m4.761339496s ago: executing program 9 (id=6641): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) 1m4.672525698s ago: executing program 6 (id=6643): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x5, 0x448, {0x2, 0x8, 0x5, 0x401}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m4.158730777s ago: executing program 4 (id=6649): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1}, 0x7bfd}], 0x1, 0x40010000, 0x0) bind$tipc(r0, 0x0, 0x0) 1m4.083816909s ago: executing program 4 (id=6651): io_setup(0x1, &(0x7f0000000b80)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_destroy(r0) 1m3.911072382s ago: executing program 9 (id=6654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 1m3.883336703s ago: executing program 9 (id=6655): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 1m3.868834513s ago: executing program 9 (id=6656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r1, 0xffffffffffffffff, 0x1000000000000000) 1m3.841060044s ago: executing program 9 (id=6657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 1m3.823527624s ago: executing program 6 (id=6658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) alarm(0x5) 1m3.630377168s ago: executing program 6 (id=6659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x4000) 1m3.630152618s ago: executing program 4 (id=6660): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 1m3.629963488s ago: executing program 38 (id=6659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x4000) 1m3.459123541s ago: executing program 4 (id=6662): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1m3.458399341s ago: executing program 39 (id=6662): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1m2.919856222s ago: executing program 9 (id=6663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 1m2.919635652s ago: executing program 40 (id=6663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 10.022077845s ago: executing program 7 (id=9186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 9.971005116s ago: executing program 7 (id=9190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1286dd6c00000000002b01fe800000000000000000000000000025fe8000000000000000000000000000aa"], 0x0) 9.952266186s ago: executing program 7 (id=9191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.939211807s ago: executing program 7 (id=9193): io_setup(0x403, &(0x7f0000000500)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r1}, 0x18) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.854365948s ago: executing program 7 (id=9198): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9.785941449s ago: executing program 7 (id=9204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0xfffffffc, 0x10000010}, 0xf) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbff, {0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x0) 9.675984051s ago: executing program 2 (id=9211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r1, 0xffffffffffffffff, 0x0) 9.626128933s ago: executing program 2 (id=9215): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 9.521153774s ago: executing program 2 (id=9222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000852}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.515056405s ago: executing program 2 (id=9224): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000240)={{0x0, 0x0, 0xffff, 0x1, 0x6}}) 9.416370627s ago: executing program 2 (id=9230): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9.367847077s ago: executing program 2 (id=9235): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1c, 0xc, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 2.08192939s ago: executing program 0 (id=9469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 2.050841441s ago: executing program 0 (id=9470): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init() r3 = dup3(r2, r0, 0x80000) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 1.367007474s ago: executing program 8 (id=9491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) 1.326915985s ago: executing program 8 (id=9492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) 1.292997185s ago: executing program 8 (id=9494): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040), 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) 1.228743237s ago: executing program 8 (id=9497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 1.186630118s ago: executing program 0 (id=9498): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4001) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x6, 0x7}, &(0x7f0000000000)=0x90) 1.06791591s ago: executing program 0 (id=9499): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4e8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4bc, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2dbc04b6, 0x1, 0x10, 0xa, 0x4, 0x0, 0x3, 0x10, 0x7, 0x9, 0x0, 0xd, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x81, 0x5, 0x537d, 0x0, 0xfffffffa, 0x12000000, 0x6, 0x3, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x7fff, 0x0, 0xffffffff, 0x10, 0x258, 0x5, 0x8, 0x4, 0x1d, 0x5, 0x1, 0xfffff173, 0x1, 0x401, 0x7, 0x8000, 0x10000, 0xe, 0x3, 0x1, 0xd, 0x8, 0x0, 0x0, 0x4, 0xa79, 0x5, 0xc, 0x2, 0x0, 0x30000, 0xd, 0x6, 0xfff, 0x40, 0xfffeffff, 0x7fff, 0x6b81102, 0x7f, 0xfffffffe, 0x800000, 0x6, 0x8, 0x0, 0xe, 0x20000, 0xffff, 0x80000001, 0x1, 0x9a0, 0x4, 0x8, 0x6, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x0, 0x40, 0xfc5, 0x800000, 0xb422, 0x7, 0x1, 0x8, 0x1, 0xa0bd, 0x200, 0x400, 0x1, 0xc, 0xff, 0x3, 0x2, 0xffffffc0, 0x8, 0x8001, 0x3f3, 0x8, 0x9, 0xf, 0x4, 0x3, 0x0, 0x6, 0xd, 0x8, 0x9, 0x800, 0x0, 0x9, 0x3, 0x8, 0x2, 0xf4, 0x81, 0x0, 0x6, 0x200, 0xad07, 0x8001, 0x8, 0x9, 0x100, 0x1, 0xb10, 0x8, 0x7, 0xfff, 0xa, 0x4e, 0x80, 0xfec300, 0xe815, 0x1, 0xfffffff9, 0xfffff801, 0x9, 0x1, 0xff, 0x7, 0x7, 0x7, 0x8001, 0x7, 0x1ff, 0x401, 0x5, 0x2, 0x1ff, 0x4, 0x2, 0x5f, 0x2, 0x1, 0x1, 0xb, 0x7, 0xb, 0x7, 0x9, 0x9, 0x68, 0x8, 0x6, 0x4, 0x9ca, 0x100, 0x9, 0xfff, 0xfffffffd, 0x1, 0xf, 0x2, 0xfffffff8, 0x80000001, 0x4, 0x3, 0x8, 0x8, 0x9, 0x3, 0x1, 0x7, 0x8, 0x5, 0x4, 0xc, 0x0, 0xf, 0x80000000, 0x5, 0x5, 0xfffffff7, 0xd6f, 0x4, 0x38, 0x1, 0x6, 0x9bb, 0xd31d, 0xfff, 0xfff, 0x40, 0x101, 0x3, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x1c000000, 0x1, 0x6, 0x9, 0x6, 0x3, 0x1, 0x0, 0x10000, 0x2, 0x7, 0x7, 0x6, 0xfffffff0, 0x2, 0x3, 0x8090, 0x7, 0x6d8, 0xfffffffb, 0x6, 0x400, 0x800, 0x8, 0x6, 0x76]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e8ccd9d, 0x8, 0x9, 0x9, 0x7fffffff, {0x8, 0x2, 0x92fd, 0x0, 0x1, 0x100}, {0x1, 0x2, 0xab11, 0x7, 0x6}, 0x3, 0x2, 0x6}}]}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0xccd4ddef28b9e90e}, 0x40094) 993.921801ms ago: executing program 0 (id=9500): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb, 0x0, 0x7ffc1feb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x7f, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 705.537667ms ago: executing program 0 (id=9502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 345.700434ms ago: executing program 3 (id=9508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x17}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 252.781035ms ago: executing program 3 (id=9509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 230.925156ms ago: executing program 8 (id=9510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a17c6209d1b079045d0013c09618000000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 208.054156ms ago: executing program 3 (id=9511): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x1600, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 204.971127ms ago: executing program 8 (id=9512): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 160.587327ms ago: executing program 3 (id=9513): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 126.212168ms ago: executing program 3 (id=9514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 0s ago: executing program 3 (id=9515): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xfe) setuid(0xee01) kernel console output (not intermixed with test programs): [ 166.976223][T18220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.997635][T18220] team0: Port device team_slave_0 added [ 167.005664][T18220] team0: Port device team_slave_1 added [ 167.029774][T18220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.036780][T18220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.062840][T18220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.074730][T18220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.081689][T18220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.107721][T18220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.131649][T18185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.151722][T18220] hsr_slave_0: entered promiscuous mode [ 167.157832][T18220] hsr_slave_1: entered promiscuous mode [ 167.163822][T18220] debugfs: 'hsr0' already exists in 'hsr' [ 167.169528][T18220] Cannot create hsr debugfs directory [ 167.236558][T18185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.330084][T18185] veth0_vlan: entered promiscuous mode [ 167.339887][T18185] veth1_vlan: entered promiscuous mode [ 167.354390][T18185] veth0_macvtap: entered promiscuous mode [ 167.363598][T18185] veth1_macvtap: entered promiscuous mode [ 167.374043][T18185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.385041][T18185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.396814][ T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.408524][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.410789][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 167.419452][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.435453][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.468720][T18220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.477634][T18220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 167.490242][T18220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.508955][T18319] loop9: detected capacity change from 0 to 512 [ 167.515633][T18220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.526614][T18319] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.570595][T18319] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm gtp: Failed to acquire dquot type 1 [ 167.587055][T18319] EXT4-fs (loop9): 1 truncate cleaned up [ 167.599672][T18319] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.619436][T18220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.646189][T18220] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.664969][T18161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.675759][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.682913][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.719813][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.727025][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.757525][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 167.757540][ T29] audit: type=1400 audit(1758646066.287:6685): avc: denied { create } for pid=18339 comm="syz.6.6638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.797221][T18220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.807749][T18220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.823854][ T29] audit: type=1400 audit(1758646066.327:6686): avc: denied { ioctl } for pid=18339 comm="syz.6.6638" path="socket:[58138]" dev="sockfs" ino=58138 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.853965][T18341] syzkaller1: entered promiscuous mode [ 167.859485][T18341] syzkaller1: entered allmulticast mode [ 167.891122][ T29] audit: type=1400 audit(1758646066.417:6687): avc: denied { setopt } for pid=18347 comm="syz.9.6641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.942244][T18220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.964009][ T29] audit: type=1400 audit(1758646066.487:6688): avc: denied { write } for pid=18357 comm="syz.6.6643" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.987642][ T29] audit: type=1400 audit(1758646066.487:6689): avc: denied { open } for pid=18357 comm="syz.6.6643" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 168.014624][ T29] audit: type=1400 audit(1758646066.547:6690): avc: denied { read } for pid=18357 comm="syz.6.6643" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 168.037903][ T29] audit: type=1400 audit(1758646066.547:6691): avc: denied { ioctl } for pid=18357 comm="syz.6.6643" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 168.048119][T18220] veth0_vlan: entered promiscuous mode [ 168.073637][T18220] veth1_vlan: entered promiscuous mode [ 168.089894][T18220] veth0_macvtap: entered promiscuous mode [ 168.097429][T18220] veth1_macvtap: entered promiscuous mode [ 168.108010][T18220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.119466][T18220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.131054][ T1451] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.139824][ T1451] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.150030][ T1451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.159090][ T1451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.188932][ T29] audit: type=1400 audit(1758646066.717:6692): avc: denied { write } for pid=18220 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 168.214603][ T29] audit: type=1400 audit(1758646066.717:6693): avc: denied { open } for pid=18220 comm="syz-executor" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 168.252597][T18370] syzkaller1: entered promiscuous mode [ 168.258108][T18370] syzkaller1: entered allmulticast mode [ 168.289801][ T29] audit: type=1326 audit(1758646066.817:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18373 comm="syz.2.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 168.345621][T18378] loop2: detected capacity change from 0 to 512 [ 168.352998][T18378] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.374441][T18378] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm gtp: Failed to acquire dquot type 1 [ 168.385774][T18378] EXT4-fs (loop2): 1 truncate cleaned up [ 168.392141][T18378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.416267][T18220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.450743][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 168.960168][ T150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.013353][ T150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.103726][ T150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.154145][ T150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.213050][ T150] bridge_slave_1: left allmulticast mode [ 169.218709][ T150] bridge_slave_1: left promiscuous mode [ 169.224457][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.232383][ T150] bridge_slave_0: left allmulticast mode [ 169.238079][ T150] bridge_slave_0: left promiscuous mode [ 169.243937][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.313323][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.323144][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.332730][ T150] bond0 (unregistering): Released all slaves [ 169.378690][ T150] hsr_slave_0: left promiscuous mode [ 169.384604][ T150] hsr_slave_1: left promiscuous mode [ 169.390111][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.397561][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.405048][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.412711][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.423522][ T150] veth1_macvtap: left promiscuous mode [ 169.428995][ T150] veth0_macvtap: left promiscuous mode [ 169.434600][ T150] veth1_vlan: left promiscuous mode [ 169.439837][ T150] veth0_vlan: left promiscuous mode [ 169.490706][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 169.498770][ T150] team0 (unregistering): Port device team_slave_1 removed [ 169.509325][ T150] team0 (unregistering): Port device team_slave_0 removed [ 169.785654][ T150] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.824706][ T150] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.873380][ T150] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.886860][T18424] chnl_net:caif_netlink_parms(): no params data found [ 169.920550][T18424] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.927762][T18424] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.935244][T18424] bridge_slave_0: entered allmulticast mode [ 169.942583][T18424] bridge_slave_0: entered promiscuous mode [ 169.950880][ T150] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.962250][T18424] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.969280][T18424] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.976626][T18424] bridge_slave_1: entered allmulticast mode [ 169.983269][T18424] bridge_slave_1: entered promiscuous mode [ 170.000709][T18424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.011392][T18424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.030159][T18424] team0: Port device team_slave_0 added [ 170.037065][T18424] team0: Port device team_slave_1 added [ 170.058645][T18424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.065663][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.091602][T18424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.105298][T18424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.112396][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.138531][T18424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.166156][ T150] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.209276][T18424] hsr_slave_0: entered promiscuous mode [ 170.231327][T18424] hsr_slave_1: entered promiscuous mode [ 170.237626][T18424] debugfs: 'hsr0' already exists in 'hsr' [ 170.243579][T18424] Cannot create hsr debugfs directory [ 170.260246][ T150] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.316755][ T150] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.382875][ T150] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.463145][ T150] bridge_slave_1: left allmulticast mode [ 170.468808][ T150] bridge_slave_1: left promiscuous mode [ 170.474536][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.482476][ T150] bridge_slave_0: left allmulticast mode [ 170.488296][ T150] bridge_slave_0: left promiscuous mode [ 170.494172][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.530660][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 170.583657][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.593746][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.603499][ T150] bond0 (unregistering): Released all slaves [ 170.672025][ T158] smc: removing ib device syz2 [ 170.672121][ T150] bond0 (unregistering): Released all slaves [ 170.785860][T18443] chnl_net:caif_netlink_parms(): no params data found [ 170.809621][T18446] chnl_net:caif_netlink_parms(): no params data found [ 170.887232][ T150] tipc: Disabling bearer [ 170.892332][ T150] tipc: Left network mode [ 170.909723][T18443] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.916863][T18443] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.924549][T18443] bridge_slave_0: entered allmulticast mode [ 170.931067][T18443] bridge_slave_0: entered promiscuous mode [ 170.939678][ T150] hsr_slave_0: left promiscuous mode [ 170.945561][ T150] hsr_slave_1: left promiscuous mode [ 170.951249][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.958699][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.966206][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.973691][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.982646][ T150] hsr_slave_0: left promiscuous mode [ 170.988343][ T150] hsr_slave_1: left promiscuous mode [ 170.997403][ T150] veth1_macvtap: left promiscuous mode [ 171.002939][ T150] veth0_macvtap: left promiscuous mode [ 171.008546][ T150] veth1_vlan: left promiscuous mode [ 171.013936][ T150] veth0_vlan: left promiscuous mode [ 171.019663][ T150] veth1_macvtap: left promiscuous mode [ 171.026724][ T150] veth0_macvtap: left promiscuous mode [ 171.032812][ T150] veth1_vlan: left promiscuous mode [ 171.040269][ T150] veth0_vlan: left promiscuous mode [ 171.148561][T18490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.157240][T18490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.167022][T18490] netlink: 'syz.8.6676': attribute type 1 has an invalid length. [ 171.174918][T18490] netlink: 216 bytes leftover after parsing attributes in process `syz.8.6676'. [ 171.184274][ T150] team0 (unregistering): Port device team_slave_1 removed [ 171.195499][ T150] team0 (unregistering): Port device team_slave_0 removed [ 171.288410][T18446] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.295839][T18446] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.304607][T18446] bridge_slave_0: entered allmulticast mode [ 171.311168][T18446] bridge_slave_0: entered promiscuous mode [ 171.317910][T18443] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.325132][T18443] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.333618][T18443] bridge_slave_1: entered allmulticast mode [ 171.340015][T18443] bridge_slave_1: entered promiscuous mode [ 171.347272][T18446] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.354428][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.363247][T18446] bridge_slave_1: entered allmulticast mode [ 171.369906][T18446] bridge_slave_1: entered promiscuous mode [ 171.399975][T18443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.410522][T18446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.422651][T18443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.435426][T18446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.467494][T18443] team0: Port device team_slave_0 added [ 171.479716][T18424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.488566][T18443] team0: Port device team_slave_1 added [ 171.501653][T18446] team0: Port device team_slave_0 added [ 171.510196][T18424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.524579][T18446] team0: Port device team_slave_1 added [ 171.530314][T18424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.539260][T18443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.546268][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.572633][T18443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.586560][T18443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.593549][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.619629][T18443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.636285][T18424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.656419][T18446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.663447][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.689439][T18446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.701086][T18446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.708042][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.734349][T18446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.771076][T18443] hsr_slave_0: entered promiscuous mode [ 171.776923][T18443] hsr_slave_1: entered promiscuous mode [ 171.783070][T18443] debugfs: 'hsr0' already exists in 'hsr' [ 171.788776][T18443] Cannot create hsr debugfs directory [ 171.805278][T18446] hsr_slave_0: entered promiscuous mode [ 171.811517][T18446] hsr_slave_1: entered promiscuous mode [ 171.817546][T18446] debugfs: 'hsr0' already exists in 'hsr' [ 171.823275][T18446] Cannot create hsr debugfs directory [ 171.918045][T18424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.930251][T18424] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.939065][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.946324][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.964001][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.971052][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.016887][ T150] IPVS: stop unused estimator thread 0... [ 172.017623][T18424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.078339][T18424] veth0_vlan: entered promiscuous mode [ 172.085871][T18424] veth1_vlan: entered promiscuous mode [ 172.099003][T18424] veth0_macvtap: entered promiscuous mode [ 172.106694][T18424] veth1_macvtap: entered promiscuous mode [ 172.117798][T18424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.127891][T18424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.137812][ T1451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.147382][ T1451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.158259][ T1451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.168787][ T1451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.339698][T18443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.382445][T18443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.403366][T18446] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 172.415227][T18443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.433289][T18446] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 172.449626][T18443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.468185][T18446] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 172.480039][T18446] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 172.538914][T18446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.552727][T18446] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.564055][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.571232][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.582650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.589960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.600623][T18443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.617263][T18443] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.629553][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.636650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.649661][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.656748][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.731455][T18446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.739652][T18443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.818877][T18443] veth0_vlan: entered promiscuous mode [ 172.827414][T18443] veth1_vlan: entered promiscuous mode [ 172.846385][T18443] veth0_macvtap: entered promiscuous mode [ 172.856708][T18443] veth1_macvtap: entered promiscuous mode [ 172.886444][T18443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.903665][T18443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.914856][T18446] veth0_vlan: entered promiscuous mode [ 172.924066][ T158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.940218][T18446] veth1_vlan: entered promiscuous mode [ 172.952106][ T158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.976007][ T158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.989514][T18446] veth0_macvtap: entered promiscuous mode [ 172.999790][ T158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.009345][T18446] veth1_macvtap: entered promiscuous mode [ 173.043477][T18446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.057565][T18446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.068243][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 173.068258][ T29] audit: type=1400 audit(1758646071.607:6764): avc: denied { audit_write } for pid=18583 comm="syz.3.6671" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.108725][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.130697][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.134335][ T29] audit: type=1107 audit(1758646071.607:6765): pid=18583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='XCYA;a^' [ 173.158818][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.178047][ T150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.201563][ T29] audit: type=1326 audit(1758646071.737:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18594 comm="syz.2.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 173.232178][ T29] audit: type=1326 audit(1758646071.737:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18594 comm="syz.2.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 173.255846][ T29] audit: type=1326 audit(1758646071.737:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18594 comm="syz.2.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 173.279434][ T29] audit: type=1326 audit(1758646071.737:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18594 comm="syz.2.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 173.303014][ T29] audit: type=1326 audit(1758646071.737:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18594 comm="syz.2.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 173.326638][ T29] audit: type=1326 audit(1758646071.737:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18594 comm="syz.2.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 173.393960][ T29] audit: type=1326 audit(1758646071.767:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18596 comm="syz.7.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 173.417772][ T29] audit: type=1326 audit(1758646071.767:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18596 comm="syz.7.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 174.192441][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6727'. [ 174.367777][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6742'. [ 174.525288][T18742] syz_tun: entered promiscuous mode [ 174.532863][T18742] batadv_slave_0: entered promiscuous mode [ 174.539230][T18742] hsr1: entered allmulticast mode [ 174.544387][T18742] syz_tun: entered allmulticast mode [ 174.549777][T18742] batadv_slave_0: entered allmulticast mode [ 174.566303][T18745] rdma_op ffff888103f59180 conn xmit_rdma 0000000000000000 [ 174.662304][T18763] netlink: 332 bytes leftover after parsing attributes in process `syz.8.6769'. [ 175.114819][T18813] syzkaller1: entered promiscuous mode [ 175.120662][T18813] syzkaller1: entered allmulticast mode [ 175.367515][T18847] syz_tun: entered promiscuous mode [ 175.387610][T18847] batadv_slave_0: entered promiscuous mode [ 175.407817][T18847] debugfs: 'hsr1' already exists in 'hsr' [ 175.413829][T18847] Cannot create hsr debugfs directory [ 175.430283][T18847] hsr1: entered allmulticast mode [ 175.435363][T18847] syz_tun: entered allmulticast mode [ 175.440715][T18847] batadv_slave_0: entered allmulticast mode [ 175.637244][T18887] syz_tun: entered promiscuous mode [ 175.657649][T18887] batadv_slave_0: entered promiscuous mode [ 175.680789][T18887] debugfs: 'hsr1' already exists in 'hsr' [ 175.686637][T18887] Cannot create hsr debugfs directory [ 175.693155][T18887] hsr1: entered allmulticast mode [ 175.698267][T18887] syz_tun: entered allmulticast mode [ 175.703615][T18887] batadv_slave_0: entered allmulticast mode [ 175.770560][T18904] rdma_op ffff888104139980 conn xmit_rdma 0000000000000000 [ 175.807960][T18909] sd 0:0:1:0: device reset [ 175.869669][T18925] netlink: 8460 bytes leftover after parsing attributes in process `syz.0.6844'. [ 176.012682][T18949] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.753169][T18968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.765118][T18970] loop8: detected capacity change from 0 to 1024 [ 176.772563][T18970] EXT4-fs: Ignoring removed orlov option [ 176.783583][T18968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.803813][T18970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.852296][T18185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.039640][T19004] loop2: detected capacity change from 0 to 128 [ 177.127520][T19016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19016 comm=syz.8.6887 [ 177.398583][T19060] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 177.410984][T19059] IPVS: stopping master sync thread 19060 ... [ 177.639208][T19088] loop9: detected capacity change from 0 to 7 [ 177.646926][T19088] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.656345][T19088] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.664207][T19088] loop9: unable to read partition table [ 177.670864][T19088] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 177.670864][T19088] ) failed (rc=-5) [ 177.727009][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6925'. [ 177.771731][T19100] netlink: 8460 bytes leftover after parsing attributes in process `syz.8.6926'. [ 177.819674][T19108] loop8: detected capacity change from 0 to 1764 [ 177.899432][T19121] loop9: detected capacity change from 0 to 7 [ 177.906153][T19121] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.915524][T19121] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.923612][T19121] loop9: unable to read partition table [ 177.931872][T19121] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 177.931872][T19121] ) failed (rc=-5) [ 177.948548][T19125] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.096812][T19145] loop2: detected capacity change from 0 to 128 [ 178.113046][T19145] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.134759][T19145] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.162934][T19155] netlink: 'syz.0.6952': attribute type 11 has an invalid length. [ 178.170897][T19155] netlink: 'syz.0.6952': attribute type 1 has an invalid length. [ 178.178708][T19155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6952'. [ 178.229635][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 178.229651][ T29] audit: type=1400 audit(1758646076.758:7206): avc: denied { ioctl } for pid=19162 comm="syz.3.6956" path="socket:[61415]" dev="sockfs" ino=61415 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.230376][T19163] syzkaller1: entered promiscuous mode [ 178.266388][T19163] syzkaller1: entered allmulticast mode [ 178.282163][T19165] netlink: 'syz.8.6957': attribute type 29 has an invalid length. [ 178.298175][T19167] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.300916][T19165] netlink: 'syz.8.6957': attribute type 29 has an invalid length. [ 178.340630][ T29] audit: type=1400 audit(1758646076.878:7207): avc: denied { write } for pid=19164 comm="syz.8.6957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.362112][T19165] netlink: 500 bytes leftover after parsing attributes in process `syz.8.6957'. [ 178.374920][ T29] audit: type=1400 audit(1758646076.898:7208): avc: denied { nlmsg_write } for pid=19164 comm="syz.8.6957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.471732][T19187] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.481069][T19187] FAT-fs (loop17): unable to read boot sector [ 178.495199][T19189] loop2: detected capacity change from 0 to 764 [ 178.511693][T19189] rock: directory entry would overflow storage [ 178.517875][T19189] rock: sig=0x4f50, size=4, remaining=3 [ 178.523492][T19189] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 178.730067][T19207] netlink: 'syz.2.6976': attribute type 29 has an invalid length. [ 178.738975][T19207] netlink: 'syz.2.6976': attribute type 29 has an invalid length. [ 178.747718][T19207] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6976'. [ 178.757001][ T29] audit: type=1400 audit(1758646077.288:7209): avc: denied { sqpoll } for pid=19206 comm="syz.7.6978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 178.811658][ T29] audit: type=1326 audit(1758646077.338:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.2.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 178.835383][ T29] audit: type=1326 audit(1758646077.338:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.2.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 178.858938][ T29] audit: type=1326 audit(1758646077.338:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.2.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 178.883728][ T29] audit: type=1326 audit(1758646077.338:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.2.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 178.907223][ T29] audit: type=1326 audit(1758646077.338:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.2.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 178.930745][ T29] audit: type=1326 audit(1758646077.338:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.2.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 179.271418][T19243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7000'. [ 179.403911][T19267] wireguard0: entered promiscuous mode [ 179.409437][T19267] wireguard0: entered allmulticast mode [ 179.445273][T19262] loop2: detected capacity change from 0 to 8192 [ 179.501350][T19262] loop2: p1 p2 p3 p4 [ 179.508325][T19262] loop2: p3 start 331777 is beyond EOD, truncated [ 179.514829][T19262] loop2: p4 size 262144 extends beyond EOD, truncated [ 179.763041][ T3392] kernel write not supported for file /182/attr/prev (pid: 3392 comm: kworker/0:5) [ 179.807427][T19310] loop2: detected capacity change from 0 to 128 [ 179.821824][T19310] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.860977][T19316] netlink: 172796 bytes leftover after parsing attributes in process `+}[@'. [ 179.873817][T19310] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.939156][T19322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.330364][ T3371] kernel write not supported for file /213/attr/prev (pid: 3371 comm: kworker/1:2) [ 180.387124][T19349] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7043'. [ 180.401154][T19349] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7043'. [ 180.495622][T19357] syzkaller1: entered promiscuous mode [ 180.501392][T19357] syzkaller1: entered allmulticast mode [ 180.818982][T19383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.892341][T19391] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7062'. [ 180.934971][T19399] netlink: 'syz.7.7066': attribute type 3 has an invalid length. [ 181.147715][T19418] loop8: detected capacity change from 0 to 512 [ 181.166482][T19418] EXT4-fs warning (device loop8): ext4_xattr_inode_get:542: inode #11: comm syz.8.7072: ea_inode file size=0 entry size=6 [ 181.181829][T19418] EXT4-fs (loop8): 1 orphan inode deleted [ 181.187927][T19418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.282954][T18185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.292131][T19423] loop7: detected capacity change from 0 to 764 [ 181.305026][T19423] rock: directory entry would overflow storage [ 181.311292][T19423] rock: sig=0x4f50, size=4, remaining=3 [ 181.316838][T19423] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 181.566659][T19450] loop8: detected capacity change from 0 to 128 [ 181.578806][T19450] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.593130][T19450] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.632641][T19456] loop8: detected capacity change from 0 to 128 [ 181.647833][T19456] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.663197][T19456] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.981784][T19483] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.005640][T19483] FAT-fs (loop7): unable to read boot sector [ 182.064641][T19485] loop7: detected capacity change from 0 to 8192 [ 182.121655][T19485] loop7: p1 p2 p3 p4 [ 182.141593][T19485] loop7: p3 start 331777 is beyond EOD, truncated [ 182.148091][T19485] loop7: p4 size 262144 extends beyond EOD, truncated [ 182.269121][T19513] wireguard0: entered promiscuous mode [ 182.274818][T19513] wireguard0: entered allmulticast mode [ 182.308255][T19519] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.321289][T19519] FAT-fs (loop5): unable to read boot sector [ 182.571741][T19559] syzkaller1: entered promiscuous mode [ 182.577265][T19559] syzkaller1: entered allmulticast mode [ 182.775749][T19577] loop8: detected capacity change from 0 to 1024 [ 182.801638][T19577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.826850][T18185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.883354][T19598] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 182.894293][T19597] IPVS: stopping master sync thread 19598 ... [ 182.940078][T19607] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 182.952149][T19606] IPVS: stopping master sync thread 19607 ... [ 183.689038][T19640] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 183.699027][T19635] IPVS: stopping master sync thread 19640 ... [ 183.710413][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 183.710426][ T29] audit: type=1326 audit(1758646082.248:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.742084][ T29] audit: type=1326 audit(1758646082.258:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.765770][ T29] audit: type=1326 audit(1758646082.258:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.789319][ T29] audit: type=1326 audit(1758646082.278:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.812982][ T29] audit: type=1326 audit(1758646082.278:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.836629][ T29] audit: type=1326 audit(1758646082.278:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.860294][ T29] audit: type=1326 audit(1758646082.278:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.883814][ T29] audit: type=1326 audit(1758646082.278:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.907454][ T29] audit: type=1326 audit(1758646082.278:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 183.930869][ T29] audit: type=1326 audit(1758646082.278:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.0.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9aceec9 code=0x7ffc0000 [ 184.044533][T19664] __nla_validate_parse: 1 callbacks suppressed [ 184.044548][T19664] netlink: 196 bytes leftover after parsing attributes in process `+}[@'. [ 184.125516][T19674] SELinux: failed to load policy [ 184.180980][T19679] SELinux: failed to load policy [ 184.188814][T19676] wireguard0: entered promiscuous mode [ 184.194518][T19676] wireguard0: entered allmulticast mode [ 184.336535][T19701] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967294. macoff=82 [ 184.546434][T19717] SELinux: failed to load policy [ 184.600955][T19733] netlink: 196 bytes leftover after parsing attributes in process `+}[@'. [ 184.847660][T19753] SELinux: failed to load policy [ 184.889049][T19767] netlink: 196 bytes leftover after parsing attributes in process `+}[@'. [ 185.070865][T19798] wireguard0: entered promiscuous mode [ 185.076384][T19798] wireguard0: entered allmulticast mode [ 185.116849][T19797] SELinux: failed to load policy [ 185.367050][T19835] wireguard0: entered promiscuous mode [ 185.372602][T19835] wireguard0: entered allmulticast mode [ 185.535964][T19871] sctp: [Deprecated]: syz.8.7274 (pid 19871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.535964][T19871] Use struct sctp_sack_info instead [ 186.176696][T19882] loop7: detected capacity change from 0 to 512 [ 186.211545][T19882] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 186.219823][T19882] EXT4-fs (loop7): orphan cleanup on readonly fs [ 186.236711][T19882] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.7284: corrupted inode contents [ 186.249096][T19882] EXT4-fs (loop7): Remounting filesystem read-only [ 186.255892][T19882] EXT4-fs (loop7): 1 truncate cleaned up [ 186.261634][ T158] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 186.272240][ T158] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 186.283110][ T158] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 186.295194][T19882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.319532][T18446] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.422342][T19909] netlink: 34 bytes leftover after parsing attributes in process `syz.8.7297'. [ 186.453184][T19911] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 186.617032][T19927] netlink: 'syz.2.7307': attribute type 1 has an invalid length. [ 186.700052][T19941] netlink: 34 bytes leftover after parsing attributes in process `syz.0.7313'. [ 186.734815][T19946] wireguard0: entered promiscuous mode [ 186.740398][T19946] wireguard0: entered allmulticast mode [ 186.784442][T19954] netlink: 'syz.0.7320': attribute type 1 has an invalid length. [ 187.116288][T19966] wireguard0: entered promiscuous mode [ 187.121940][T19966] wireguard0: entered allmulticast mode [ 187.167457][T19977] netlink: 34 bytes leftover after parsing attributes in process `syz.3.7328'. [ 187.188554][T19979] loop8: detected capacity change from 0 to 1024 [ 187.201314][T19979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.216352][T19979] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 187.232348][T19979] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 187.244569][T19979] EXT4-fs (loop8): This should not happen!! Data will be lost [ 187.244569][T19979] [ 187.254238][T19979] EXT4-fs (loop8): Total free blocks count 0 [ 187.260337][T19979] EXT4-fs (loop8): Free/Dirty block details [ 187.266330][T19979] EXT4-fs (loop8): free_blocks=20480 [ 187.271677][T19979] EXT4-fs (loop8): dirty_blocks=80 [ 187.276120][T19985] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 68 with error 28 [ 187.276773][T19979] EXT4-fs (loop8): Block reservation details [ 187.276786][T19979] EXT4-fs (loop8): i_reserved_data_blocks=8 [ 187.391649][T19988] SELinux: failed to load policy [ 187.466559][T20006] loop8: detected capacity change from 0 to 1024 [ 187.473344][T20006] EXT4-fs: Ignoring removed orlov option [ 187.479022][T20006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.504616][T20006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.560704][T18185] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.665059][T20043] sctp: [Deprecated]: syz.7.7355 (pid 20043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.665059][T20043] Use struct sctp_sack_info instead [ 188.119094][T20065] netlink: 'syz.3.7367': attribute type 3 has an invalid length. [ 188.484606][T20105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20105 comm=syz.7.7386 [ 188.497341][T20105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20105 comm=syz.7.7386 [ 188.609238][T20122] atomic_op ffff888102308d28 conn xmit_atomic 0000000000000000 [ 188.663866][T20131] sctp: [Deprecated]: syz.2.7398 (pid 20131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.663866][T20131] Use struct sctp_sack_info instead [ 188.739491][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 188.745836][ T29] audit: type=1326 audit(1758646087.268:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20138 comm="syz.7.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 188.804307][ T29] audit: type=1326 audit(1758646087.268:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20138 comm="syz.7.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 188.828048][ T29] audit: type=1326 audit(1758646087.308:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20138 comm="syz.7.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 188.851481][ T29] audit: type=1326 audit(1758646087.308:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20138 comm="syz.7.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 188.875180][ T29] audit: type=1326 audit(1758646087.308:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20138 comm="syz.7.7405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 188.954234][ T29] audit: type=1326 audit(1758646087.488:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20150 comm="syz.7.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 188.977877][ T29] audit: type=1326 audit(1758646087.488:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20150 comm="syz.7.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 189.001608][ T29] audit: type=1326 audit(1758646087.488:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20150 comm="syz.7.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 189.025598][ T29] audit: type=1326 audit(1758646087.488:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20150 comm="syz.7.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 189.049289][ T29] audit: type=1326 audit(1758646087.488:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20150 comm="syz.7.7411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 189.087533][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7414'. [ 189.097268][T20154] atomic_op ffff8881195e6128 conn xmit_atomic 0000000000000000 [ 189.162122][T20172] atomic_op ffff88811d4cdd28 conn xmit_atomic 0000000000000000 [ 189.261543][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7430'. [ 189.297122][T20202] sd 0:0:1:0: device reset [ 189.473608][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7448'. [ 189.615175][T20248] batadv_slave_0: entered promiscuous mode [ 189.615477][T20248] batadv_slave_0: left promiscuous mode [ 189.705860][T20262] sctp: [Deprecated]: syz.3.7462 (pid 20262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.705860][T20262] Use struct sctp_sack_info instead [ 191.329648][T20312] netlink: 27 bytes leftover after parsing attributes in process `syz.8.7488'. [ 191.383757][T20316] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7491'. [ 191.664671][T20358] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7508'. [ 191.926542][T20383] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7530'. [ 192.463670][T20400] netlink: 256 bytes leftover after parsing attributes in process `syz.8.7526'. [ 192.537734][T20409] sctp: [Deprecated]: syz.0.7525 (pid 20409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.537734][T20409] Use struct sctp_sack_info instead [ 192.643764][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7534'. [ 193.086132][T20487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7566'. [ 193.214105][T20506] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 193.287131][T20517] loop7: detected capacity change from 0 to 1024 [ 193.324290][T20517] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 193.354463][T20517] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 193.381625][T20517] EXT4-fs (loop7): failed to initialize system zone (-117) [ 193.413486][T20517] EXT4-fs (loop7): mount failed [ 193.586177][T20564] sctp: [Deprecated]: syz.8.7593 (pid 20564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.586177][T20564] Use struct sctp_sack_info instead [ 193.609755][T20567] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 193.672796][T20571] netlink: 'syz.7.7612': attribute type 10 has an invalid length. [ 193.694284][T20571] team0: Device hsr_slave_0 failed to register rx_handler [ 193.804627][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 193.804700][ T29] audit: type=1326 audit(1758646092.338:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 193.835161][ T29] audit: type=1326 audit(1758646092.348:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 193.858710][ T29] audit: type=1326 audit(1758646092.348:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 193.882370][ T29] audit: type=1326 audit(1758646092.348:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 193.906056][ T29] audit: type=1326 audit(1758646092.348:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 193.929601][ T29] audit: type=1326 audit(1758646092.348:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 193.953170][ T29] audit: type=1326 audit(1758646092.348:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 193.976781][ T29] audit: type=1326 audit(1758646092.348:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 194.000532][ T29] audit: type=1326 audit(1758646092.348:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 194.024290][ T29] audit: type=1326 audit(1758646092.378:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20595 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 194.056056][T20606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.065173][T20606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.074321][T20606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.083405][T20606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.092533][T20606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.101567][T20606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.110671][T20606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.119781][T20606] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.201103][T20611] netlink: 'syz.3.7619': attribute type 10 has an invalid length. [ 194.230992][T20611] team0: Device hsr_slave_0 failed to register rx_handler [ 194.308968][T20620] ALSA: seq fatal error: cannot create timer (-19) [ 194.326551][T20623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 194.359889][T20631] netlink: 176 bytes leftover after parsing attributes in process `syz.7.7628'. [ 194.933504][T20680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.942350][T20680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.966458][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7666'. [ 195.021029][T20720] vhci_hcd: invalid port number 254 [ 195.026344][T20720] vhci_hcd: invalid port number 254 [ 195.126106][T20737] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 195.354717][T20762] SELinux: policydb version 1386292521 does not match my version range 15-35 [ 195.389272][T20762] SELinux: failed to load policy [ 195.757822][T20808] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.768499][T20808] FAT-fs (loop15): unable to read boot sector [ 195.791517][T20812] netlink: 'syz.2.7713': attribute type 21 has an invalid length. [ 195.818587][T20812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7713'. [ 195.820056][T20814] netlink: 536 bytes leftover after parsing attributes in process `syz.0.7714'. [ 195.842065][T20814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7714'. [ 195.970533][T20843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7728'. [ 195.995612][T20850] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 196.008101][T20849] IPVS: stopping master sync thread 20850 ... [ 196.080040][T20863] loop9: detected capacity change from 0 to 7 [ 196.087708][T20863] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.097385][T20863] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.097648][T20864] binfmt_misc: register: failed to install interpreter file ./file2 [ 196.105266][T20863] loop9: unable to read partition table [ 196.105291][T20863] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 196.105291][T20863] ) failed (rc=-5) [ 196.187484][T20875] SELinux: failed to load policy [ 196.221861][T20880] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7746'. [ 196.269957][T20889] binfmt_misc: register: failed to install interpreter file ./file0 [ 196.293309][T20894] netlink: 'syz.2.7753': attribute type 7 has an invalid length. [ 196.304241][T20896] netlink: 'syz.0.7755': attribute type 1 has an invalid length. [ 196.316070][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7754'. [ 196.325136][T20898] netlink: 196 bytes leftover after parsing attributes in process `syz.8.7754'. [ 196.334494][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7754'. [ 196.893392][T20990] loop7: detected capacity change from 0 to 128 [ 196.911990][T20990] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 196.920002][T20990] FAT-fs (loop7): Filesystem has been set read-only [ 196.926830][T20988] vhci_hcd: invalid port number 96 [ 196.926866][T20990] syz.7.7800: attempt to access beyond end of device [ 196.926866][T20990] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 196.926905][T20990] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 196.926922][T20990] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 196.927097][T20990] syz.7.7800: attempt to access beyond end of device [ 196.927097][T20990] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.932176][T20988] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 196.966603][T20990] syz.7.7800: attempt to access beyond end of device [ 196.966603][T20990] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.002947][T20990] syz.7.7800: attempt to access beyond end of device [ 197.002947][T20990] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 197.016877][T20992] syz.7.7800: attempt to access beyond end of device [ 197.016877][T20992] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.030352][T20992] syz.7.7800: attempt to access beyond end of device [ 197.030352][T20992] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.043857][T20992] syz.7.7800: attempt to access beyond end of device [ 197.043857][T20992] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.060582][T20990] syz.7.7800: attempt to access beyond end of device [ 197.060582][T20990] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.074068][T20992] syz.7.7800: attempt to access beyond end of device [ 197.074068][T20992] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.088987][T20990] syz.7.7800: attempt to access beyond end of device [ 197.088987][T20990] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.574373][T21032] netlink: 'syz.8.7817': attribute type 4 has an invalid length. [ 197.594322][T21032] .`: renamed from bond0 (while UP) [ 197.690716][T21045] SELinux: policydb version 17152 does not match my version range 15-35 [ 197.699455][T21045] SELinux: failed to load policy [ 197.777452][T21056] netlink: 'syz.8.7827': attribute type 1 has an invalid length. [ 197.792249][T21060] netlink: 'syz.7.7828': attribute type 3 has an invalid length. [ 198.680230][ T1451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.763225][ T1451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.833116][ T1451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.885260][T21204] -: renamed from vlan1 (while UP) [ 198.903369][ T1451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.986818][ T1451] bridge_slave_1: left allmulticast mode [ 198.992583][ T1451] bridge_slave_1: left promiscuous mode [ 198.998273][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.013436][T21221] SELinux: policydb version 17152 does not match my version range 15-35 [ 199.029413][ T1451] bridge_slave_0: left allmulticast mode [ 199.035083][ T1451] bridge_slave_0: left promiscuous mode [ 199.041019][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.048300][T21221] SELinux: failed to load policy [ 199.126120][T21229] loop7: detected capacity change from 0 to 1024 [ 199.144025][T21229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.183623][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.208237][T18446] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.221135][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.235297][ T1451] bond0 (unregistering): Released all slaves [ 199.294723][ T1451] hsr_slave_0: left promiscuous mode [ 199.308266][ T1451] hsr_slave_1: left promiscuous mode [ 199.324204][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.332028][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.341736][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.349316][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.388419][ T1451] veth1_macvtap: left promiscuous mode [ 199.398178][ T1451] veth0_macvtap: left promiscuous mode [ 199.406161][ T1451] veth1_vlan: left promiscuous mode [ 199.415156][ T1451] veth0_vlan: left promiscuous mode [ 199.558076][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 199.582238][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 199.646356][T21261] __nla_validate_parse: 5 callbacks suppressed [ 199.646371][T21261] netlink: 42 bytes leftover after parsing attributes in process `syz.7.7921'. [ 199.749418][T21199] chnl_net:caif_netlink_parms(): no params data found [ 199.795045][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 199.795085][ T29] audit: type=1326 audit(1758646105.331:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.7.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 199.826977][ T29] audit: type=1326 audit(1758646105.361:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.7.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 199.850470][ T29] audit: type=1326 audit(1758646105.361:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.7.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 199.874040][ T29] audit: type=1326 audit(1758646105.361:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.7.7930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 199.923613][T20512] syz_tun (unregistering): left promiscuous mode [ 199.938549][T21199] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.945798][T21199] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.968276][T21199] bridge_slave_0: entered allmulticast mode [ 199.986477][T21199] bridge_slave_0: entered promiscuous mode [ 200.000859][T21199] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.007982][T21199] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.017235][T21199] bridge_slave_1: entered allmulticast mode [ 200.024009][T21199] bridge_slave_1: entered promiscuous mode [ 200.061726][T21199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.079043][T21199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.107256][T21199] team0: Port device team_slave_0 added [ 200.114089][T21199] team0: Port device team_slave_1 added [ 200.142077][T21199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.149255][T21199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.175208][T21199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.191942][T21199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.198923][T21199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.225002][T21199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.266394][T21199] hsr_slave_0: entered promiscuous mode [ 200.272740][T21199] hsr_slave_1: entered promiscuous mode [ 200.278698][T21199] debugfs: 'hsr0' already exists in 'hsr' [ 200.284526][T21199] Cannot create hsr debugfs directory [ 200.314911][ T1451] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.377260][ T1451] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.433369][T21316] netlink: 'syz.2.7942': attribute type 3 has an invalid length. [ 200.441961][ T29] audit: type=1326 audit(1758646105.981:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 200.493687][ T29] audit: type=1326 audit(1758646105.981:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 200.517641][ T29] audit: type=1326 audit(1758646105.981:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 200.541383][ T29] audit: type=1326 audit(1758646105.981:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 200.565093][ T29] audit: type=1326 audit(1758646105.981:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 200.588745][ T29] audit: type=1326 audit(1758646105.981:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21320 comm="syz.3.7944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 200.614810][ T1451] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.673458][ T1451] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.722695][T21306] chnl_net:caif_netlink_parms(): no params data found [ 200.755996][T21306] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.763148][T21306] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.770495][T21306] bridge_slave_0: entered allmulticast mode [ 200.776833][T21306] bridge_slave_0: entered promiscuous mode [ 200.783448][T21306] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.790779][T21306] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.797981][T21306] bridge_slave_1: entered allmulticast mode [ 200.804422][T21306] bridge_slave_1: entered promiscuous mode [ 200.829060][T21306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.842083][T21306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.863743][T21306] team0: Port device team_slave_0 added [ 200.872795][T21306] team0: Port device team_slave_1 added [ 200.878769][ T1451] bridge_slave_1: left allmulticast mode [ 200.884501][ T1451] bridge_slave_1: left promiscuous mode [ 200.890186][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.898015][ T1451] bridge_slave_0: left allmulticast mode [ 200.903668][ T1451] bridge_slave_0: left promiscuous mode [ 200.909322][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.971066][ T1451] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.980414][ T1451] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.989721][ T1451] .` (unregistering): Released all slaves [ 201.011754][T21306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.018814][T21306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.044862][T21306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.057063][T21306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.064201][T21306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.090127][T21306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.114554][ T1451] batadv_slave_0: left promiscuous mode [ 201.121510][ T1451] hsr_slave_0: left promiscuous mode [ 201.127114][ T1451] hsr_slave_1: left promiscuous mode [ 201.132878][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.140273][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.147880][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.155305][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.165494][ T1451] veth1_macvtap: left promiscuous mode [ 201.171184][ T1451] veth0_macvtap: left promiscuous mode [ 201.176870][ T1451] veth1_vlan: left promiscuous mode [ 201.182104][ T1451] veth0_vlan: left promiscuous mode [ 201.234846][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 201.245159][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 201.287704][T21306] hsr_slave_0: entered promiscuous mode [ 201.293927][T21306] hsr_slave_1: entered promiscuous mode [ 201.306902][T21199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.320325][T21199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.333454][T21199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.344339][T21199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.448656][T21199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.487720][T21199] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.504793][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.512014][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.550406][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.557590][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.664777][T21199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.771321][T21306] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 201.802520][T21306] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 201.820818][T21306] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 201.844175][T21306] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 201.861391][T21199] veth0_vlan: entered promiscuous mode [ 201.870609][T21199] veth1_vlan: entered promiscuous mode [ 201.898504][T21199] veth0_macvtap: entered promiscuous mode [ 201.937236][T21199] veth1_macvtap: entered promiscuous mode [ 201.947786][T21306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.960554][T21199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.984900][T21199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.996415][T21306] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.012385][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.022169][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.035569][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.047324][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.054456][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.075429][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.082547][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.099554][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.218610][T21306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.236808][T21427] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.372890][T21306] veth0_vlan: entered promiscuous mode [ 202.381806][T21306] veth1_vlan: entered promiscuous mode [ 202.399409][T21306] veth0_macvtap: entered promiscuous mode [ 202.406719][T21306] veth1_macvtap: entered promiscuous mode [ 202.419900][T21306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.432625][T21306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.444278][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.458807][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.477253][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.496636][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.526216][T21445] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7986'. [ 202.794339][T21459] hub 9-0:1.0: USB hub found [ 202.800765][T21461] sd 0:0:1:0: device reset [ 202.805336][T21459] hub 9-0:1.0: 8 ports detected [ 202.854050][T21469] syzkaller1: entered promiscuous mode [ 202.859761][T21469] syzkaller1: entered allmulticast mode [ 202.977728][T21491] SELinux: Context system_u: is not valid (left unmapped). [ 203.003823][T21496] netlink: 'syz.3.8000': attribute type 1 has an invalid length. [ 203.011645][T21496] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8000'. [ 203.043965][ T3392] kernel write not supported for file /515/gid_map (pid: 3392 comm: kworker/0:5) [ 203.046437][T21503] syzkaller1: entered promiscuous mode [ 203.058747][T21503] syzkaller1: entered allmulticast mode [ 203.152118][T21523] SELinux: security_context_str_to_sid () failed with errno=-22 [ 203.152129][T21524] 9pnet_fd: Insufficient options for proto=fd [ 203.232221][ T23] Process accounting resumed [ 203.248882][T21537] loop7: detected capacity change from 0 to 512 [ 203.256928][T21537] EXT4-fs (loop7): fragment/cluster size (524288) != block size (1024) [ 203.313714][T21545] netlink: 19 bytes leftover after parsing attributes in process `syz.7.8024'. [ 203.386571][T21551] SELinux: failed to load policy [ 203.441973][T21559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8031'. [ 203.450917][T21559] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8031'. [ 203.543237][T21571] netlink: 'syz.7.8037': attribute type 1 has an invalid length. [ 203.564274][T21573] netlink: 'syz.7.8038': attribute type 3 has an invalid length. [ 203.597558][T21577] loop7: detected capacity change from 0 to 512 [ 203.612188][T21577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.624916][T21577] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.636996][T21577] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8040: bg 0: block 328: padding at end of block bitmap is not set [ 203.658742][T18446] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.714437][T21590] loop7: detected capacity change from 0 to 128 [ 203.723119][T21590] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.736025][T21590] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.783097][T18446] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.795415][T21597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8048'. [ 203.820126][T21601] rdma_op ffff888115a8b180 conn xmit_rdma 0000000000000000 [ 203.849980][T21607] netlink: 830 bytes leftover after parsing attributes in process `syz.7.8052'. [ 203.876255][T21613] netlink: 'syz.2.8054': attribute type 21 has an invalid length. [ 203.884243][T21613] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8054'. [ 203.894183][T21613] netlink: 'syz.2.8054': attribute type 5 has an invalid length. [ 203.902538][T21613] netlink: 'syz.2.8054': attribute type 6 has an invalid length. [ 203.910329][T21613] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8054'. [ 204.065322][T21645] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 204.076304][T21646] loop7: detected capacity change from 0 to 512 [ 204.116813][T21646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.144924][T21646] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.173940][T18446] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.294993][T21691] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.652350][T21713] loop8: detected capacity change from 0 to 128 [ 204.700446][T21719] loop8: detected capacity change from 0 to 512 [ 204.711177][T21719] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.723854][T21719] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.762133][T21306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.873267][T21730] mmap: syz.8.8107 (21730): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 204.898787][T21732] 9p: Unknown access argument : -22 [ 204.963603][T21734] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.984983][T21736] netlink: 'syz.8.8110': attribute type 10 has an invalid length. [ 204.994869][T21736] team0: Device hsr_slave_0 failed to register rx_handler [ 205.018751][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 205.018768][ T29] audit: type=1401 audit(1758646110.551:8061): op=setxattr invalid_context="" [ 205.055318][ T29] audit: type=1400 audit(1758646110.591:8062): avc: denied { mount } for pid=21739 comm="syz.8.8122" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 205.083953][ T29] audit: type=1400 audit(1758646110.621:8063): avc: denied { remount } for pid=21739 comm="syz.8.8122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 205.126207][ T29] audit: type=1326 audit(1758646110.621:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.7.8114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 205.149993][ T29] audit: type=1326 audit(1758646110.621:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.7.8114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 205.173662][ T29] audit: type=1326 audit(1758646110.621:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.7.8114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 205.197274][ T29] audit: type=1326 audit(1758646110.621:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.7.8114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 205.221006][ T29] audit: type=1326 audit(1758646110.621:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.7.8114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 205.244720][ T29] audit: type=1326 audit(1758646110.621:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.7.8114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 205.268608][ T29] audit: type=1326 audit(1758646110.641:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.7.8114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 205.403971][T21775] SELinux: policydb version 0 does not match my version range 15-35 [ 205.425883][T21775] SELinux: failed to load policy [ 205.539016][T21801] __nla_validate_parse: 3 callbacks suppressed [ 205.539035][T21801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8142'. [ 205.667952][T21823] batadv_slave_1: entered promiscuous mode [ 205.675711][T21821] vhci_hcd: invalid port number 254 [ 205.676661][T21822] batadv_slave_1: left promiscuous mode [ 205.680959][T21821] vhci_hcd: invalid port number 254 [ 205.717773][T21831] net_ratelimit: 3322 callbacks suppressed [ 205.717792][T21831] openvswitch: netlink: Message has 6 unknown bytes. [ 205.756178][T21837] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 206.068528][T21888] SELinux: policydb version 1386292521 does not match my version range 15-35 [ 206.097894][T21888] SELinux: failed to load policy [ 206.352397][T21898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.369454][T21898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.413583][T21924] loop8: detected capacity change from 0 to 128 [ 206.557818][ T41] bio_check_eod: 14260 callbacks suppressed [ 206.557834][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.557834][ T41] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 206.581810][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.581810][ T41] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 206.596219][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.596219][ T41] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 206.609849][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.609849][ T41] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 206.623621][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.623621][ T41] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 206.637181][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.637181][ T41] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 206.652277][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.652277][ T41] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 206.693831][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.693831][ T41] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 206.707525][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.707525][ T41] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 206.723061][ T41] kworker/u8:2: attempt to access beyond end of device [ 206.723061][ T41] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 206.812701][T21953] loop9: detected capacity change from 0 to 7 [ 206.818948][T21953] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.852731][T21953] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.860695][T21953] loop9: unable to read partition table [ 206.866725][T21953] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 206.866725][T21953] ) failed (rc=-5) [ 206.910319][T21965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8219'. [ 206.917375][T21962] netlink: 536 bytes leftover after parsing attributes in process `syz.8.8217'. [ 206.930959][T21962] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8217'. [ 207.038034][T21983] binfmt_misc: register: failed to install interpreter file ./file0 [ 207.057483][T21988] netlink: 'syz.2.8230': attribute type 1 has an invalid length. [ 207.097076][T21993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8231'. [ 207.106262][T21993] netlink: 196 bytes leftover after parsing attributes in process `syz.7.8231'. [ 207.120915][T21993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8231'. [ 207.130809][T21993] netlink: 196 bytes leftover after parsing attributes in process `syz.7.8231'. [ 207.179536][T22007] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8239'. [ 207.240967][T22017] netlink: 64535 bytes leftover after parsing attributes in process `syz.7.8245'. [ 207.398278][T22054] netlink: 'syz.0.8262': attribute type 1 has an invalid length. [ 207.528095][T22082] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 207.880906][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.888440][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.896067][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.903848][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.911414][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.918815][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.926298][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.933820][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.941307][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.948734][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 207.959018][ T3392] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 208.050758][T22171] vlan3: entered allmulticast mode [ 208.059215][T22173] vhci_hcd: default hub control req: 8001 v0000 i0003 l14 [ 208.066643][T22171] bridge0: port 3(vlan3) entered blocking state [ 208.073274][T22171] bridge0: port 3(vlan3) entered disabled state [ 208.098638][T22171] vlan3: entered promiscuous mode [ 208.147947][T22182] SELinux: failed to load policy [ 208.175812][T22185] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 208.188164][T22185] EXT4-fs (loop7): unable to read superblock [ 208.239259][T22199] macvtap0: refused to change device tx_queue_len [ 208.496604][T22254] openvswitch: netlink: Message has 6 unknown bytes. [ 208.544646][T22259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.546259][T22251] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 208.573072][ T3392] IPVS: starting estimator thread 0... [ 208.679319][T22264] IPVS: using max 2784 ests per chain, 139200 per kthread [ 208.688294][T22286] netlink: 'syz.0.8365': attribute type 3 has an invalid length. [ 208.756670][T22299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.765235][T22299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.013669][T22338] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 209.084029][T22346] rdma_op ffff88811d9b6980 conn xmit_rdma 0000000000000000 [ 209.182852][T22368] loop8: detected capacity change from 0 to 128 [ 209.243604][T22378] loop8: detected capacity change from 0 to 256 [ 209.351526][T22385] infiniband syz!: set active [ 209.356243][T22385] infiniband syz!: added team_slave_0 [ 209.376115][T22385] RDS/IB: syz!: added [ 209.389309][T22385] smc: adding ib device syz! with port count 1 [ 209.397173][T22385] smc: ib device syz! port 1 has pnetid [ 209.568928][T22412] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 209.707652][ T23] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 209.855834][T22480] SELinux: failed to load policy [ 210.024444][T22502] 9pnet: Could not find request transport: f [ 210.024635][ T1036] IPVS: starting estimator thread 0... [ 210.053549][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 210.053565][ T29] audit: type=1400 audit(1758646122.587:8370): avc: denied { read } for pid=22505 comm="syz.3.8467" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 210.053738][T22506] sd 0:0:1:0: device reset [ 210.075844][T22508] hub 9-0:1.0: USB hub found [ 210.092771][T22508] hub 9-0:1.0: 8 ports detected [ 210.119330][T22504] IPVS: using max 2592 ests per chain, 129600 per kthread [ 210.297704][ T29] audit: type=1400 audit(1758646122.827:8371): avc: denied { map } for pid=22527 comm="syz.2.8478" path="socket:[74984]" dev="sockfs" ino=74984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.333042][ T29] audit: type=1400 audit(1758646122.827:8372): avc: denied { read accept } for pid=22527 comm="syz.2.8478" path="socket:[74984]" dev="sockfs" ino=74984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.377385][ T29] audit: type=1326 audit(1758646122.907:8373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22530 comm="syz.7.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 210.403667][ T29] audit: type=1326 audit(1758646122.907:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22530 comm="syz.7.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 210.427426][ T29] audit: type=1326 audit(1758646122.937:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22530 comm="syz.7.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 210.451155][ T29] audit: type=1326 audit(1758646122.937:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22530 comm="syz.7.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 210.474806][ T29] audit: type=1326 audit(1758646122.937:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22530 comm="syz.7.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 210.520299][ T29] audit: type=1400 audit(1758646123.057:8378): avc: denied { bind } for pid=22529 comm="syz.2.8479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.571009][ T29] audit: type=1326 audit(1758646123.107:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22534 comm="syz.2.8480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257f7eec9 code=0x7ffc0000 [ 210.604700][T22536] sd 0:0:1:0: device reset [ 210.691514][T22554] __nla_validate_parse: 14 callbacks suppressed [ 210.691586][T22554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8488'. [ 210.727820][T22554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8488'. [ 210.779939][T22566] siw: device registration error -23 [ 210.828849][T22572] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8500'. [ 210.866921][T22578] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8503'. [ 210.901953][T22586] loop7: detected capacity change from 0 to 256 [ 210.955249][T22596] siw: device registration error -23 [ 211.078327][T22616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.116993][T22616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.230262][ T1036] Process accounting resumed [ 211.262393][T22648] SELinux: security_context_str_to_sid () failed with errno=-22 [ 211.391538][T22677] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 211.398223][T22670] ALSA: seq fatal error: cannot create timer (-19) [ 211.442201][T22683] 9p: Unknown access argument : -22 [ 211.447996][T22685] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8555'. [ 211.469747][T22682] SELinux: failed to load policy [ 211.695692][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8575'. [ 211.704765][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8575'. [ 211.761645][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8578'. [ 211.822267][T22747] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 212.106949][T22788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.117426][T22786] netlink: 'syz.0.8613': attribute type 10 has an invalid length. [ 212.118812][T22788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.137203][T22790] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 212.140170][T22786] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 212.170138][T22792] loop8: detected capacity change from 0 to 2048 [ 212.190553][T22792] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 212.200000][T22792] System zones: 0-7 [ 212.206775][T22792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 212.239119][T21306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 212.332101][T22822] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 212.463599][T22838] 9p: Unknown access argument : -22 [ 212.541472][T22852] loop8: detected capacity change from 0 to 512 [ 212.548747][T22852] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 212.572622][T22852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.585801][T22852] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.607984][T21306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.752904][T22879] SELinux: policydb version 1386292521 does not match my version range 15-35 [ 212.772265][T22879] SELinux: failed to load policy [ 212.794109][T22881] rdma_op ffff888115a98d80 conn xmit_rdma 0000000000000000 [ 212.904224][T22897] IPVS: stopping master sync thread 22901 ... [ 212.910374][T22901] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 212.961691][T22904] netlink: 'syz.7.8656': attribute type 1 has an invalid length. [ 212.978913][T22910] syzkaller1: entered promiscuous mode [ 212.984556][T22910] syzkaller1: entered allmulticast mode [ 213.066814][T22921] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8677'. [ 213.100263][T22922] netlink: 536 bytes leftover after parsing attributes in process `syz.7.8667'. [ 213.279773][T22946] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 213.312669][T22927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.324601][T22927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.336567][T22950] netlink: 'syz.7.8680': attribute type 21 has an invalid length. [ 213.344661][T22950] netlink: 'syz.7.8680': attribute type 5 has an invalid length. [ 213.352722][T22950] netlink: 'syz.7.8680': attribute type 6 has an invalid length. [ 213.561221][T14763] kernel write not supported for file /756/gid_map (pid: 14763 comm: kworker/1:5) [ 213.623478][T22994] SELinux: failed to load policy [ 213.888140][T23024] syzkaller1: entered promiscuous mode [ 213.893708][T23024] syzkaller1: entered allmulticast mode [ 214.117709][T23045] loop8: detected capacity change from 0 to 512 [ 214.126407][T23045] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.143726][T23045] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.156666][T23045] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.172930][T23045] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.8723: corrupted xattr block 19: overlapping e_value [ 214.187732][T23045] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 214.197006][T23045] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.8723: corrupted xattr block 19: overlapping e_value [ 214.211405][T23045] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 214.221657][T23045] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.8723: corrupted xattr block 19: overlapping e_value [ 214.252884][T21306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.653895][T23071] netlink: 'syz.8.8732': attribute type 21 has an invalid length. [ 214.654929][T23068] syzkaller1: entered promiscuous mode [ 214.667289][T23068] syzkaller1: entered allmulticast mode [ 214.674975][T23071] netlink: 'syz.8.8732': attribute type 5 has an invalid length. [ 214.682911][T23071] netlink: 'syz.8.8732': attribute type 6 has an invalid length. [ 214.732903][T23075] netdevsim netdevsim8: Direct firmware load for ./file0/file1 failed with error -2 [ 214.794274][T23083] block device autoloading is deprecated and will be removed. [ 214.802223][T23083] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.832604][T23083] FAT-fs (loop5): unable to read boot sector [ 214.883592][T23089] vhci_hcd: default hub control req: 8001 v0000 i0003 l14 [ 214.988005][T23106] /dev/loop2: Can't lookup blockdev [ 215.035953][T23113] syzkaller1: entered promiscuous mode [ 215.041607][T23113] syzkaller1: entered allmulticast mode [ 215.075324][T23119] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.084660][T23119] FAT-fs (loop7): unable to read boot sector [ 215.137193][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 215.137209][ T29] audit: type=1400 audit(1758646134.668:8712): avc: denied { kexec_image_load } for pid=23124 comm="syz.3.8756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 215.269740][T23137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.346677][ T29] audit: type=1326 audit(1758646134.878:8713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.370389][ T29] audit: type=1326 audit(1758646134.878:8714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.393977][ T29] audit: type=1326 audit(1758646134.878:8715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.417502][ T29] audit: type=1326 audit(1758646134.878:8716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.441073][ T29] audit: type=1326 audit(1758646134.878:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.464564][ T29] audit: type=1326 audit(1758646134.878:8718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.488059][ T29] audit: type=1326 audit(1758646134.878:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.511918][ T29] audit: type=1326 audit(1758646134.878:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.535414][ T29] audit: type=1326 audit(1758646134.878:8721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.7.8779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252c4feec9 code=0x7ffc0000 [ 215.579238][T23153] macvtap0: refused to change device tx_queue_len [ 215.678410][T23165] vlan1: entered allmulticast mode [ 215.685272][T23165] bridge0: port 3(vlan1) entered blocking state [ 215.691694][T23165] bridge0: port 3(vlan1) entered disabled state [ 215.701149][T23165] vlan1: entered promiscuous mode [ 215.862578][T23203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.890950][T23203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.111522][T23239] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 216.174907][T23250] __nla_validate_parse: 12 callbacks suppressed [ 216.174924][T23250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8831'. [ 216.322671][T23274] loop8: detected capacity change from 0 to 1024 [ 216.342860][T23274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.385892][T21306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.655306][T23331] netlink: 'syz.0.8858': attribute type 12 has an invalid length. [ 216.663227][T23331] netlink: 'syz.0.8858': attribute type 29 has an invalid length. [ 216.671123][T23331] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8858'. [ 216.824632][T23350] GUP no longer grows the stack in syz.2.8868 (23350): 200000004000-200000005000 (200000002000) [ 216.835242][T23350] CPU: 0 UID: 0 PID: 23350 Comm: syz.2.8868 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.835270][T23350] Tainted: [W]=WARN [ 216.835276][T23350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.835287][T23350] Call Trace: [ 216.835293][T23350] [ 216.835300][T23350] __dump_stack+0x1d/0x30 [ 216.835325][T23350] dump_stack_lvl+0xe8/0x140 [ 216.835343][T23350] dump_stack+0x15/0x1b [ 216.835359][T23350] __get_user_pages+0x198d/0x1fa0 [ 216.835390][T23350] ? __rcu_read_unlock+0x4f/0x70 [ 216.835409][T23350] get_user_pages_remote+0x1d5/0x6d0 [ 216.835433][T23350] __access_remote_vm+0x15c/0x590 [ 216.835460][T23350] access_remote_vm+0x32/0x40 [ 216.835549][T23350] proc_pid_cmdline_read+0x32b/0x6c0 [ 216.835574][T23350] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 216.835661][T23350] vfs_readv+0x3f8/0x690 [ 216.835697][T23350] __x64_sys_preadv+0xfd/0x1c0 [ 216.835732][T23350] x64_sys_call+0x282a/0x2ff0 [ 216.835749][T23350] do_syscall_64+0xd2/0x200 [ 216.835777][T23350] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 216.835802][T23350] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.835948][T23350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.835966][T23350] RIP: 0033:0x7f7257f7eec9 [ 216.835979][T23350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.836005][T23350] RSP: 002b:00007f72569e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 216.836047][T23350] RAX: ffffffffffffffda RBX: 00007f72581d5fa0 RCX: 00007f7257f7eec9 [ 216.836094][T23350] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003 [ 216.836106][T23350] RBP: 00007f7258001f91 R08: 0000000000000007 R09: 0000000000000000 [ 216.836116][T23350] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 216.836126][T23350] R13: 00007f72581d6038 R14: 00007f72581d5fa0 R15: 00007ffcf821b838 [ 216.836141][T23350] [ 217.100360][T23360] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 217.163175][T23370] loop7: detected capacity change from 0 to 1024 [ 217.196657][T23370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.258315][T18446] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.296626][T23396] validate_nla: 2 callbacks suppressed [ 217.296641][T23396] netlink: 'syz.7.8889': attribute type 1 has an invalid length. [ 217.485582][T23427] hub 8-0:1.0: USB hub found [ 217.499362][T23427] hub 8-0:1.0: 8 ports detected [ 217.523295][T23432] hub 9-0:1.0: USB hub found [ 217.528047][T23432] hub 9-0:1.0: 8 ports detected [ 217.652443][T23452] SELinux: failed to load policy [ 218.011998][T23500] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8939'. [ 218.537203][T23580] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8978'. [ 218.605711][T23594] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 218.687797][T23613] loop8: detected capacity change from 0 to 2048 [ 218.711592][T23613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.726433][T23613] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8995'. [ 218.735704][T23613] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 218.798773][T21306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.888637][T23654] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9012'. [ 219.674659][T23691] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9028'. [ 219.960125][T23725] netlink: 'syz.8.9044': attribute type 1 has an invalid length. [ 220.005700][T23732] netlink: 'syz.0.9047': attribute type 1 has an invalid length. [ 220.043027][T23739] loop8: detected capacity change from 0 to 128 [ 220.060352][T23739] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 220.068218][T23739] FAT-fs (loop8): Filesystem has been set read-only [ 220.074902][T23739] bio_check_eod: 101 callbacks suppressed [ 220.074916][T23739] syz.8.9051: attempt to access beyond end of device [ 220.074916][T23739] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 220.094522][T23739] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 220.102413][T23739] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 220.110836][T23739] syz.8.9051: attempt to access beyond end of device [ 220.110836][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.124229][T23739] syz.8.9051: attempt to access beyond end of device [ 220.124229][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.137978][T23739] syz.8.9051: attempt to access beyond end of device [ 220.137978][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.152729][T23739] syz.8.9051: attempt to access beyond end of device [ 220.152729][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.167068][T23739] syz.8.9051: attempt to access beyond end of device [ 220.167068][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.181930][T23739] syz.8.9051: attempt to access beyond end of device [ 220.181930][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.195455][T23739] syz.8.9051: attempt to access beyond end of device [ 220.195455][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.208792][T23739] syz.8.9051: attempt to access beyond end of device [ 220.208792][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.222624][T23739] syz.8.9051: attempt to access beyond end of device [ 220.222624][T23739] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 220.567581][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 220.567597][ T29] audit: type=1400 audit(1758646140.098:9054): avc: denied { name_bind } for pid=23754 comm="syz.0.9058" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 220.683852][ T29] audit: type=1400 audit(1758646140.218:9055): avc: denied { create } for pid=23768 comm="syz.7.9065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.757678][ T29] audit: type=1400 audit(1758646140.218:9056): avc: denied { ioctl } for pid=23768 comm="syz.7.9065" path="socket:[79047]" dev="sockfs" ino=79047 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.782616][ T29] audit: type=1400 audit(1758646140.218:9057): avc: denied { setattr } for pid=23768 comm="syz.7.9065" name="KCM" dev="sockfs" ino=79048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 220.805086][ T29] audit: type=1400 audit(1758646140.268:9058): avc: denied { create } for pid=23771 comm="syz.3.9066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 220.925853][ T29] audit: type=1400 audit(1758646140.288:9059): avc: denied { connect } for pid=23771 comm="syz.3.9066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 220.960381][ T29] audit: type=1400 audit(1758646140.458:9060): avc: denied { map } for pid=23787 comm="syz.3.9074" path="socket:[79082]" dev="sockfs" ino=79082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.983833][ T29] audit: type=1400 audit(1758646140.458:9061): avc: denied { read } for pid=23787 comm="syz.3.9074" path="socket:[79082]" dev="sockfs" ino=79082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.015414][ T29] audit: type=1400 audit(1758646140.548:9062): avc: denied { unmount } for pid=21306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 221.035654][ T29] audit: type=1400 audit(1758646140.548:9063): avc: denied { create } for pid=23793 comm="syz.2.9077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.361122][T23847] netlink: 664 bytes leftover after parsing attributes in process `syz.0.9102'. [ 221.608244][T23884] loop8: detected capacity change from 0 to 128 [ 221.621595][T23884] FAT-fs (loop8): Directory bread(block 32) failed [ 221.634388][T23884] FAT-fs (loop8): Directory bread(block 33) failed [ 221.646622][T23884] FAT-fs (loop8): Directory bread(block 34) failed [ 221.655009][T23884] FAT-fs (loop8): Directory bread(block 35) failed [ 221.661696][T23884] FAT-fs (loop8): Directory bread(block 36) failed [ 221.668281][T23884] FAT-fs (loop8): Directory bread(block 37) failed [ 221.688796][T23884] FAT-fs (loop8): Directory bread(block 38) failed [ 221.695428][T23884] FAT-fs (loop8): Directory bread(block 39) failed [ 221.705158][T23884] FAT-fs (loop8): Directory bread(block 40) failed [ 221.711874][T23884] FAT-fs (loop8): Directory bread(block 41) failed [ 221.735767][T23900] syz_tun: refused to change device tx_queue_len [ 221.781721][T23884] Buffer I/O error on dev loop8, logical block 1028, async page read [ 221.790128][T23884] Buffer I/O error on dev loop8, logical block 41991, async page read [ 221.798304][T23884] FAT-fs (loop8): Filesystem has been set read-only [ 221.805411][T23884] Buffer I/O error on dev loop8, logical block 1028, async page read [ 221.826540][T23884] Buffer I/O error on dev loop8, logical block 41991, async page read [ 221.884161][T23920] netlink: 168 bytes leftover after parsing attributes in process `syz.8.9136'. [ 221.934628][T23927] syz_tun: refused to change device tx_queue_len [ 221.980247][T23935] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9143'. [ 222.042352][T23945] netlink: 256 bytes leftover after parsing attributes in process `syz.8.9150'. [ 222.230621][T23973] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9159'. [ 222.445576][T23998] netlink: 256 bytes leftover after parsing attributes in process `syz.7.9173'. [ 222.563823][T24020] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.587417][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9184'. [ 222.727653][T24050] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.026805][T24090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24090 comm=syz.8.9216 [ 223.666424][T24170] SELinux: policydb version 4376 does not match my version range 15-35 [ 223.683046][T24170] SELinux: failed to load policy [ 223.962434][T24195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9265'. [ 224.310883][T24231] SELinux: policydb version 0 does not match my version range 15-35 [ 224.332079][T24231] SELinux: failed to load policy [ 224.429711][T24240] random: crng reseeded on system resumption [ 224.520306][T24251] SELinux: policydb version 4376 does not match my version range 15-35 [ 224.530112][T24251] SELinux: failed to load policy [ 224.583765][T24259] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9296'. [ 224.604584][T24259] netlink: 'syz.3.9296': attribute type 9 has an invalid length. [ 224.612469][T24259] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9296'. [ 224.635047][T24263] SELinux: policydb version 1664 does not match my version range 15-35 [ 224.674290][T24263] SELinux: failed to load policy [ 224.679305][T24265] vhci_hcd: default hub control req: 6015 v0002 i0003 l0 [ 225.288038][T24311] openvswitch: netlink: Message has 6 unknown bytes. [ 225.340874][T24315] SELinux: policydb version 1664 does not match my version range 15-35 [ 225.359396][T24315] SELinux: failed to load policy [ 225.744887][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 225.744905][ T29] audit: type=1326 audit(1758646145.278:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24356 comm="syz.0.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 225.792148][ T29] audit: type=1326 audit(1758646145.308:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24356 comm="syz.0.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 225.815694][ T29] audit: type=1326 audit(1758646145.308:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24356 comm="syz.0.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 225.860919][T24359] syzkaller1: entered promiscuous mode [ 225.866479][T24359] syzkaller1: entered allmulticast mode [ 225.888375][ T29] audit: type=1326 audit(1758646145.418:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 225.915859][ T29] audit: type=1326 audit(1758646145.418:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 225.939508][ T29] audit: type=1326 audit(1758646145.448:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 225.963666][ T29] audit: type=1326 audit(1758646145.448:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 225.987277][ T29] audit: type=1326 audit(1758646145.448:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 226.010828][ T29] audit: type=1326 audit(1758646145.498:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 226.053249][ T29] audit: type=1326 audit(1758646145.498:9269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eeb18eec9 code=0x7ffc0000 [ 226.157527][T24370] vhci_hcd: default hub control req: 6015 v0002 i0003 l0 [ 226.451973][T24383] random: crng reseeded on system resumption [ 227.179969][T24440] random: crng reseeded on system resumption [ 227.704257][T24463] __nla_validate_parse: 1 callbacks suppressed [ 227.704276][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9390'. [ 227.759218][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9390'. [ 227.864558][T24465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9391'. [ 227.893183][T24465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9391'. [ 228.235771][T24480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9397'. [ 228.244926][T24480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9397'. [ 228.444565][T24490] binfmt_misc: register: failed to install interpreter file ./file2 [ 228.494712][T24496] netlink: 'syz.8.9405': attribute type 4 has an invalid length. [ 228.502514][T24496] netlink: 14345 bytes leftover after parsing attributes in process `syz.8.9405'. [ 228.574991][T24503] 9pnet_fd: Insufficient options for proto=fd [ 228.666260][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9415'. [ 228.765936][T24531] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 228.789652][T24532] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.9420'. [ 228.809218][T24523] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.9420'. [ 228.928184][T24549] 9pnet_fd: Insufficient options for proto=fd [ 229.143793][T24562] netlink: 'syz.8.9436': attribute type 3 has an invalid length. [ 229.314779][T24568] netlink: 'syz.3.9439': attribute type 21 has an invalid length. [ 229.428748][T24582] Invalid ELF header magic: != ELF [ 230.333827][T24621] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 230.359248][T24621] SELinux: failed to load policy [ 230.367207][T24625] netlink: 'syz.3.9465': attribute type 1 has an invalid length. [ 230.547559][T24634] sd 0:0:1:0: device reset [ 231.230499][T24673] ALSA: seq fatal error: cannot create timer (-19) [ 231.407615][T24690] bridge0: entered promiscuous mode [ 231.445712][T24690] macsec1: entered promiscuous mode [ 231.460110][T24690] bridge0: port 4(macsec1) entered blocking state [ 231.466602][T24690] bridge0: port 4(macsec1) entered disabled state [ 231.491310][T24690] macsec1: entered allmulticast mode [ 231.496663][T24690] bridge0: entered allmulticast mode [ 231.535099][T24690] macsec1: left allmulticast mode [ 231.540254][T24690] bridge0: left allmulticast mode [ 231.564682][T24690] bridge0: left promiscuous mode [ 231.633967][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 231.633984][ T29] audit: type=1326 audit(1758646151.168:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.694653][ T29] audit: type=1326 audit(1758646151.198:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.718331][ T29] audit: type=1326 audit(1758646151.198:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.742047][ T29] audit: type=1326 audit(1758646151.198:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.765617][ T29] audit: type=1326 audit(1758646151.198:9379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.789283][ T29] audit: type=1326 audit(1758646151.198:9380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.812694][ T29] audit: type=1326 audit(1758646151.198:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.836170][ T29] audit: type=1326 audit(1758646151.198:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.859670][ T29] audit: type=1326 audit(1758646151.198:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 231.883220][ T29] audit: type=1326 audit(1758646151.208:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24698 comm="syz.0.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643ea8eec9 code=0x7ffc0000 [ 232.030983][T24703] serio: Serial port ttyS3 [ 232.428325][T24723] vxcan1: tx address claim with dest, not broadcast [ 232.513894][T24728] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 232.513894][T24728] program syz.3.9514 not setting count and/or reply_len properly [ 232.729295][T24726] ================================================================== [ 232.737453][T24726] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 232.745792][T24726] [ 232.748143][T24726] write to 0xffff88811a501834 of 4 bytes by task 24722 on cpu 0: [ 232.755850][T24726] inode_update_timestamps+0x147/0x270 [ 232.761317][T24726] file_update_time+0x20e/0x2b0 [ 232.766163][T24726] shmem_file_write_iter+0x9c/0xf0 [ 232.771273][T24726] iter_file_splice_write+0x666/0xa60 [ 232.776649][T24726] direct_splice_actor+0x156/0x2a0 [ 232.781753][T24726] splice_direct_to_actor+0x312/0x680 [ 232.787120][T24726] do_splice_direct+0xda/0x150 [ 232.791877][T24726] do_sendfile+0x380/0x650 [ 232.796292][T24726] __x64_sys_sendfile64+0x105/0x150 [ 232.801487][T24726] x64_sys_call+0x2bb0/0x2ff0 [ 232.806153][T24726] do_syscall_64+0xd2/0x200 [ 232.810664][T24726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.816550][T24726] [ 232.818860][T24726] read to 0xffff88811a501834 of 4 bytes by task 24726 on cpu 1: [ 232.826479][T24726] atime_needs_update+0x2a8/0x3e0 [ 232.831509][T24726] touch_atime+0x4a/0x340 [ 232.835843][T24726] shmem_file_read_iter+0x477/0x540 [ 232.841049][T24726] copy_splice_read+0x43f/0x660 [ 232.845894][T24726] splice_direct_to_actor+0x290/0x680 [ 232.851254][T24726] do_splice_direct+0xda/0x150 [ 232.856058][T24726] do_sendfile+0x380/0x650 [ 232.860481][T24726] __x64_sys_sendfile64+0x105/0x150 [ 232.865674][T24726] x64_sys_call+0x2bb0/0x2ff0 [ 232.870341][T24726] do_syscall_64+0xd2/0x200 [ 232.874846][T24726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.880724][T24726] [ 232.883032][T24726] value changed: 0x0f68f37e -> 0x100189fd [ 232.888736][T24726] [ 232.891045][T24726] Reported by Kernel Concurrency Sanitizer on: [ 232.897190][T24726] CPU: 1 UID: 0 PID: 24726 Comm: syz.8.9512 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.908581][T24726] Tainted: [W]=WARN [ 232.912387][T24726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.922449][T24726] ==================================================================