last executing test programs: 6m21.185607677s ago: executing program 32 (id=1347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m18.362730878s ago: executing program 33 (id=1403): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 6m10.861921529s ago: executing program 34 (id=1140): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 6m0.971471315s ago: executing program 35 (id=1990): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x5, &(0x7f0000000300)) 6m0.405268943s ago: executing program 36 (id=1993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 4m40.792305718s ago: executing program 37 (id=5772): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000040)={0x0, "f713ce12c1fe3c9a2cd6b337dad1ce400cd698adfc4a6bee479ccd9b275e51e4121209972d25880c4f43648580c5c3893b826beb9a17136643db3077a0b7cf3f"}, 0x48, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) 4m40.66417184s ago: executing program 38 (id=5778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x3e00, 0x0, 0x0, 0x0) 4m29.038169201s ago: executing program 39 (id=6196): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r1, 0x80000001, 0xf4}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0x9}, &(0x7f00000002c0)=0x8) 4m19.220468326s ago: executing program 40 (id=6613): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '{%'}}]}}) 3m58.179485076s ago: executing program 41 (id=6832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='{^+^\x00', 0x0, r0) 3m56.529982521s ago: executing program 3 (id=7176): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 3m56.499192231s ago: executing program 3 (id=7179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x2000, 0x0, 0x0, 0x0}) 3m56.292695734s ago: executing program 3 (id=7186): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x6}]}) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 3m56.288967304s ago: executing program 42 (id=7186): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x6}]}) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 2m23.875785957s ago: executing program 6 (id=11221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x7f00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20000}, {@dev, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x3a00, 0x0, 0x0, 0x1000, 0x0, 0x0]}]}}}}}}}, 0x0) 2m23.780090058s ago: executing program 6 (id=11227): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m23.430862163s ago: executing program 6 (id=11238): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 2m23.396860734s ago: executing program 6 (id=11239): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) unshare(0x24060400) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m23.311300065s ago: executing program 6 (id=11243): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000a40)={[{@nodiscard}, {}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@discard}]}, 0x5, 0x591, &(0x7f0000000f80)="$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") chdir(&(0x7f0000000380)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2m23.250419386s ago: executing program 6 (id=11246): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82802, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x26ee, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1f1}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 2m8.05454172s ago: executing program 43 (id=11246): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82802, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x26ee, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1f1}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 2m4.300986406s ago: executing program 8 (id=11803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) unshare(0x68040200) 2m3.913523092s ago: executing program 8 (id=11819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r0}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 2m3.875217353s ago: executing program 8 (id=11821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x7f00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20000}, {@dev, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x3a00, 0x0, 0x0, 0x1000, 0x0, 0x0]}]}}}}}}}, 0x0) 2m3.856697843s ago: executing program 8 (id=11822): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 2m3.831535023s ago: executing program 8 (id=11824): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000a40)={[{@nodiscard}, {}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@discard}]}, 0x5, 0x591, &(0x7f0000000f80)="$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") chdir(&(0x7f0000000380)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2m3.785996264s ago: executing program 8 (id=11826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(0x0, 0x0, 0x0) 1m48.531812215s ago: executing program 44 (id=11826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(0x0, 0x0, 0x0) 13.832486071s ago: executing program 7 (id=16100): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x18c6) 13.635465045s ago: executing program 7 (id=16115): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x7f, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 13.588085395s ago: executing program 5 (id=16117): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7a}]}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r1, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 13.557948656s ago: executing program 7 (id=16118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000340)=@rnullb, 0x0, &(0x7f00000003c0)='./file0\x00') 13.462638617s ago: executing program 7 (id=16120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0/../file0\x00', 0x2) 13.462170517s ago: executing program 5 (id=16121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f00000003c0)=""/106, 0x6a}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x3}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 13.434578438s ago: executing program 7 (id=16124): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) 13.2602349s ago: executing program 7 (id=16132): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@user_xattr}, {@jqfmt_vfsv1}, {@noblock_validity}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x75, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 13.253557211s ago: executing program 45 (id=16132): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@user_xattr}, {@jqfmt_vfsv1}, {@noblock_validity}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x75, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 13.188585872s ago: executing program 5 (id=16136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000001100)=@rnullb, 0x0, &(0x7f0000000240)='./file0\x00') 13.173874132s ago: executing program 5 (id=16139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 13.058464934s ago: executing program 5 (id=16145): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 12.886123616s ago: executing program 5 (id=16155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x2f, {0x2f, 0x32, "f0662c67fb994889c3a1a236a2952d52db728ec9a89b4d939495efa68d0953c40a09fa986622203673f7825acd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) 12.870426886s ago: executing program 46 (id=16155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x2f, {0x2f, 0x32, "f0662c67fb994889c3a1a236a2952d52db728ec9a89b4d939495efa68d0953c40a09fa986622203673f7825acd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) 4.010868927s ago: executing program 1 (id=16492): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 3.934801158s ago: executing program 1 (id=16496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffff200004000a004e2000000401000000006d5a00000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4"], 0x21c}}, 0x0) 3.896996298s ago: executing program 1 (id=16500): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x5a}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 3.854811619s ago: executing program 1 (id=16502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 3.854460009s ago: executing program 1 (id=16503): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3.564573094s ago: executing program 1 (id=16513): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r0, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 3.556039244s ago: executing program 47 (id=16513): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r0, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 629.05195ms ago: executing program 4 (id=16588): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d0000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 552.853451ms ago: executing program 4 (id=16589): ioprio_set$uid(0x3, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0) 535.621541ms ago: executing program 9 (id=16590): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 461.141033ms ago: executing program 4 (id=16592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x18) shmctl$IPC_SET(0x0, 0x1, 0x0) 388.926534ms ago: executing program 4 (id=16593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 385.567824ms ago: executing program 2 (id=16594): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) 382.718474ms ago: executing program 9 (id=16595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r1, r0}, 0xc) 308.950445ms ago: executing program 9 (id=16597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 283.518815ms ago: executing program 3 (id=16514): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) unshare(0x2c020400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) lseek(r2, 0x3, 0x2) 270.106765ms ago: executing program 9 (id=16598): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x2, 0x3, 0x6, 0xf84, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x8, 0xf99, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}}, {0x0, 0x4e23, 0xf85, 0x0, @gue={{0x2, 0x1, 0x2, 0x6f, 0x100}, "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"}}}}}, 0xfa7) 269.246106ms ago: executing program 2 (id=16599): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) 268.299376ms ago: executing program 0 (id=16600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 220.481377ms ago: executing program 3 (id=16601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 220.024097ms ago: executing program 4 (id=16602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0}]) 218.274186ms ago: executing program 0 (id=16603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffaeffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 202.823187ms ago: executing program 2 (id=16604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 174.391167ms ago: executing program 0 (id=16605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 156.148118ms ago: executing program 0 (id=16606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 155.434638ms ago: executing program 9 (id=16616): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu~=0|&!') 151.832818ms ago: executing program 2 (id=16607): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = eventfd(0xfffffffc) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 136.042058ms ago: executing program 4 (id=16608): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 94.179508ms ago: executing program 0 (id=16609): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 72.918229ms ago: executing program 3 (id=16610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0xc9f, 0x59, "88bd91aa90758062b5fffd9272e301aa98af75"}) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x745}}, 0x1006) 60.802739ms ago: executing program 2 (id=16611): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000500), 0x66) 31.292109ms ago: executing program 0 (id=16612): ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000320000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 28.668979ms ago: executing program 9 (id=16613): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 0s ago: executing program 2 (id=16614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): ) entered blocking state [ 374.406372][ T533] bridge0: port 3(macvlan2) entered disabled state [ 374.413433][ T533] macvlan2: entered allmulticast mode [ 374.456864][ T533] macvlan2: left allmulticast mode [ 374.472405][ T542] rtc_cmos 00:00: Alarms can be up to one day in the future [ 374.540497][ T29] audit: type=1400 audit(2000000012.460:14959): avc: denied { audit_write } for pid=549 comm="syz.7.13182" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 374.561849][ T29] audit: type=1107 audit(2000000012.460:14960): pid=549 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 374.586278][ T555] sd 0:0:1:0: device reset [ 374.591050][ T29] audit: type=1326 audit(2000000012.500:14961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.7.13185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 374.615563][ T29] audit: type=1326 audit(2000000012.510:14962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.7.13185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54afb2d290 code=0x7ffc0000 [ 374.640047][ T29] audit: type=1326 audit(2000000012.510:14963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.7.13185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 374.665312][ T560] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13187'. [ 374.711985][ T560] bond2: entered promiscuous mode [ 374.717255][ T560] bond2: entered allmulticast mode [ 374.722764][ T560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.752616][ T558] netlink: 'syz.0.13184': attribute type 1 has an invalid length. [ 374.777577][ T7121] rtc_cmos 00:00: Alarms can be up to one day in the future [ 374.785377][ T7121] rtc_cmos 00:00: Alarms can be up to one day in the future [ 374.793868][ T7121] rtc_cmos 00:00: Alarms can be up to one day in the future [ 374.801609][ T7121] rtc_cmos 00:00: Alarms can be up to one day in the future [ 374.808990][ T7121] rtc rtc0: __rtc_set_alarm: err=-22 [ 374.904019][ T588] syzkaller1: entered promiscuous mode [ 374.910502][ T588] syzkaller1: entered allmulticast mode [ 375.161251][ T613] SELinux: ebitmap: truncated map [ 375.172224][ T613] SELinux: failed to load policy [ 375.227612][ T627] syzkaller1: entered promiscuous mode [ 375.233291][ T627] syzkaller1: entered allmulticast mode [ 375.298986][ T637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13223'. [ 375.367845][ T642] loop7: detected capacity change from 0 to 512 [ 375.390748][ T642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.403487][ T642] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.437939][ T655] xt_hashlimit: max too large, truncated to 1048576 [ 375.449553][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.516692][ T667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=667 comm=syz.7.13236 [ 375.529276][ T667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=667 comm=syz.7.13236 [ 375.589025][ T679] netlink: 'syz.5.13242': attribute type 3 has an invalid length. [ 375.622079][ T6879] tipc: Subscription rejected, illegal request [ 375.760141][ T711] netlink: 209788 bytes leftover after parsing attributes in process `syz.5.13255'. [ 375.769885][ T711] netlink: zone id is out of range [ 375.775156][ T711] netlink: zone id is out of range [ 375.783943][ T711] netlink: zone id is out of range [ 375.789310][ T711] netlink: zone id is out of range [ 375.794751][ T711] netlink: zone id is out of range [ 375.802100][ T711] netlink: zone id is out of range [ 375.808211][ T711] netlink: del zone limit has 8 unknown bytes [ 375.932947][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13262'. [ 375.942069][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13262'. [ 376.024623][ T734] sd 0:0:1:0: device reset [ 376.453834][ T743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=743 comm=syz.9.13270 [ 376.467185][ T743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=743 comm=syz.9.13270 [ 376.627533][ T768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13281'. [ 376.644394][ T768] bond2: entered promiscuous mode [ 376.650452][ T768] bond2: entered allmulticast mode [ 376.656013][ T768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.892506][ T808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13298'. [ 376.908048][ T808] bond5: entered promiscuous mode [ 376.913173][ T808] bond5: entered allmulticast mode [ 376.919055][ T808] 8021q: adding VLAN 0 to HW filter on device bond5 [ 376.936857][ T815] xt_hashlimit: max too large, truncated to 1048576 [ 376.945369][ T816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=816 comm=syz.5.13300 [ 376.957979][ T816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=816 comm=syz.5.13300 [ 377.010609][ T823] sd 0:0:1:0: device reset [ 377.040026][ T4847] tipc: Subscription rejected, illegal request [ 377.188914][ T846] loop7: detected capacity change from 0 to 512 [ 377.203866][ T846] EXT4-fs: Ignoring removed orlov option [ 377.214325][ T846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.217106][ T846] EXT4-fs (loop7): orphan cleanup on readonly fs [ 377.218306][ T846] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13318: bg 0: block 248: padding at end of block bitmap is not set [ 377.219007][ T846] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.13318: Failed to acquire dquot type 1 [ 377.228465][ T846] EXT4-fs (loop7): 1 truncate cleaned up [ 377.230093][ T846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 377.273311][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.345184][ T6879] tipc: Subscription rejected, illegal request [ 377.406007][ T870] netlink: 'syz.1.13325': attribute type 3 has an invalid length. [ 377.448332][ T876] xt_hashlimit: max too large, truncated to 1048576 [ 377.491578][ T881] loop0: detected capacity change from 0 to 512 [ 377.507666][ T881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.520478][ T881] ext4 filesystem being mounted at /1540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.546507][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.630262][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13350'. [ 378.434493][ T950] __nla_validate_parse: 1 callbacks suppressed [ 378.434593][ T950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13361'. [ 378.473290][ T952] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13362'. [ 378.486085][ T950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13361'. [ 379.137093][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 379.137112][ T29] audit: type=1326 audit(2000000017.060:15084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1037 comm="syz.1.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 379.172053][ T29] audit: type=1326 audit(2000000017.090:15085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1037 comm="syz.1.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 379.196524][ T29] audit: type=1326 audit(2000000017.090:15086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1037 comm="syz.1.13401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 379.272195][ T29] audit: type=1400 audit(2000000017.190:15087): avc: denied { listen } for pid=1052 comm="syz.1.13409" lport=41287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 379.305673][ T29] audit: type=1400 audit(2000000017.220:15088): avc: denied { accept } for pid=1052 comm="syz.1.13409" lport=41287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 379.329020][ T29] audit: type=1400 audit(2000000017.220:15089): avc: denied { getopt } for pid=1052 comm="syz.1.13409" lport=41287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 379.422498][ T29] audit: type=1326 audit(2000000017.340:15090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 379.445778][ T29] audit: type=1326 audit(2000000017.340:15091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 379.468852][ T29] audit: type=1326 audit(2000000017.340:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 379.492028][ T29] audit: type=1326 audit(2000000017.340:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1069 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 379.638854][ T1089] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.706885][ T1097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13439'. [ 379.792061][ T1107] xt_hashlimit: max too large, truncated to 1048576 [ 379.908868][ T1121] hub 2-0:1.0: USB hub found [ 379.913712][ T1121] hub 2-0:1.0: 8 ports detected [ 379.938664][ T1125] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13444'. [ 379.971207][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13445'. [ 379.983310][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13445'. [ 380.670960][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13477'. [ 380.681099][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13477'. [ 380.838410][ T1217] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.912152][ T1231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13493'. [ 381.490557][ T1290] xt_hashlimit: max too large, truncated to 1048576 [ 381.561421][ T1300] loop7: detected capacity change from 0 to 512 [ 381.569293][ T1300] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 381.583821][ T1300] EXT4-fs (loop7): 1 truncate cleaned up [ 381.590536][ T1300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.641774][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.703822][ T1318] xt_hashlimit: max too large, truncated to 1048576 [ 381.993866][ T1353] random: crng reseeded on system resumption [ 382.547670][ T1414] tmpfs: Bad value for 'mpol' [ 382.578589][ T1416] loop0: detected capacity change from 0 to 512 [ 382.585723][ T1416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 382.597657][ T1416] EXT4-fs (loop0): 1 truncate cleaned up [ 382.603719][ T1416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.664465][ T1423] random: crng reseeded on system resumption [ 382.690087][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.822271][ T1446] ipvlan2: entered promiscuous mode [ 382.899279][ T1452] random: crng reseeded on system resumption [ 383.037317][ T7121] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 383.044833][ T7121] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 383.053051][ T7121] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 383.061913][ T1474] tmpfs: Bad value for 'mpol' [ 383.067450][ T7121] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 383.222789][ T1499] netlink: 'syz.7.13617': attribute type 21 has an invalid length. [ 383.230932][ T1499] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.319624][ T3396] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 383.327353][ T3396] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 383.334807][ T3396] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 383.350417][ T3396] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 383.454063][ T1520] __nla_validate_parse: 10 callbacks suppressed [ 383.454084][ T1520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13625'. [ 383.503634][ T1520] ipvlan2: entered promiscuous mode [ 383.544951][ T3396] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 383.552488][ T3396] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 383.561067][ T3396] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 383.571756][ T1530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13628'. [ 383.576082][ T3396] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 383.610316][ T1537] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 383.813788][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13647'. [ 383.838631][ T1578] ipvlan2: entered promiscuous mode [ 383.982908][ T1603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13666'. [ 383.996671][ T1603] ipvlan2: entered promiscuous mode [ 384.682779][ T1610] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 384.703231][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 384.703260][ T29] audit: type=1326 audit(2000000022.620:15404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.713289][ T1613] loop7: detected capacity change from 0 to 2048 [ 384.752362][ T29] audit: type=1326 audit(2000000022.660:15405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.776145][ T29] audit: type=1326 audit(2000000022.660:15406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.799834][ T29] audit: type=1326 audit(2000000022.660:15407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.823606][ T29] audit: type=1326 audit(2000000022.660:15408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.847373][ T29] audit: type=1326 audit(2000000022.660:15409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.871066][ T29] audit: type=1326 audit(2000000022.660:15410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.894694][ T29] audit: type=1326 audit(2000000022.660:15411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.918447][ T29] audit: type=1326 audit(2000000022.660:15412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.942098][ T29] audit: type=1326 audit(2000000022.660:15413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.1.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 384.971273][ T3396] IPVS: starting estimator thread 0... [ 384.997468][ T1613] loop7: p1 < > p4 [ 385.001904][ T1613] loop7: p4 size 8388608 extends beyond EOD, truncated [ 385.066379][ T1625] IPVS: using max 2352 ests per chain, 117600 per kthread [ 385.340498][ T1682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.485078][ T1700] hsr0: entered promiscuous mode [ 385.547686][ T1714] loop0: detected capacity change from 0 to 256 [ 385.601860][ T1711] lo speed is unknown, defaulting to 1000 [ 385.733430][ T1738] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13722'. [ 385.743408][ T1738] netlink: 'syz.9.13722': attribute type 7 has an invalid length. [ 385.751463][ T1738] netlink: 'syz.9.13722': attribute type 8 has an invalid length. [ 385.759462][ T1738] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13722'. [ 385.775195][ T1744] IPVS: stopping master sync thread 1745 ... [ 385.810131][ T1738] gretap0: entered promiscuous mode [ 385.821176][ T1738] gretap0: left promiscuous mode [ 385.873122][ T1754] netlink: 268 bytes leftover after parsing attributes in process `syz.0.13728'. [ 385.883895][ T1756] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13729'. [ 386.035660][ T1774] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 386.057497][ T1778] hub 4-0:1.0: USB hub found [ 386.068818][ T1778] hub 4-0:1.0: 8 ports detected [ 386.130945][ T1792] netlink: 'syz.5.13747': attribute type 1 has an invalid length. [ 386.164243][ T1797] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.13744'. [ 386.194337][ T1786] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.13744'. [ 386.354401][ T1820] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 60 [ 386.378643][ T1824] SELinux: ebitmap: empty map [ 386.383569][ T1824] SELinux: failed to load policy [ 386.441682][ T1832] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 386.454577][ T1832] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 386.481688][ T1836] netlink: 'syz.7.13768': attribute type 10 has an invalid length. [ 386.494749][ T1836] batman_adv: batadv0: Adding interface: team0 [ 386.501175][ T1836] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.526674][ T1836] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 386.538554][ T1836] netlink: 'syz.7.13768': attribute type 10 has an invalid length. [ 386.546974][ T1836] team0: entered promiscuous mode [ 386.552061][ T1836] team_slave_0: entered promiscuous mode [ 386.557967][ T1836] team_slave_1: entered promiscuous mode [ 386.564105][ T1836] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.572034][ T1836] batman_adv: batadv0: Interface activated: team0 [ 386.578909][ T1836] batman_adv: batadv0: Interface deactivated: team0 [ 386.586512][ T1836] batman_adv: batadv0: Removing interface: team0 [ 386.598791][ T1836] bridge0: port 3(team0) entered blocking state [ 386.605229][ T1836] bridge0: port 3(team0) entered disabled state [ 386.611942][ T1836] team0: entered allmulticast mode [ 386.618138][ T1836] team_slave_0: entered allmulticast mode [ 386.623942][ T1836] team_slave_1: entered allmulticast mode [ 386.718107][ T1861] syzkaller1: entered promiscuous mode [ 386.723740][ T1861] syzkaller1: entered allmulticast mode [ 386.986535][ T1898] netlink: 'syz.0.13797': attribute type 10 has an invalid length. [ 387.004930][ T1898] dummy0: entered promiscuous mode [ 387.014242][ T1898] bridge0: port 3(dummy0) entered blocking state [ 387.020728][ T1898] bridge0: port 3(dummy0) entered disabled state [ 387.034704][ T1902] qrtr: Invalid version 91 [ 387.051486][ T1898] dummy0: entered allmulticast mode [ 387.371275][ T1927] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 387.388786][ T1927] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 387.512602][ T1944] ALSA: seq fatal error: cannot create timer (-19) [ 387.641247][ T1966] sch_fq: defrate 2048 ignored. [ 387.766177][ T1986] SELinux: syz.1.13839 (1986) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 387.862953][ T2001] vlan3: entered promiscuous mode [ 387.868117][ T2001] gretap0: entered promiscuous mode [ 387.971833][ T2021] netlink: 'syz.1.13854': attribute type 3 has an invalid length. [ 388.095753][ T2032] 0XD: renamed from gretap0 (while UP) [ 388.112792][ T2032] 0XD: entered allmulticast mode [ 388.122904][ T2032] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 388.198972][ T2041] netlink: 'syz.5.13863': attribute type 6 has an invalid length. [ 388.783931][ T2116] program syz.7.13899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.393438][ T2126] loop0: detected capacity change from 0 to 1024 [ 389.431824][ T2126] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 389.442869][ T2126] EXT4-fs (loop0): group descriptors corrupted! [ 389.468264][ T2126] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 389.722517][ T2162] netlink: 'syz.7.13921': attribute type 10 has an invalid length. [ 389.730660][ T2162] __nla_validate_parse: 9 callbacks suppressed [ 389.730673][ T2162] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13921'. [ 389.731597][ T2164] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13922'. [ 389.797759][ T2168] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 389.820178][ T2174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13926'. [ 389.940606][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 389.940623][ T29] audit: type=1326 audit(2000000027.863:15564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.0.13939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 389.965841][ T2198] ALSA: seq fatal error: cannot create timer (-22) [ 389.978664][ T29] audit: type=1326 audit(2000000027.893:15565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.0.13939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 390.002444][ T29] audit: type=1326 audit(2000000027.893:15566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.0.13939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 390.026068][ T29] audit: type=1326 audit(2000000027.893:15567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.0.13939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 390.050194][ T29] audit: type=1326 audit(2000000027.893:15568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.0.13939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 390.115377][ T2206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2206 comm=syz.0.13942 [ 390.128226][ T2206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2206 comm=syz.0.13942 [ 390.153184][ T29] audit: type=1326 audit(2000000028.073:15569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 390.177003][ T29] audit: type=1326 audit(2000000028.073:15570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 390.200703][ T29] audit: type=1326 audit(2000000028.073:15571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 390.224524][ T29] audit: type=1326 audit(2000000028.073:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2209 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 390.287444][ T2214] 9pnet: Could not find request transport: 0xffffffffffffffff [ 390.441961][ T2243] program syz.5.13969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.481625][ T2250] loop1: detected capacity change from 0 to 512 [ 390.503863][ T2250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 390.549359][ T29] audit: type=1326 audit(2000000028.463:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2253 comm="syz.7.13963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 390.587843][ T2250] EXT4-fs (loop1): 1 truncate cleaned up [ 390.605653][ T2250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.656304][T26015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.678369][ T2272] netlink: 'syz.7.13972': attribute type 1 has an invalid length. [ 390.686330][ T2272] netlink: 224 bytes leftover after parsing attributes in process `syz.7.13972'. [ 391.095671][ T2317] loop7: detected capacity change from 0 to 128 [ 391.112309][ T2317] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 391.420050][ T2359] 9pnet: Could not find request transport: 0xffffffffffffffff [ 391.541569][ T2382] loop0: detected capacity change from 0 to 764 [ 391.549540][ T2382] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 392.266667][ T2451] netlink: 'syz.5.14051': attribute type 1 has an invalid length. [ 392.274562][ T2451] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14051'. [ 392.304736][ T2453] IPv6: Can't replace route, no match found [ 392.841915][ T2477] netlink: 'syz.7.14063': attribute type 6 has an invalid length. [ 393.063255][ T2500] loop1: detected capacity change from 0 to 764 [ 393.077704][ T2500] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 393.306402][ T2530] vlan3: entered promiscuous mode [ 393.311558][ T2530] gretap0: entered promiscuous mode [ 393.528050][ T2565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.984331][ T2620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14139'. [ 394.028530][ T2625] netlink: 268 bytes leftover after parsing attributes in process `syz.1.14131'. [ 394.130854][ T2642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14138'. [ 394.140146][ T2642] netlink: 'syz.0.14138': attribute type 7 has an invalid length. [ 394.148215][ T2642] netlink: 'syz.0.14138': attribute type 8 has an invalid length. [ 394.156117][ T2642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14138'. [ 394.190967][ T2648] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 394.260391][ T2650] hub 4-0:1.0: USB hub found [ 394.267995][ T2650] hub 4-0:1.0: 8 ports detected [ 394.396146][ T2671] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.14151'. [ 394.590727][ T2698] netlink: 'syz.5.14167': attribute type 10 has an invalid length. [ 394.603642][ T2698] batman_adv: batadv0: Adding interface: team0 [ 394.609942][ T2698] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.635280][ T2698] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 394.651403][ T2698] netlink: 'syz.5.14167': attribute type 10 has an invalid length. [ 394.660896][ T2698] team0: entered promiscuous mode [ 394.668282][ T2698] team_slave_0: entered promiscuous mode [ 394.674119][ T2698] team_slave_1: entered promiscuous mode [ 394.681148][ T2698] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.690597][ T2698] batman_adv: batadv0: Interface activated: team0 [ 394.697922][ T2698] batman_adv: batadv0: Interface deactivated: team0 [ 394.704696][ T2698] batman_adv: batadv0: Removing interface: team0 [ 394.713872][ T2698] bridge0: port 3(team0) entered blocking state [ 394.720285][ T2698] bridge0: port 3(team0) entered disabled state [ 394.738550][ T2698] team0: entered allmulticast mode [ 394.744615][ T2698] team_slave_0: entered allmulticast mode [ 394.750450][ T2698] team_slave_1: entered allmulticast mode [ 394.758819][ T2698] bridge0: port 3(team0) entered blocking state [ 394.765142][ T2698] bridge0: port 3(team0) entered forwarding state [ 394.772427][ T2704] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 394.789711][ T2704] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 394.941300][ T2733] netlink: 'syz.7.14184': attribute type 10 has an invalid length. [ 394.950306][ T2733] __nla_validate_parse: 2 callbacks suppressed [ 394.950331][ T2733] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14184'. [ 394.980904][ T2740] syzkaller1: entered promiscuous mode [ 394.986634][ T2740] syzkaller1: entered allmulticast mode [ 394.999841][ T2733] dummy0: entered promiscuous mode [ 395.008411][ T2733] bridge0: port 4(dummy0) entered blocking state [ 395.014896][ T2733] bridge0: port 4(dummy0) entered disabled state [ 395.022075][ T2733] dummy0: entered allmulticast mode [ 395.142367][ T2759] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 395.150029][ T2759] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 395.194318][ T2768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14199'. [ 395.203547][ T2768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14199'. [ 395.339019][ T2782] SELinux: ebitmap: empty map [ 395.343851][ T2782] SELinux: failed to load policy [ 395.413938][ T2791] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14209'. [ 395.903488][ T2798] netlink: '+}[@': attribute type 4 has an invalid length. [ 395.923977][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 395.923992][ T29] audit: type=1326 audit(2000000033.844:15951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2799 comm="syz.9.14213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce81b1ab19 code=0x7ffc0000 [ 395.981361][ T29] audit: type=1326 audit(2000000033.884:15952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.005131][ T29] audit: type=1326 audit(2000000033.884:15953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.029680][ T29] audit: type=1326 audit(2000000033.884:15954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.053570][ T29] audit: type=1326 audit(2000000033.884:15955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.071461][ T2811] SELinux: ebitmap: empty map [ 396.078129][ T29] audit: type=1326 audit(2000000033.884:15956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.087938][ T2811] SELinux: failed to load policy [ 396.105491][ T29] audit: type=1326 audit(2000000033.884:15957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.105531][ T29] audit: type=1326 audit(2000000033.884:15958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.159358][ T29] audit: type=1326 audit(2000000033.884:15959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.183085][ T29] audit: type=1326 audit(2000000033.884:15960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2804 comm="syz.0.14214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 396.214306][ T2808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14216'. [ 396.882898][ T2878] hub 4-0:1.0: USB hub found [ 396.889574][ T2878] hub 4-0:1.0: 8 ports detected [ 396.905855][ T2886] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14256'. [ 396.936271][ T2889] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 397.416073][ T2933] loop7: detected capacity change from 0 to 1024 [ 397.424081][ T2933] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 397.435161][ T2933] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 397.449419][ T2933] JBD2: no valid journal superblock found [ 397.455232][ T2933] EXT4-fs (loop7): Could not load journal inode [ 397.496323][ T2933] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 397.600739][ T2954] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 397.743347][ T3396] IPVS: starting estimator thread 0... [ 397.802561][ T2985] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14299'. [ 397.811750][ T2985] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14299'. [ 397.829361][ T2985] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 397.839756][ T2985] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 397.846590][ T2974] IPVS: using max 1968 ests per chain, 98400 per kthread [ 398.118774][ T3014] loop1: detected capacity change from 0 to 8192 [ 398.150627][ T3029] Invalid ELF header magic: != ELF [ 398.166014][ T3014] loop1: p1 p2 p4 [ 398.169999][ T3014] loop1: p1 size 108920841 extends beyond EOD, truncated [ 398.179882][ T3014] loop1: p2 start 861536256 is beyond EOD, truncated [ 398.186764][ T3014] loop1: p4 size 65536 extends beyond EOD, truncated [ 398.259288][ T3045] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 398.365585][ T3061] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 398.569198][ T3095] loop0: detected capacity change from 0 to 512 [ 398.602248][ T3095] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.14345: iget: bad i_size value: 38620345925642 [ 398.617392][ T3095] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.14345: couldn't read orphan inode 15 (err -117) [ 398.630490][ T3095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.762842][ T3445] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap [ 398.778950][ T3445] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 398.791337][ T3445] EXT4-fs (loop0): This should not happen!! Data will be lost [ 398.791337][ T3445] [ 398.801193][ T3445] EXT4-fs (loop0): Total free blocks count 0 [ 398.807340][ T3445] EXT4-fs (loop0): Free/Dirty block details [ 398.813264][ T3445] EXT4-fs (loop0): free_blocks=0 [ 398.818403][ T3445] EXT4-fs (loop0): dirty_blocks=33 [ 398.823577][ T3445] EXT4-fs (loop0): Block reservation details [ 398.829650][ T3445] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 398.849972][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.101935][ T3156] loop7: detected capacity change from 0 to 8192 [ 399.122881][ T3172] program syz.9.14378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.547686][ T3289] __nla_validate_parse: 9 callbacks suppressed [ 400.547704][ T3289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14431'. [ 400.565559][ T3289] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 400.596266][ T3296] syzkaller1: entered promiscuous mode [ 400.601829][ T3296] syzkaller1: entered allmulticast mode [ 400.744798][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.754095][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.763228][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.781683][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.790895][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.800821][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.826153][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.835408][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.844754][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14439'. [ 400.950704][ T3329] IPVS: stopping master sync thread 3330 ... [ 400.951535][ T3330] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 401.285239][ T3363] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 401.301354][ T29] kauditd_printk_skb: 3584 callbacks suppressed [ 401.301373][ T29] audit: type=1326 audit(2000000039.224:19545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.5.14466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22ba4e929 code=0x7ffc0000 [ 401.332535][ T29] audit: type=1326 audit(2000000039.224:19546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.5.14466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd22ba4e929 code=0x7ffc0000 [ 401.356409][ T29] audit: type=1326 audit(2000000039.224:19547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.5.14466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22ba4e929 code=0x7ffc0000 [ 401.381721][ T29] audit: type=1326 audit(2000000039.284:19548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.5.14466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22ba4e929 code=0x7ffc0000 [ 401.505311][ T3371] netlink: 'syz.5.14467': attribute type 1 has an invalid length. [ 401.628942][ T3381] loop7: detected capacity change from 0 to 512 [ 401.648075][ T3381] EXT4-fs: Ignoring removed i_version option [ 401.683615][ T29] audit: type=1326 audit(2000000039.604:19549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.9.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 401.697030][ T3381] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 401.708175][ T29] audit: type=1326 audit(2000000039.604:19550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.9.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 401.741558][ T29] audit: type=1326 audit(2000000039.604:19551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.9.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 401.783366][ T3381] EXT4-fs (loop7): 1 truncate cleaned up [ 401.792942][ T3381] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.819275][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.827482][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.835617][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.869278][ T29] audit: type=1400 audit(2000000039.774:19552): avc: denied { associate } for pid=3398 comm="syz.0.14475" name="1769" dev="tmpfs" ino=9036 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 401.927085][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.934543][ T29] audit: type=1400 audit(2000000039.834:19553): avc: denied { remove_name } for pid=16494 comm="syz-executor" name="binderfs" dev="tmpfs" ino=9040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 401.963530][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963642][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963672][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963702][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963782][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963811][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963838][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963862][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963891][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.963918][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.964005][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.964043][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.964069][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.964095][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.964121][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.964147][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.964228][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.972509][ T29] audit: type=1400 audit(2000000039.834:19554): avc: denied { rmdir } for pid=16494 comm="syz-executor" name="1769" dev="tmpfs" ino=9036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 401.980778][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.980811][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 401.980839][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 402.153819][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 402.162022][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 402.170230][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 402.178422][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 402.186591][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 402.194713][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 402.204839][ T23] hid-generic FFFF:FFFFFFFC:20000001.000D: hidraw0: HID va0.69 Device [syz0] on syz1 [ 402.731916][ T3396] Process accounting resumed [ 402.881764][ T3481] pim6reg1: entered promiscuous mode [ 402.888046][ T3481] pim6reg1: entered allmulticast mode [ 403.370934][ T3535] random: crng reseeded on system resumption [ 403.467662][ T3542] loop0: detected capacity change from 0 to 512 [ 403.490741][ T3542] EXT4-fs (loop0): 1 orphan inode deleted [ 403.497442][ T3542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.510106][ T6886] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 403.519143][ T3542] ext4 filesystem being mounted at /1779/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.551654][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.038296][ T3580] ref_ctr_offset mismatch. inode: 0x1267 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 404.073673][ T3583] loop0: detected capacity change from 0 to 512 [ 404.084481][ T3583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.102076][ T3583] ext4 filesystem being mounted at /1792/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.129955][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.149342][ T3589] IPVS: Error connecting to the multicast addr [ 404.248064][ T3601] random: crng reseeded on system resumption [ 404.459213][ T7121] Process accounting resumed [ 404.580754][ T3640] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 405.123401][ T3677] sg_write: data in/out 268435417/14 bytes for SCSI command 0x0-- guessing data in; [ 405.123401][ T3677] program syz.1.14599 not setting count and/or reply_len properly [ 405.251965][ T3689] netlink: 'syz.9.14605': attribute type 1 has an invalid length. [ 405.791689][ T3735] random: crng reseeded on system resumption [ 405.791775][ T3734] __nla_validate_parse: 5 callbacks suppressed [ 405.791793][ T3734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14625'. [ 406.093414][ T3760] random: crng reseeded on system resumption [ 406.321583][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 406.321601][ T29] audit: type=1326 audit(2000000044.244:19618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3777 comm="syz.0.14646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 406.366810][ T29] audit: type=1326 audit(2000000044.274:19619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3777 comm="syz.0.14646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 406.391648][ T29] audit: type=1326 audit(2000000044.274:19620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3777 comm="syz.0.14646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 406.448891][ T3789] random: crng reseeded on system resumption [ 406.479582][ T3794] IPVS: stopping master sync thread 3795 ... [ 406.484096][ T3795] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 406.543670][ T3800] bond2: entered promiscuous mode [ 406.549024][ T3800] bond2: entered allmulticast mode [ 406.555896][ T3800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.571549][ T3800] bond2 (unregistering): Released all slaves [ 406.580280][ T29] audit: type=1400 audit(2000000044.494:19621): avc: denied { map_create } for pid=3809 comm="syz.0.14660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 406.600604][ T29] audit: type=1400 audit(2000000044.494:19622): avc: denied { map_read map_write } for pid=3809 comm="syz.0.14660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 406.620701][ T29] audit: type=1400 audit(2000000044.494:19623): avc: denied { prog_load } for pid=3809 comm="syz.0.14660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 406.640638][ T29] audit: type=1400 audit(2000000044.504:19624): avc: denied { bpf } for pid=3809 comm="syz.0.14660" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.661452][ T29] audit: type=1400 audit(2000000044.504:19625): avc: denied { perfmon } for pid=3809 comm="syz.0.14660" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.683550][ T29] audit: type=1400 audit(2000000044.504:19626): avc: denied { prog_run } for pid=3809 comm="syz.0.14660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 406.702849][ T29] audit: type=1400 audit(2000000044.504:19627): avc: denied { mounton } for pid=3809 comm="syz.0.14660" path="/1810" dev="tmpfs" ino=9245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 406.769203][ T3817] batadv1: entered promiscuous mode [ 406.887051][ T3836] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 406.888759][ T3833] IPVS: stopping master sync thread 3836 ... [ 407.178263][ T3871] syzkaller1: entered promiscuous mode [ 407.183891][ T3871] syzkaller1: entered allmulticast mode [ 407.531480][ T3913] smc: net device bond0 applied user defined pnetid SYZ0 [ 407.542657][ T3913] smc: net device bond0 erased user defined pnetid SYZ0 [ 407.668722][ T3924] bio_check_eod: 53 callbacks suppressed [ 407.668743][ T3924] syz.9.14716: attempt to access beyond end of device [ 407.668743][ T3924] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 407.827229][ T3940] xt_connbytes: Forcing CT accounting to be enabled [ 407.834330][ T3940] Cannot find set identified by id 0 to match [ 408.207709][ T3972] loop7: detected capacity change from 0 to 128 [ 408.277884][ T3980] tap0: tun_chr_ioctl cmd 1074025678 [ 408.283269][ T3980] tap0: group set to 0 [ 408.296723][ T3980] tap0: tun_chr_ioctl cmd 1074025677 [ 408.306183][ T3980] tap0: linktype set to 821 [ 408.680187][ T4001] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 409.145098][ T4029] SELinux: failed to load policy [ 409.241768][ T4042] tap0: tun_chr_ioctl cmd 2147767517 [ 409.394497][ T4064] macvlan1: entered promiscuous mode [ 409.406814][ T4064] ipvlan0: entered promiscuous mode [ 409.414082][ T4064] ipvlan0: left promiscuous mode [ 409.419343][ T4064] macvlan1: left promiscuous mode [ 409.503460][ T4061] syz.9.14779 (4061) used greatest stack depth: 8736 bytes left [ 409.646690][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.655270][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.701557][ T4094] loop0: detected capacity change from 0 to 512 [ 409.718554][ T4094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.784060][ T4094] ext4 filesystem being mounted at /1833/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.902687][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.956849][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.009025][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.235327][ T4139] netlink: 'syz.0.14813': attribute type 1 has an invalid length. [ 410.315280][ T4153] syz.5.14820: attempt to access beyond end of device [ 410.315280][ T4153] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 410.397980][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14825'. [ 410.407402][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14826'. [ 410.550559][ T4186] program syz.1.14836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.871895][ T4226] lo speed is unknown, defaulting to 1000 [ 410.913121][ T4237] netlink: 'syz.9.14859': attribute type 10 has an invalid length. [ 410.938577][ T4237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.947676][ T4237] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 410.967161][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.974802][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.988266][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.995817][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.019413][ T4237] bond0: (slave batadv0): Releasing backup interface [ 411.313229][ T4259] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 411.363111][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 411.363127][ T29] audit: type=1400 audit(2000000049.284:19938): avc: denied { mount } for pid=4260 comm="syz.0.14872" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 411.398003][ T29] audit: type=1400 audit(2000000049.284:19939): avc: denied { unmount } for pid=26119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 411.446759][ T29] audit: type=1400 audit(2000000049.364:19940): avc: denied { create } for pid=4272 comm="syz.0.14876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 411.466611][ T29] audit: type=1400 audit(2000000049.364:19941): avc: denied { write } for pid=4272 comm="syz.0.14876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 411.507721][ T4277] usb usb1: usbfs: process 4277 (syz.1.14878) did not claim interface 0 before use [ 411.538235][ T4282] netlink: 'syz.0.14880': attribute type 21 has an invalid length. [ 411.581149][ T29] audit: type=1400 audit(2000000049.504:19942): avc: denied { read write } for pid=4288 comm="syz.0.14884" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 411.605736][ T29] audit: type=1400 audit(2000000049.504:19943): avc: denied { open } for pid=4288 comm="syz.0.14884" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 411.631006][ T29] audit: type=1326 audit(2000000049.504:19944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.1.14882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 411.654847][ T29] audit: type=1326 audit(2000000049.504:19945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.1.14882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 411.679497][ T29] audit: type=1326 audit(2000000049.504:19946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.1.14882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 411.703409][ T29] audit: type=1326 audit(2000000049.504:19947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.1.14882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10079e929 code=0x7ffc0000 [ 411.747083][ T4292] xt_CT: No such helper "syz0" [ 411.813434][ T4302] hub 9-0:1.0: USB hub found [ 411.821328][ T4302] hub 9-0:1.0: 8 ports detected [ 412.263916][ T4364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.432031][ T4386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14929'. [ 412.665565][ T4411] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 412.665565][ T4411] program syz.0.14940 not setting count and/or reply_len properly [ 412.727186][ T4417] loop0: detected capacity change from 0 to 128 [ 412.734075][ T4417] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 412.854013][ T4436] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14952'. [ 412.885394][ T4439] loop0: detected capacity change from 0 to 1024 [ 412.901512][ T4439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.930993][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.000116][ T4456] syzkaller1: entered promiscuous mode [ 413.005720][ T4456] syzkaller1: entered allmulticast mode [ 413.422366][ T4519] loop7: detected capacity change from 0 to 1024 [ 413.429403][ T4521] netlink: 'syz.0.14993': attribute type 21 has an invalid length. [ 413.449638][ T4519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.489240][ T4519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.566252][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.848281][ T4592] netlink: 'syz.7.15026': attribute type 4 has an invalid length. [ 413.904042][ T4600] loop7: detected capacity change from 0 to 128 [ 414.117488][ T4633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15045'. [ 414.466509][ T4663] syz.1.15058: attempt to access beyond end of device [ 414.466509][ T4663] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 414.538563][ T4669] ALSA: seq fatal error: cannot create timer (-19) [ 414.632410][ T4678] lo speed is unknown, defaulting to 1000 [ 414.767943][ T4697] xt_connbytes: Forcing CT accounting to be enabled [ 414.774920][ T4697] Cannot find set identified by id 0 to match [ 414.855128][ T4699] lo speed is unknown, defaulting to 1000 [ 415.006203][ T4718] xfrm0: entered allmulticast mode [ 415.077964][ T4720] SELinux: failed to load policy [ 415.200496][ T4739] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15095'. [ 415.302971][ T4749] macvlan1: entered promiscuous mode [ 415.334900][ T4749] ipvlan0: entered promiscuous mode [ 415.356912][ T4749] ipvlan0: left promiscuous mode [ 415.369871][ T4749] macvlan1: left promiscuous mode [ 415.392500][ T4759] tap0: tun_chr_ioctl cmd 1074025678 [ 415.397933][ T4759] tap0: group set to 0 [ 415.413240][ T4753] tap0: tun_chr_ioctl cmd 1074025677 [ 415.429202][ T4753] tap0: linktype set to 821 [ 415.499366][ T4771] netlink: 132 bytes leftover after parsing attributes in process `syz.9.15110'. [ 415.809580][ T4788] lo speed is unknown, defaulting to 1000 [ 416.007767][ T4816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15141'. [ 416.157749][ T4834] loop7: detected capacity change from 0 to 512 [ 416.197966][ T4834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.215875][ T4834] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.267801][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.355115][ T4852] loop0: detected capacity change from 0 to 512 [ 416.363330][ T4852] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 416.374200][ T4852] EXT4-fs (loop0): invalid journal inode [ 416.381804][ T4852] EXT4-fs (loop0): can't get journal size [ 416.388534][ T4852] EXT4-fs (loop0): 1 truncate cleaned up [ 416.394828][ T4852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.411085][ T4852] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 416.435513][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.558599][ T4867] ref_ctr_offset mismatch. inode: 0x15a6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 416.674320][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 416.674375][ T29] audit: type=1400 audit(2000000054.594:20105): avc: denied { connect } for pid=4871 comm="syz.5.15154" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.790153][ T29] audit: type=1400 audit(2000000054.714:20106): avc: denied { sys_module } for pid=4884 comm="syz.0.15159" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 416.858213][ T29] audit: type=1326 audit(2000000054.774:20107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.9.15171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 416.882071][ T29] audit: type=1326 audit(2000000054.774:20108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.9.15171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 416.905705][ T29] audit: type=1326 audit(2000000054.774:20109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.9.15171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 416.929431][ T29] audit: type=1326 audit(2000000054.774:20110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.9.15171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 416.953079][ T29] audit: type=1326 audit(2000000054.774:20111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.9.15171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 416.976707][ T29] audit: type=1326 audit(2000000054.774:20112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.9.15171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 417.124211][ T29] audit: type=1400 audit(2000000055.024:20113): avc: denied { associate } for pid=4903 comm="syz.0.15166" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 417.251826][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.274350][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.369302][ T29] audit: type=1400 audit(2000000055.294:20114): avc: denied { create } for pid=4924 comm="syz.7.15175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.486485][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15181'. [ 417.749831][ T4972] atomic_op ffff888104c67d28 conn xmit_atomic 0000000000000000 [ 417.780863][ T4974] hub 9-0:1.0: USB hub found [ 417.794204][ T4974] hub 9-0:1.0: 8 ports detected [ 417.807989][ T4979] netlink: 'syz.7.15201': attribute type 10 has an invalid length. [ 417.817925][ T4979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.828221][ T4979] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 417.860407][ T4979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.870298][ T4979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.882298][ T4979] bond0: (slave batadv0): Releasing backup interface [ 418.037397][ T5009] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 418.116069][ T5016] macsec1: entered promiscuous mode [ 418.121415][ T5016] gretap0: entered promiscuous mode [ 418.127887][ T5016] gretap0: left promiscuous mode [ 418.271221][ T5022] loop7: detected capacity change from 0 to 1024 [ 418.278038][ T5022] EXT4-fs: Ignoring removed orlov option [ 418.284163][ T5022] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 418.298220][ T5022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.329373][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.383494][ T5030] loop7: detected capacity change from 0 to 512 [ 418.391025][ T5030] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 418.400014][ T5030] EXT4-fs (loop7): invalid journal inode [ 418.405892][ T5030] EXT4-fs (loop7): can't get journal size [ 418.412352][ T5030] EXT4-fs (loop7): 1 truncate cleaned up [ 418.419400][ T5030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.434296][ T5030] EXT4-fs warning (device loop7): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 418.456087][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.938690][ T5052] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.156045][ T5071] syzkaller1: entered promiscuous mode [ 419.161627][ T5071] syzkaller1: entered allmulticast mode [ 419.381191][ T5103] macsec1: entered promiscuous mode [ 419.584364][ T5136] netlink: 'syz.5.15274': attribute type 10 has an invalid length. [ 419.617936][ T5136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.657650][ T5136] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 419.673046][ T5144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.681317][ T5144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.690157][ T5144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.697966][ T5144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.723098][ T5144] bond0: (slave batadv0): Releasing backup interface [ 419.740694][ T5146] macsec1: entered promiscuous mode [ 419.790295][ T5157] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 419.957636][ T5176] syzkaller1: entered promiscuous mode [ 419.963193][ T5176] syzkaller1: entered allmulticast mode [ 420.006597][ T5169] lo speed is unknown, defaulting to 1000 [ 420.100147][ T5187] xt_hashlimit: max too large, truncated to 1048576 [ 420.441930][ T5210] ------------[ cut here ]------------ [ 420.447540][ T5210] WARNING: CPU: 0 PID: 5210 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 420.458477][ T5210] Modules linked in: [ 420.462508][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.1.15309 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 420.475232][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.485407][ T5210] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 420.492764][ T5210] Code: 83 3d 63 24 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 1a 1d 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 420.512828][ T5210] RSP: 0018:ffffc900036d7a30 EFLAGS: 00010246 [ 420.520190][ T5210] RAX: ef54ddce8a03f700 RBX: 000000000000000f RCX: 0000000000000000 [ 420.528399][ T5210] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000040dc0 [ 420.536586][ T5210] RBP: 0000000000000dc0 R08: ffff88813dfd5bd8 R09: 0000000000000000 [ 420.544590][ T5210] R10: ffff888119baf6c8 R11: 0001888119baf6c8 R12: ffffc900036d7d28 [ 420.553343][ T5210] R13: 0000000000004494 R14: 0000000000040dc0 R15: 0000000000000000 [ 420.561425][ T5210] FS: 00007fa0fee076c0(0000) GS:ffff8882aee3c000(0000) knlGS:0000000000000000 [ 420.570444][ T5210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.577935][ T5210] CR2: 0000200000004000 CR3: 0000000165552000 CR4: 00000000003506f0 [ 420.578239][ T5212] syzkaller1: entered promiscuous mode [ 420.586057][ T5210] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 420.586076][ T5210] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 420.586093][ T5210] Call Trace: [ 420.586099][ T5210] [ 420.586112][ T5210] __alloc_pages_noprof+0x9/0x20 [ 420.586182][ T5210] ___kmalloc_large_node+0x73/0x140 [ 420.591689][ T5212] syzkaller1: entered allmulticast mode [ 420.599811][ T5210] __kmalloc_large_node_noprof+0x16/0xa0 [ 420.637387][ T5210] __kmalloc_noprof+0x2ab/0x3e0 [ 420.642308][ T5210] ? hashtab_init+0x9b/0xe0 [ 420.646978][ T5210] ? common_read+0x3f/0x300 [ 420.651588][ T5210] hashtab_init+0x9b/0xe0 [ 420.656087][ T5210] symtab_init+0x2c/0x40 [ 420.660472][ T5210] common_read+0x10b/0x300 [ 420.664980][ T5210] ? hashtab_init+0x6e/0xe0 [ 420.670285][ T5210] ? __pfx_common_read+0x10/0x10 [ 420.675390][ T5210] policydb_read+0x652/0x1330 [ 420.680273][ T5210] ? security_load_policy+0x90/0x890 [ 420.685693][ T5210] security_load_policy+0xba/0x890 [ 420.690885][ T5210] ? rep_movs_alternative+0x4a/0x90 [ 420.692195][ T5217] sd 0:0:1:0: device reset [ 420.697066][ T5210] sel_write_load+0x1d4/0x380 [ 420.705596][ T5210] ? __pfx_sel_write_load+0x10/0x10 [ 420.710860][ T5210] vfs_write+0x266/0x8e0 [ 420.715122][ T5210] ? __rcu_read_unlock+0x4f/0x70 [ 420.720127][ T5210] ? __fget_files+0x184/0x1c0 [ 420.724983][ T5210] ksys_write+0xda/0x1a0 [ 420.729848][ T5210] __x64_sys_write+0x40/0x50 [ 420.734457][ T5210] x64_sys_call+0x2cdd/0x2fb0 [ 420.739367][ T5210] do_syscall_64+0xd2/0x200 [ 420.743911][ T5210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 420.750176][ T5210] ? clear_bhb_loop+0x40/0x90 [ 420.754878][ T5210] ? clear_bhb_loop+0x40/0x90 [ 420.760370][ T5210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.766327][ T5210] RIP: 0033:0x7fa10079e929 [ 420.770814][ T5210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.791435][ T5210] RSP: 002b:00007fa0fee07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.799887][ T5210] RAX: ffffffffffffffda RBX: 00007fa1009c5fa0 RCX: 00007fa10079e929 [ 420.808015][ T5210] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000003 [ 420.816826][ T5210] RBP: 00007fa100820b39 R08: 0000000000000000 R09: 0000000000000000 [ 420.824993][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.833108][ T5210] R13: 0000000000000000 R14: 00007fa1009c5fa0 R15: 00007fff9e3e5d98 [ 420.841175][ T5210] [ 420.844203][ T5210] ---[ end trace 0000000000000000 ]--- [ 420.852464][ T5210] SELinux: failed to load policy [ 420.906482][ T5224] netlink: 'syz.1.15311': attribute type 10 has an invalid length. [ 420.917968][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.927270][ T5224] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 420.939809][ T5224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.947514][ T5224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.955517][ T5224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.963129][ T5224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.986830][ T5224] bond0: (slave batadv0): Releasing backup interface [ 421.023853][ T5235] loop0: detected capacity change from 0 to 1024 [ 421.031628][ T5235] EXT4-fs: Ignoring removed orlov option [ 421.040030][ T5235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.124825][ T5237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.143852][ T5242] atomic_op ffff88815d4d7d28 conn xmit_atomic 0000000000000000 [ 421.209947][ T5255] netem: change failed [ 421.336365][ T5271] loop7: detected capacity change from 0 to 1024 [ 421.347619][ T5271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.381544][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.551409][ T5288] loop7: detected capacity change from 0 to 1024 [ 421.569463][ T5288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.608683][ T5288] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.15352: Allocating blocks 449-513 which overlap fs metadata [ 421.633377][ T5287] EXT4-fs (loop7): pa ffff8881072245b0: logic 48, phys. 177, len 21 [ 421.641561][ T5287] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 421.670530][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.690167][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 421.690183][ T29] audit: type=1400 audit(2000000059.614:20226): avc: denied { append } for pid=5305 comm="syz.5.15348" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 421.722169][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15347'. [ 421.747783][ T29] audit: type=1400 audit(2000000059.674:20227): avc: denied { connect } for pid=5309 comm="syz.1.15349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.768568][ T29] audit: type=1400 audit(2000000059.674:20228): avc: denied { getopt } for pid=5309 comm="syz.1.15349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.887671][ T29] audit: type=1400 audit(2000000059.814:20229): avc: denied { ioctl } for pid=5315 comm="syz.9.15351" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 421.934241][ T5321] netlink: 'syz.9.15354': attribute type 1 has an invalid length. [ 422.079126][ T29] audit: type=1326 audit(2000000060.004:20230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz.0.15365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 422.106680][ T29] audit: type=1326 audit(2000000060.024:20231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz.0.15365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 422.131211][ T29] audit: type=1326 audit(2000000060.024:20232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz.0.15365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 422.154920][ T29] audit: type=1326 audit(2000000060.024:20233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz.0.15365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 422.179476][ T29] audit: type=1326 audit(2000000060.024:20234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz.0.15365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 422.203198][ T29] audit: type=1326 audit(2000000060.024:20235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz.0.15365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 422.320243][ T5355] loop0: detected capacity change from 0 to 2048 [ 422.338291][ T5355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.367250][T16494] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 422.383876][T16494] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 422.399296][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.431015][ T5361] netlink: 3 bytes leftover after parsing attributes in process `syz.0.15371'. [ 422.443043][ T5361] 0X: renamed from caif0 [ 422.454946][ T5361] 0X: entered allmulticast mode [ 422.460448][ T5361] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 423.402957][ T5402] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 423.455988][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15391'. [ 423.880876][ T5467] loop7: detected capacity change from 0 to 512 [ 423.908100][ T5467] EXT4-fs (loop7): orphan cleanup on readonly fs [ 423.924944][ T5467] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.15418: bad orphan inode 13 [ 423.951822][ T5467] ext4_test_bit(bit=12, block=18) = 1 [ 423.957510][ T5467] is_bad_inode(inode)=0 [ 423.961767][ T5467] NEXT_ORPHAN(inode)=2130706432 [ 423.966753][ T5467] max_ino=32 [ 423.969981][ T5467] i_nlink=1 [ 423.994190][ T5467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.060279][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.579426][ T5488] ip6gre1: entered allmulticast mode [ 425.417532][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15448'. [ 425.426960][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15448'. [ 425.464274][ T5538] SELinux: syz.1.15449 (5538) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 425.893746][ T5576] loop0: detected capacity change from 0 to 1024 [ 425.905559][ T5576] EXT4-fs: Ignoring removed nobh option [ 425.911275][ T5576] EXT4-fs: Ignoring removed bh option [ 425.929138][ T5576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.958803][ T5576] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.15466: Allocating blocks 385-513 which overlap fs metadata [ 425.986259][ T5585] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 426.004477][ T5574] EXT4-fs (loop0): pa ffff8881072245b0: logic 16, phys. 129, len 24 [ 426.013379][ T5574] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 426.064199][T16494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.209334][ T5615] netlink: 596 bytes leftover after parsing attributes in process `syz.5.15485'. [ 426.264576][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15488'. [ 426.795203][ T5702] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 426.937159][ T5711] serio: Serial port ptm0 [ 427.023662][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 427.023677][ T29] audit: type=1326 audit(2000000064.944:20425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.067017][ T29] audit: type=1326 audit(2000000064.954:20426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.091550][ T29] audit: type=1326 audit(2000000064.954:20427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.115285][ T29] audit: type=1326 audit(2000000064.954:20428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.139258][ T29] audit: type=1326 audit(2000000064.954:20429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.163686][ T29] audit: type=1326 audit(2000000064.954:20430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.188463][ T29] audit: type=1326 audit(2000000064.954:20431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.212334][ T29] audit: type=1326 audit(2000000064.954:20432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.237168][ T29] audit: type=1326 audit(2000000064.954:20433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.258020][ T5722] netlink: 664 bytes leftover after parsing attributes in process `syz.7.15537'. [ 427.260863][ T29] audit: type=1326 audit(2000000064.954:20434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.9.15535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 427.327511][ T5734] loop7: detected capacity change from 0 to 164 [ 427.339848][ T5734] ISOFS: unable to read i-node block [ 427.345259][ T5734] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 427.354891][ T5734] isofs_fill_super: get root inode failed [ 427.438715][ T5748] loop0: detected capacity change from 0 to 256 [ 427.445731][ T5748] FAT-fs (loop0): bogus number of FAT sectors [ 427.451905][ T5748] FAT-fs (loop0): Can't find a valid FAT filesystem [ 427.537677][ T5755] loop7: detected capacity change from 0 to 1024 [ 427.552189][ T5755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.582572][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.985341][ T5819] loop7: detected capacity change from 0 to 512 [ 427.993077][ T5819] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 428.014958][ T5819] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 428.050589][ T5819] EXT4-fs (loop7): 1 truncate cleaned up [ 428.066356][ T5819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.098208][ T5821] lo speed is unknown, defaulting to 1000 [ 428.117567][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.307490][ T5848] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15593'. [ 428.316655][ T5848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15593'. [ 428.326584][ T5848] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15593'. [ 428.339272][ T5848] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15593'. [ 428.485240][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15603'. [ 428.628642][ T5887] 9pnet: p9_errstr2errno: server reported unknown error @hQIte} [ 428.833930][ T5910] loop7: detected capacity change from 0 to 256 [ 428.908728][ T5910] FAT-fs (loop7): Directory bread(block 64) failed [ 428.915629][ T5910] FAT-fs (loop7): Directory bread(block 65) failed [ 428.930759][ T5910] FAT-fs (loop7): Directory bread(block 66) failed [ 428.949959][ T5910] FAT-fs (loop7): Directory bread(block 67) failed [ 428.968639][ T5910] FAT-fs (loop7): Directory bread(block 68) failed [ 428.982068][ T5910] FAT-fs (loop7): Directory bread(block 69) failed [ 428.992052][ T5910] FAT-fs (loop7): Directory bread(block 70) failed [ 429.017662][ T5910] FAT-fs (loop7): Directory bread(block 71) failed [ 429.031054][ T5910] FAT-fs (loop7): Directory bread(block 72) failed [ 429.047811][ T5910] FAT-fs (loop7): Directory bread(block 73) failed [ 429.073721][ T5910] usb usb1: usbfs: process 5910 (syz.7.15623) did not claim interface 0 before use [ 429.533550][ T5986] rdma_op ffff88815d4d6d80 conn xmit_rdma 0000000000000000 [ 429.642483][ T6001] xt_TCPMSS: Only works on TCP SYN packets [ 429.683540][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15663'. [ 429.735580][ T6015] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 430.127405][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15682'. [ 430.149316][ T6047] IPVS: Error joining to the multicast group [ 430.548736][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 430.629539][ T6100] Cannot find add_set index 0 as target [ 430.781986][ T6121] netlink: 88 bytes leftover after parsing attributes in process `syz.5.15715'. [ 430.792380][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15715'. [ 430.851313][ T6133] loop7: detected capacity change from 0 to 512 [ 430.861557][ T6133] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 430.875296][ T6133] EXT4-fs (loop7): 1 truncate cleaned up [ 430.882628][ T6133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.930866][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.952281][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15724'. [ 430.962680][ T6145] IPVS: Error joining to the multicast group [ 431.116817][ T6161] netlink: 'syz.7.15733': attribute type 3 has an invalid length. [ 431.154373][ T6163] loop7: detected capacity change from 0 to 512 [ 431.163646][ T6163] EXT4-fs (loop7): orphan cleanup on readonly fs [ 431.171633][ T6163] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.15735: bad orphan inode 13 [ 431.184174][ T6163] ext4_test_bit(bit=12, block=18) = 1 [ 431.189810][ T6163] is_bad_inode(inode)=0 [ 431.194080][ T6163] NEXT_ORPHAN(inode)=2130706432 [ 431.199069][ T6163] max_ino=32 [ 431.202297][ T6163] i_nlink=1 [ 431.206654][ T6163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.224442][ T6163] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 431.237492][ T6163] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 431.239940][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15738'. [ 431.272131][T30436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.312058][ T6175] netlink: 'syz.5.15741': attribute type 1 has an invalid length. [ 431.492683][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15750'. [ 431.502662][ T6202] IPVS: Error joining to the multicast group [ 431.549906][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15763'. [ 432.418136][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15764'. [ 432.429124][ T6235] netlink: 'syz.1.15765': attribute type 1 has an invalid length. [ 432.493919][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 432.493937][ T29] audit: type=1326 audit(2000000070.414:20575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.15766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.543776][ T29] audit: type=1326 audit(2000000070.454:20576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.15766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.568215][ T29] audit: type=1326 audit(2000000070.454:20577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.15766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.592153][ T29] audit: type=1326 audit(2000000070.454:20578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.15766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.616278][ T29] audit: type=1326 audit(2000000070.454:20579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.15766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.640792][ T29] audit: type=1326 audit(2000000070.464:20580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.15766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.664386][ T29] audit: type=1326 audit(2000000070.464:20581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.15766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.688814][ T29] audit: type=1326 audit(2000000070.464:20582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.9.15766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.713435][ T29] audit: type=1326 audit(2000000070.464:20583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.7.15767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x0 [ 432.737425][ T29] audit: type=1326 audit(2000000070.614:20584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.9.15780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce81b7e929 code=0x7ffc0000 [ 432.793068][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.802789][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.885083][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15795'. [ 434.406343][ T6346] lo speed is unknown, defaulting to 1000 [ 434.442951][ T6350] netlink: 3 bytes leftover after parsing attributes in process `syz.9.15807'. [ 434.467940][ T6350] 0X: renamed from caif0 [ 434.482517][ T6350] 0X: entered allmulticast mode [ 434.488490][ T6350] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 434.672153][ T6368] netlink: 'syz.1.15817': attribute type 1 has an invalid length. [ 434.740542][ T6372] netlink: 'syz.0.15819': attribute type 10 has an invalid length. [ 434.756195][ T6372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.764149][ T6372] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 434.775373][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.783302][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.803528][ T6372] bond0: (slave batadv0): Releasing backup interface [ 434.890748][ T6382] sd 0:0:1:0: device reset [ 435.226729][ T6414] sd 0:0:1:0: device reset [ 435.573876][ T6423] hub 9-0:1.0: USB hub found [ 435.583943][ T6423] hub 9-0:1.0: 8 ports detected [ 435.688849][ T6437] Cannot find del_set index 0 as target [ 436.552097][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15875'. [ 436.765021][ T6522] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 436.790366][ T6525] netlink: 340 bytes leftover after parsing attributes in process `syz.9.15888'. [ 437.274625][ T6586] SET target dimension over the limit! [ 437.447116][ T6602] serio: Serial port ptm0 [ 437.502959][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 437.502978][ T29] audit: type=1400 audit(2000000075.424:20750): avc: denied { setcheckreqprot } for pid=6612 comm="syz.9.15923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 437.551437][ T6616] Cannot find del_set index 0 as target [ 437.579573][ T29] audit: type=1400 audit(2000000075.504:20751): avc: denied { mount } for pid=6619 comm="syz.9.15926" name="/" dev="autofs" ino=125732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 437.602575][ T29] audit: type=1400 audit(2000000075.504:20752): avc: denied { create } for pid=6621 comm="syz.5.15927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.622861][ T29] audit: type=1400 audit(2000000075.504:20753): avc: denied { setopt } for pid=6621 comm="syz.5.15927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.642833][ T29] audit: type=1400 audit(2000000075.504:20754): avc: denied { create } for pid=6621 comm="syz.5.15927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.663713][ T29] audit: type=1400 audit(2000000075.514:20755): avc: denied { read } for pid=6621 comm="syz.5.15927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.700363][ T29] audit: type=1326 audit(2000000075.624:20756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.7.15938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 437.724241][ T29] audit: type=1326 audit(2000000075.624:20757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.7.15938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 437.748609][ T29] audit: type=1326 audit(2000000075.624:20758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.7.15938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 437.772311][ T29] audit: type=1326 audit(2000000075.624:20759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.7.15938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54afb2e929 code=0x7ffc0000 [ 437.804809][ T6631] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 437.838143][ T6633] loop7: detected capacity change from 0 to 256 [ 437.845220][ T6633] FAT-fs (loop7): bogus number of FAT sectors [ 437.851461][ T6633] FAT-fs (loop7): Can't find a valid FAT filesystem [ 437.950006][ T6644] serio: Serial port ptm1 [ 438.023358][ T6652] program syz.0.15940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.353748][ T6667] Cannot find del_set index 0 as target [ 438.843282][ T6693] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 439.005116][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15968'. [ 439.175222][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15977'. [ 439.185307][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15977'. [ 439.484665][ T6772] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 439.484665][ T6772] C<+ [ 439.640459][ T6785] loop7: detected capacity change from 0 to 8192 [ 440.694701][ T6866] xt_TCPMSS: Only works on TCP SYN packets [ 440.930272][ T6954] netlink: 'syz.7.16049': attribute type 4 has an invalid length. [ 440.997567][ T6964] netlink: 68 bytes leftover after parsing attributes in process `syz.9.16055'. [ 441.026962][ T6967] netem: incorrect gi model size [ 441.032092][ T6967] netem: change failed [ 441.177980][ T6997] sd 0:0:1:0: device reset [ 441.211475][ T7004] rdma_op ffff88816803dd80 conn xmit_rdma 0000000000000000 [ 441.328514][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16084'. [ 441.403761][ T7035] netlink: 'syz.7.16089': attribute type 39 has an invalid length. [ 441.412012][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16089'. [ 441.435077][ T7035] bridge1: entered promiscuous mode [ 441.440602][ T7035] bridge1: entered allmulticast mode [ 441.447118][ T7036] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 441.547094][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16099'. [ 441.567830][ T7057] IPVS: Error joining to the multicast group [ 442.426865][ T7152] lo speed is unknown, defaulting to 1000 [ 442.486561][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16153'. [ 442.525022][ T7195] bond3: entered promiscuous mode [ 442.530174][ T7195] bond3: entered allmulticast mode [ 442.576690][ T7195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.593369][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 442.593389][ T29] audit: type=1400 audit(2000000080.514:21009): avc: denied { create } for pid=7203 comm="syz.0.16158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 442.625744][ T29] audit: type=1400 audit(2000000080.524:21010): avc: denied { setopt } for pid=7203 comm="syz.0.16158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 442.645479][ T29] audit: type=1400 audit(2000000080.524:21011): avc: denied { write } for pid=7203 comm="syz.0.16158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 442.667707][ T29] audit: type=1400 audit(2000000080.564:21012): avc: denied { name_connect } for pid=7206 comm="syz.1.16159" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 442.711761][ T29] audit: type=1400 audit(2000000080.634:21013): avc: denied { read } for pid=7213 comm="syz.1.16161" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 442.734999][ T29] audit: type=1400 audit(2000000080.634:21014): avc: denied { open } for pid=7213 comm="syz.1.16161" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 442.758718][ T29] audit: type=1400 audit(2000000080.634:21015): avc: denied { ioctl } for pid=7213 comm="syz.1.16161" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 442.767044][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 442.848566][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.855881][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.863412][ T7152] bridge_slave_0: entered allmulticast mode [ 442.871076][ T7152] bridge_slave_0: entered promiscuous mode [ 442.878510][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.885731][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.893322][ T7152] bridge_slave_1: entered allmulticast mode [ 442.901122][ T7152] bridge_slave_1: entered promiscuous mode [ 442.933446][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.947303][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.988231][ T7152] team0: Port device team_slave_0 added [ 442.999694][ T7152] team0: Port device team_slave_1 added [ 443.050047][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.057107][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.083841][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.142458][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.149536][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.176332][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.218606][ T7205] lo speed is unknown, defaulting to 1000 [ 443.242922][ T7152] hsr_slave_0: entered promiscuous mode [ 443.252675][ T7152] hsr_slave_1: entered promiscuous mode [ 443.260988][ T7152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.273659][ T7152] Cannot create hsr debugfs directory [ 443.389359][ T29] audit: type=1400 audit(2000000081.314:21016): avc: denied { connect } for pid=7261 comm="syz.1.16177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 443.428633][ T7205] chnl_net:caif_netlink_parms(): no params data found [ 443.466026][ T29] audit: type=1400 audit(2000000081.384:21017): avc: denied { execmod } for pid=7266 comm="syz.0.16178" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=127668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 443.542136][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.549336][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.562530][ T7205] bridge_slave_0: entered allmulticast mode [ 443.583372][ T7205] bridge_slave_0: entered promiscuous mode [ 443.594602][ T7277] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 443.606205][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.606935][ T29] audit: type=1400 audit(2000000081.514:21018): avc: denied { relabelfrom } for pid=7276 comm="syz.0.16182" name="" dev="pipefs" ino=128024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 443.613335][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.645566][ T7279] 9pnet: p9_errstr2errno: server reported unknown error @hQIte} [ 443.653276][ T7205] bridge_slave_1: entered allmulticast mode [ 443.673685][ T7205] bridge_slave_1: entered promiscuous mode [ 443.721414][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.781163][ T7152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 443.807922][ T7152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 443.819008][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.828454][ T7152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 443.886364][ T7152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 443.897184][ T7205] team0: Port device team_slave_0 added [ 443.907716][ T7205] team0: Port device team_slave_1 added [ 444.120675][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.127810][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.154742][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.193390][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.200569][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.227465][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.272454][ T7205] hsr_slave_0: entered promiscuous mode [ 444.278846][ T7205] hsr_slave_1: entered promiscuous mode [ 444.285028][ T7205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.308025][ T7205] Cannot create hsr debugfs directory [ 444.328703][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.390580][ T7152] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.415313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.422603][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.470211][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.477349][ T4847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.627576][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.639838][ T7345] 9pnet: p9_errstr2errno: server reported unknown error @hQIte} [ 444.717945][ T7205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.735148][ T7205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.749022][ T7205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.768238][ T7205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.827600][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.843081][ T7205] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.857462][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.864674][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.878171][ T7152] veth0_vlan: entered promiscuous mode [ 444.888759][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.895982][ T4847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.911280][ T7152] veth1_vlan: entered promiscuous mode [ 444.967553][ T7152] veth0_macvtap: entered promiscuous mode [ 444.977994][ T7152] veth1_macvtap: entered promiscuous mode [ 445.027033][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.062718][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.086831][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.102887][ T7152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.111795][ T7152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.120680][ T7152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.130119][ T7152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.244618][ T7205] veth0_vlan: entered promiscuous mode [ 445.260244][ T7205] veth1_vlan: entered promiscuous mode [ 445.278733][ T7205] veth0_macvtap: entered promiscuous mode [ 445.286957][ T7205] veth1_macvtap: entered promiscuous mode [ 445.303322][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.331946][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.342660][ T7205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.351488][ T7205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.360261][ T7205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.369917][ T7205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.606863][ T7435] netem: incorrect gi model size [ 445.611935][ T7435] netem: change failed [ 445.814674][ T7135] kernel write not supported for file [eventfd] (pid: 7135 comm: kworker/1:8) [ 446.270860][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16263'. [ 446.351049][ T7494] netlink: 'syz.0.16257': attribute type 13 has an invalid length. [ 446.370418][ T7494] gretap0: refused to change device tx_queue_len [ 446.376872][ T7494] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 446.592383][ T7514] pimreg: entered allmulticast mode [ 446.615098][ T7514] pimreg: left allmulticast mode [ 446.762158][ T7534] netlink: 240 bytes leftover after parsing attributes in process `syz.4.16270'. [ 447.127367][ T7563] vhci_hcd: invalid port number 96 [ 447.132553][ T7563] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 447.436647][ T7590] netlink: 'syz.0.16302': attribute type 4 has an invalid length. [ 447.496824][ T7596] rdma_op ffff88811e43d580 conn xmit_rdma 0000000000000000 [ 447.621124][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16312'. [ 447.746034][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 447.746055][ T29] audit: type=1404 audit(2000000085.664:21125): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 447.768178][ T29] audit: type=1404 audit(2000000085.664:21126): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 447.783921][ T29] audit: type=1400 audit(2000000085.694:21127): avc: denied { map_create } for pid=7619 comm="syz.2.16316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 447.804153][ T29] audit: type=1400 audit(2000000085.694:21128): avc: denied { bpf } for pid=7619 comm="syz.2.16316" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 447.825031][ T29] audit: type=1400 audit(2000000085.694:21129): avc: denied { map_read map_write } for pid=7619 comm="syz.2.16316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 447.849495][ T29] audit: type=1400 audit(2000000085.774:21130): avc: denied { prog_load } for pid=7619 comm="syz.2.16316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 447.868911][ T29] audit: type=1400 audit(2000000085.774:21131): avc: denied { perfmon } for pid=7619 comm="syz.2.16316" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 447.890735][ T29] audit: type=1400 audit(2000000085.774:21132): avc: denied { prog_run } for pid=7619 comm="syz.2.16316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 447.981910][ T29] audit: type=1400 audit(2000000085.904:21133): avc: denied { read write } for pid=7205 comm="syz-executor" name="loop2" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.005432][ T29] audit: type=1400 audit(2000000085.904:21134): avc: denied { open } for pid=7205 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.292782][ T7653] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 448.886092][ T23] IPVS: starting estimator thread 0... [ 449.003240][ T7722] IPVS: using max 2352 ests per chain, 117600 per kthread [ 449.370167][ T7762] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 449.370167][ T7762] C<+ [ 449.492716][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.500251][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.507758][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.524582][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.532118][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.539722][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.547194][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.554650][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.562126][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.569642][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.577070][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.584556][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.592116][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.599587][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.607359][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.614786][ T23] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 449.661340][ T23] hid-generic 0006:0000:0000.000E: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 449.717285][ T7785] SELinux: syz.1.16390 (7785) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 449.934015][ T7820] 9pnet_fd: Insufficient options for proto=fd [ 449.970814][ T7826] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 450.528306][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16436'. [ 450.540047][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16436'. [ 450.550543][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16435'. [ 450.570322][ T7884] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.579449][ T7884] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.588268][ T7884] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.597811][ T7884] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.609867][ T7884] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.619037][ T7884] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.628084][ T7884] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.637029][ T7884] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.663117][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16438'. [ 450.811484][ T7909] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16448'. [ 450.820971][ T7909] netlink: 108 bytes leftover after parsing attributes in process `syz.9.16448'. [ 451.316890][ T7991] xt_hashlimit: max too large, truncated to 1048576 [ 451.373598][ T7999] netem: incorrect gi model size [ 451.378659][ T7999] netem: change failed [ 451.801788][ T6896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.812322][ T6896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.870977][ T6896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.881460][ T6896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.918899][ T8058] __nla_validate_parse: 9 callbacks suppressed [ 451.918917][ T8058] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 451.949594][ T6896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.960074][ T6896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.020409][ T6896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.030881][ T6896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.091462][ T8065] lo speed is unknown, defaulting to 1000 [ 452.170878][ T8059] lo speed is unknown, defaulting to 1000 [ 452.176992][ T6896] bridge_slave_1: left allmulticast mode [ 452.182789][ T6896] bridge_slave_1: left promiscuous mode [ 452.188618][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.228228][ T6896] bridge_slave_0: left allmulticast mode [ 452.234058][ T6896] bridge_slave_0: left promiscuous mode [ 452.239837][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.534081][ T6896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.548848][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.569221][ T6896] bond0 (unregistering): Released all slaves [ 452.580047][ T6896] bond1 (unregistering): Released all slaves [ 452.590585][ T6896] bond2 (unregistering): Released all slaves [ 452.739968][ T6896] hsr_slave_0: left promiscuous mode [ 452.754174][ T6896] hsr_slave_1: left promiscuous mode [ 452.760777][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 452.760792][ T29] audit: type=1400 audit(2000000090.684:21426): avc: denied { create } for pid=8128 comm="syz.4.16543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 452.789019][ T6896] veth1_macvtap: left promiscuous mode [ 452.790587][ T29] audit: type=1400 audit(2000000090.714:21427): avc: denied { sys_admin } for pid=8128 comm="syz.4.16543" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 452.794525][ T6896] veth0_macvtap: left promiscuous mode [ 452.823092][ T6896] veth1_vlan: left promiscuous mode [ 452.828806][ T6896] veth0_vlan: left promiscuous mode [ 452.859220][ T29] audit: type=1326 audit(2000000090.784:21428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.0.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 452.897088][ T29] audit: type=1326 audit(2000000090.784:21429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.0.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 452.921891][ T29] audit: type=1326 audit(2000000090.804:21430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.0.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 452.946151][ T29] audit: type=1326 audit(2000000090.804:21431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.0.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 452.971056][ T29] audit: type=1326 audit(2000000090.814:21432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.0.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 452.995569][ T29] audit: type=1326 audit(2000000090.814:21433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.0.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 453.019754][ T29] audit: type=1326 audit(2000000090.814:21434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.0.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 453.044211][ T29] audit: type=1326 audit(2000000090.814:21435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.0.16546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235c2fe929 code=0x7ffc0000 [ 453.088754][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 453.099077][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 453.157267][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 453.189361][ T8130] lo speed is unknown, defaulting to 1000 [ 453.214086][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.221439][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.228842][ T8059] bridge_slave_0: entered allmulticast mode [ 453.235909][ T8059] bridge_slave_0: entered promiscuous mode [ 453.247017][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.254152][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.261527][ T8059] bridge_slave_1: entered allmulticast mode [ 453.268258][ T8059] bridge_slave_1: entered promiscuous mode [ 453.302409][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.319855][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.382965][ T8059] team0: Port device team_slave_0 added [ 453.399380][ T8059] team0: Port device team_slave_1 added [ 453.435104][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.442201][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.468352][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.488452][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.495508][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.521675][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.601917][ T8059] hsr_slave_0: entered promiscuous mode [ 453.613556][ T8059] hsr_slave_1: entered promiscuous mode [ 453.638150][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.648325][ T8163] random: crng reseeded on system resumption [ 453.667433][ T8059] Cannot create hsr debugfs directory [ 453.754785][ T8170] netlink: 'syz.4.16559': attribute type 3 has an invalid length. [ 453.829623][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16555'. [ 453.838685][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16555'. [ 453.852955][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16555'. [ 454.025445][ T8059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 454.051497][ T8059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.069238][ T8059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.093996][ T8059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.119479][ T8211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.128058][ T8211] bridge0: port 3(bond1) entered blocking state [ 454.134389][ T8211] bridge0: port 3(bond1) entered disabled state [ 454.153256][ T8211] bond1: entered allmulticast mode [ 454.178700][ T8211] bond1: entered promiscuous mode [ 454.193727][ T8211] bridge0: port 3(bond1) entered blocking state [ 454.200166][ T8211] bridge0: port 3(bond1) entered forwarding state [ 454.252534][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.259676][ T8059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.267160][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.274240][ T8059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.305483][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.326581][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.342935][ T6879] bridge0: port 3(bond1) entered disabled state [ 454.392356][ T8233] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 454.418351][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.450043][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.462400][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.469567][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.484641][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.491840][ T6879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.648452][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.731358][ T8261] ip6gre1: entered allmulticast mode [ 454.835109][ T8266] SELinux: failed to load policy [ 454.861740][ T8059] veth0_vlan: entered promiscuous mode [ 454.877564][ T8059] veth1_vlan: entered promiscuous mode [ 454.918772][ T8059] veth0_macvtap: entered promiscuous mode [ 454.937465][ T8059] veth1_macvtap: entered promiscuous mode [ 454.960938][ T8275] SELinux: ebitmap: truncated map [ 454.970322][ T8275] SELinux: failed to load policy [ 454.972077][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.026672][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.042641][ T8059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.051554][ T8059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.060498][ T8059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.069314][ T8059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.276180][ T8320] netlink: 'syz.4.16608': attribute type 1 has an invalid length. [ 455.288548][ T7135] kernel write not supported for file [eventfd] (pid: 7135 comm: kworker/1:8) [ 455.325527][ T8320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.341677][ T8320] bond1: (slave bond2): making interface the new active one [ 455.349924][ T8320] bond1: (slave bond2): Enslaving as an active interface with an up link [ 455.409228][ T8333] bridge0: port 3(syz_tun) entered blocking state [ 455.409329][ T8327] ================================================================== [ 455.415931][ T8333] bridge0: port 3(syz_tun) entered disabled state [ 455.423816][ T8327] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 455.437191][ T8327] [ 455.439529][ T8327] write to 0xffffffff8686c1c8 of 8 bytes by task 8333 on cpu 0: [ 455.447189][ T8327] data_alloc+0x271/0x2b0 [ 455.451556][ T8327] prb_reserve+0x808/0xaf0 [ 455.456014][ T8327] vprintk_store+0x56d/0x860 [ 455.460624][ T8327] vprintk_emit+0x178/0x650 [ 455.465156][ T8327] vprintk_default+0x26/0x30 [ 455.469770][ T8327] vprintk+0x1d/0x30 [ 455.473698][ T8327] _printk+0x79/0xa0 [ 455.477629][ T8327] br_set_state+0x28c/0x390 [ 455.482156][ T8327] br_init_port+0x5c/0xf0 [ 455.486517][ T8327] new_nbp+0x22b/0x300 [ 455.490619][ T8327] br_add_if+0x1e7/0xa60 [ 455.494899][ T8327] br_ioctl_stub+0x521/0x860 [ 455.499507][ T8327] sock_ioctl+0x39c/0x610 [ 455.503864][ T8327] __se_sys_ioctl+0xce/0x140 [ 455.508494][ T8327] __x64_sys_ioctl+0x43/0x50 [ 455.513115][ T8327] x64_sys_call+0x19a8/0x2fb0 [ 455.517818][ T8327] do_syscall_64+0xd2/0x200 [ 455.522352][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.528290][ T8327] [ 455.530627][ T8327] read to 0xffffffff8686c1c8 of 16 bytes by task 8327 on cpu 1: [ 455.538277][ T8327] _prb_read_valid+0x1bc/0x920 [ 455.543078][ T8327] prb_read_valid+0x3c/0x60 [ 455.547616][ T8327] console_unlock+0x164/0x330 [ 455.552321][ T8327] do_con_write+0x28d7/0x2940 [ 455.557027][ T8327] con_put_char+0x38/0x60 [ 455.561378][ T8327] tty_put_char+0x68/0xc0 [ 455.565730][ T8327] do_output_char+0x4de/0x500 [ 455.570434][ T8327] n_tty_write+0x85b/0xb10 [ 455.574885][ T8327] file_tty_write+0x38c/0x670 [ 455.579611][ T8327] tty_write+0x25/0x30 [ 455.583727][ T8327] vfs_write+0x49d/0x8e0 [ 455.588688][ T8327] ksys_write+0xda/0x1a0 [ 455.592949][ T8327] __x64_sys_write+0x40/0x50 [ 455.597559][ T8327] x64_sys_call+0x2cdd/0x2fb0 [ 455.602310][ T8327] do_syscall_64+0xd2/0x200 [ 455.606841][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.612764][ T8327] [ 455.615113][ T8327] Reported by Kernel Concurrency Sanitizer on: [ 455.621282][ T8327] CPU: 1 UID: 0 PID: 8327 Comm: syz.3.16610 Tainted: G W 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 455.635404][ T8327] Tainted: [W]=WARN [ 455.639225][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.649391][ T8327] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.658009][ T8333] syz_tun: entered allmulticast mode [ 455.663930][ T8333] syz_tun: entered promiscuous mode [ 455.697814][ T8333] bridge0: port 3(syz_tun) entered blocking state [ 455.704508][ T8333] bridge0: port 3(syz_tun) entered forwarding state [ 455.723506][ T8336] syz_tun: left allmulticast mode [ 455.728747][ T8336] syz_tun: left promiscuous mode [ 455.733944][ T8336] bridge0: port 3(syz_tun) entered disabled state [ 455.881646][ T8336] bridge_slave_0: left allmulticast mode [ 455.887418][ T8336] bridge_slave_0: left promiscuous mode [ 455.893169][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.967564][ T8336] bridge_slave_1: left allmulticast mode [ 455.973323][ T8336] bridge_slave_1: left promiscuous mode [ 455.979194][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.010664][ T8336] bond0: (slave bond_slave_0): Releasing backup interface [ 456.021923][ T8336] bond0: (slave bond_slave_1): Releasing backup interface [ 456.047737][ T8336] team0: Port device team_slave_0 removed [ 456.069161][ T8336] team0: Port device team_slave_1 removed [ 456.219462][ T8024] syz_tun (unregistering): left allmulticast mode [ 456.570153][ T12] dummy0: left allmulticast mode [ 456.575208][ T12] bridge0: port 3(dummy0) entered disabled state [ 456.583055][ T12] bridge_slave_1: left allmulticast mode [ 456.588913][ T12] bridge_slave_1: left promiscuous mode [ 456.594752][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.602725][ T12] bridge_slave_0: left allmulticast mode [ 456.609215][ T12] bridge_slave_0: left promiscuous mode [ 456.614898][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.768082][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.778088][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.788087][ T12] bond0 (unregistering): Released all slaves [ 456.796695][ T12] bond1 (unregistering): Released all slaves [ 456.804906][ T12] bond2 (unregistering): Released all slaves [ 456.813313][ T12] bond3 (unregistering): Released all slaves [ 456.822542][ T12] bond4 (unregistering): Released all slaves [ 456.831326][ T12] bond5 (unregistering): Released all slaves [ 456.895447][ T12] hsr_slave_0: left promiscuous mode [ 456.901500][ T12] hsr_slave_1: left promiscuous mode [ 456.927922][ T12] team0 (unregistering): Port device team_slave_1 removed [ 456.938457][ T12] team0 (unregistering): Port device team_slave_0 removed [ 457.218826][ T12] IPVS: stop unused estimator thread 0... [ 457.270710][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.281125][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.338672][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.349039][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.428514][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.438883][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.468519][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.478950][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.551876][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.599479][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.648551][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.699389][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.762860][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.798284][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.848531][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.888380][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.960376][ T12] bond1: left allmulticast mode [ 457.965279][ T12] bond1: left promiscuous mode [ 457.970252][ T12] bridge0: port 3(bond1) entered disabled state [ 457.977322][ T12] bridge_slave_1: left allmulticast mode [ 457.983016][ T12] bridge_slave_1: left promiscuous mode [ 457.989630][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.997809][ T12] bridge_slave_0: left allmulticast mode [ 458.003553][ T12] bridge_slave_0: left promiscuous mode [ 458.009311][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.017834][ T12] bridge_slave_1: left allmulticast mode [ 458.023499][ T12] bridge_slave_1: left promiscuous mode [ 458.029255][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.037172][ T12] bridge_slave_0: left allmulticast mode [ 458.042873][ T12] bridge_slave_0: left promiscuous mode [ 458.049199][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.198524][ T12] bond0 (unregistering): Released all slaves [ 458.207264][ T12] bond1 (unregistering): Released all slaves [ 458.215687][ T12] bond2 (unregistering): Released all slaves [ 458.224417][ T12] bond3 (unregistering): Released all slaves [ 458.269139][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.279222][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.289549][ T12] bond0 (unregistering): Released all slaves [ 458.298517][ T12] bond1 (unregistering): Released all slaves [ 458.378772][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.388755][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.398552][ T12] bond0 (unregistering): Released all slaves [ 458.407746][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 458.416468][ T12] bond1 (unregistering): Released all slaves [ 458.425259][ T12] bond2 (unregistering): Released all slaves [ 458.520066][ T12] hsr_slave_0: left promiscuous mode [ 458.526580][ T12] hsr_slave_1: left promiscuous mode [ 458.534506][ T12] hsr_slave_0: left promiscuous mode [ 458.540519][ T12] hsr_slave_1: left promiscuous mode [ 458.546510][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.553983][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.562266][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.569895][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.580110][ T12] hsr_slave_0: left promiscuous mode [ 458.586673][ T12] hsr_slave_1: left promiscuous mode [ 458.592360][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.599884][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.607483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.614984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.633363][ T12] veth0_macvtap: left promiscuous mode [ 458.639085][ T12] veth1_vlan: left promiscuous mode [ 458.644478][ T12] veth0_vlan: left promiscuous mode [ 458.650408][ T12] veth1_macvtap: left promiscuous mode [ 458.656193][ T12] veth0_macvtap: left promiscuous mode [ 458.661925][ T12] veth1_vlan: left promiscuous mode [ 458.667297][ T12] veth0_vlan: left promiscuous mode [ 458.673184][ T12] veth1_macvtap: left promiscuous mode [ 458.679236][ T12] veth0_macvtap: left promiscuous mode [ 458.684849][ T12] veth1_vlan: left promiscuous mode [ 458.690159][ T12] veth0_vlan: left promiscuous mode [ 458.877940][ T12] team0 (unregistering): Port device team_slave_1 removed [ 458.888708][ T12] team0 (unregistering): Port device team_slave_0 removed [ 458.945577][ T12] team0 (unregistering): Port device team_slave_1 removed [ 458.956430][ T12] team0 (unregistering): Port device team_slave_0 removed [ 459.582529][ T12] IPVS: stop unused estimator thread 0... [ 459.629762][ T6879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.668976][ T6879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.718470][ T6879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.758683][ T6879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.810388][ T6879] bridge_slave_1: left allmulticast mode [ 459.816205][ T6879] bridge_slave_1: left promiscuous mode [ 459.821947][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.829769][ T6879] bridge_slave_0: left allmulticast mode [ 459.835426][ T6879] bridge_slave_0: left promiscuous mode [ 459.841148][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.928829][ T6879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.939110][ T6879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.949008][ T6879] bond0 (unregistering): Released all slaves [ 460.005174][ T6879] hsr_slave_0: left promiscuous mode [ 460.011011][ T6879] hsr_slave_1: left promiscuous mode [ 460.017776][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.025333][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.034306][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.041820][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.052240][ T6879] veth1_macvtap: left promiscuous mode [ 460.057823][ T6879] veth0_macvtap: left promiscuous mode [ 460.063352][ T6879] veth1_vlan: left promiscuous mode [ 460.068719][ T6879] veth0_vlan: left promiscuous mode [ 460.133198][ T6879] team0 (unregistering): Port device team_slave_1 removed [ 460.143886][ T6879] team0 (unregistering): Port device team_slave_0 removed [ 464.100347][ T6879] bridge_slave_1: left promiscuous mode [ 464.106235][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.114122][ T6879] bridge_slave_0: left allmulticast mode [ 464.119892][ T6879] bridge_slave_0: left promiscuous mode [ 464.125573][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.217911][ T6879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.227797][ T6879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.237539][ T6879] bond0 (unregistering): Released all slaves [ 464.276808][ T6879] tipc: Left network mode [ 464.298741][ T6879] hsr_slave_0: left promiscuous mode [ 464.304545][ T6879] hsr_slave_1: left promiscuous mode [ 464.310229][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.317854][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.325287][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.335255][ T6879] veth1_macvtap: left promiscuous mode [ 464.341964][ T6879] veth0_macvtap: left promiscuous mode [ 464.347788][ T6879] veth1_vlan: left promiscuous mode [ 464.353081][ T6879] veth0_vlan: left promiscuous mode [ 464.414893][ T6879] team0 (unregistering): Port device team_slave_1 removed [ 464.425027][ T6879] team0 (unregistering): Port device team_slave_0 removed [ 464.768254][ T6879] IPVS: stop unused estimator thread 0...