last executing test programs: 12m40.186643305s ago: executing program 32 (id=1439): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) 11m25.243680349s ago: executing program 33 (id=4807): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x3, 0x2, 0x2, 0x5, 0x3}}, {0x4}}]}]}, 0x58}}, 0x0) 11m23.957011535s ago: executing program 34 (id=4842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff05f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) set_robust_list(&(0x7f0000001500)={0x0, 0x9}, 0x18) 10m45.385603s ago: executing program 35 (id=6413): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r0, 0x8) 10m41.601403444s ago: executing program 36 (id=6483): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 10m14.908033086s ago: executing program 37 (id=6949): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x2}, &(0x7f0000000180)=0x2, 0x0, 0x0, 0x0, 0xea5e, 0x7f, 0x35, 0x9}}], 0x58}, 0x0) 10m1.535132472s ago: executing program 38 (id=7529): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9m47.83779968s ago: executing program 39 (id=7943): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 9m28.581036405s ago: executing program 40 (id=8452): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m10.057071538s ago: executing program 41 (id=8891): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42002, 0x151) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x0, 0x4, r0, 0x0, 0x0, 0x6, 0x0, 0x0, r0}]) 8m35.816973828s ago: executing program 42 (id=10341): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$eJzs28tvG0UYAPBv7aRt+iChKo+mBQIFEfFImrSUHriAQOIAEhIcyjHkUYW6DWqCRKsIAkLliCpxRxyR+As4wQUBJySucEeVKpRLCyejtXcT27HzqlOH+veTtp3ZHWvm8+5nz+7EAXStofSfJOJgRPwREf3Van2Doep/t5cXJ/9ZXpxMolx++++k0u7W8uJk3jR/3YG80hNR+DyJY036nb9y9cJEqTR9OauPLlz8YHT+ytXnZy9OnJ8+P31p/OzZ06fGXjwz/sKm4ujZ4Hga163Bj+eOH3393etvTp67/t4v3yV5/A1xtMnQegefKpcrb1LS5k475VBNOdnoZLBrFLPc6a3kf38UazKpP177rKODA3ZUuVwuP9j68FIZuIcl0ekRAJ2Rf9Gn97/51nI2sK/t04+Ou/ly9QYojft2tlWP9EQha9PbcH/bTkMRcW7p36/TLXbmOQQAQJ0f0vnPc83mf4WofS50X7aGMhAR90fE4Yg4ExFHIuKBiErbhyLi4S3237hIsnb+U7ixrcA2KZ3/vZStbdXP//LZXwwUs9qhSvy9ycxsafpk9p4MR+/etD62Th8/vvr7l62O1c7/0i3tP58LZuO40bO3/jVTEwsTdxJzrZufRgz2NIs/WVkJSCLiaEQMbrOP2We+Pd7q2Mbxr6MN60zlbyKerp7/pWiIP5esvz45ui9K0ydH86tirV9/u/ZWq/7vKP42SM///qbX/0r8A0nteu381vu49ucXLe9ptnv970neqdv30cTCwuWxiD3JG9VB1+4fb2g3vto+jX/4RPP8Pxyr78SxiEgv4kci4tGIeCwb++MR8UREnFgn/p9fefL97ce/s9L4p7Z0/lcLe6JxT/NC8cJP39d1OrCV+NPzf7pSGs72bObzbzPj2t7VDAAAAP8/hYg4GElhZKVcKIyMVP+G/0jsL5Tm5heenZn78NJU9TcCA9FbyJ909dc8Dx3Lbuvz+nhD/VT23PirYl+lPjI5V5rqdPDQ5Q60yP/UX8VOjw7YcX6vBd1L/kP3kv/QveQ/dK8m+d/XiXEAd1+z7/9POjAO4O5ryH/LftBF3P9D95L/0L3kP3Sl+b7Y+EfyCgprClHYFcPICzO7Yxj3TqHTn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5dn5s8=") r0 = open(&(0x7f0000000000)='./file2\x00', 0x147842, 0x1ef) preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 8m35.352233064s ago: executing program 43 (id=10359): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 8m23.476635102s ago: executing program 44 (id=10287): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 6m57.086160874s ago: executing program 45 (id=14300): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0xe8, 0x8}, 0x100882, 0x6, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xfffbffec, 0x294, 0x40, 0x3e5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0x10000000d, 0x1c8, 0xe2, 0x1, 0x3}]}, 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc0042, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 6m0.304770952s ago: executing program 46 (id=16710): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x2) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) 4m26.313492442s ago: executing program 47 (id=21236): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_RMID(r0, 0x0) 3m34.579530593s ago: executing program 48 (id=22803): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 2m25.337286877s ago: executing program 49 (id=25985): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="e0ec02000000", 0x6}]) eventfd(0x8000) 2m24.289638721s ago: executing program 50 (id=25989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb01a25d6de4020833e95169"], 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1m36.948412419s ago: executing program 1 (id=27756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7098}, 0x18) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 1m36.897096545s ago: executing program 1 (id=27757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m36.849166609s ago: executing program 1 (id=27760): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 1m36.848511009s ago: executing program 1 (id=27762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xe8f2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000c0c0) 1m36.84204421s ago: executing program 1 (id=27763): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 1m36.812531363s ago: executing program 1 (id=27765): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 1m24.392208395s ago: executing program 6 (id=28152): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m24.218943252s ago: executing program 6 (id=28156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 1m23.964769447s ago: executing program 6 (id=28173): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000005c0)=0x8) 1m23.032618309s ago: executing program 6 (id=28211): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 1m23.005217832s ago: executing program 6 (id=28213): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'batadv_slave_0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) 1m22.755943796s ago: executing program 6 (id=28221): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x1, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m22.718784s ago: executing program 51 (id=28221): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x1, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m22.51052696s ago: executing program 52 (id=27765): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 58.33073427s ago: executing program 9 (id=29323): r0 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 57.51204441s ago: executing program 9 (id=29348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 57.473514694s ago: executing program 9 (id=29350): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 57.41580189s ago: executing program 9 (id=29352): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 57.379674863s ago: executing program 9 (id=29353): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 57.151178246s ago: executing program 9 (id=29357): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 57.150795066s ago: executing program 53 (id=29357): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 51.652009297s ago: executing program 2 (id=29605): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385204080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 51.553811697s ago: executing program 2 (id=29612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x3769, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x3, 0x21e, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b80)=""/4124, 0x101c}], &(0x7f0000001b40)=[0x2000000000ba, 0x4], 0x1}, 0x20) 51.51612659s ago: executing program 2 (id=29616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x49}, 0x1, 0x0, 0x0, 0x4}, 0x0) 51.480495404s ago: executing program 2 (id=29619): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x20a8, 0x4005, 0x8000000b, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0xfffffffffffffc84, 0x0, 0x0, 0x0) 51.146994907s ago: executing program 2 (id=29630): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 51.076797064s ago: executing program 2 (id=29633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "7ae50e6f3343889c8af621e94df95d21"}, 0x20) 36.759091703s ago: executing program 54 (id=29633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "7ae50e6f3343889c8af621e94df95d21"}, 0x20) 35.229864544s ago: executing program 8 (id=30067): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 35.184934817s ago: executing program 8 (id=30069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 34.924567643s ago: executing program 8 (id=30085): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d6974"], 0x110}}, 0x0) 34.850853001s ago: executing program 8 (id=30087): socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x0, 0x0, 0xd7, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x5, 0x0}}}}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 34.823604363s ago: executing program 8 (id=30089): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2020f, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 34.778160698s ago: executing program 8 (id=30090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 20.319906391s ago: executing program 55 (id=30090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 1.037115978s ago: executing program 7 (id=31079): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 813.58087ms ago: executing program 7 (id=31096): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 747.911266ms ago: executing program 7 (id=31100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000100039"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4008040) 744.879547ms ago: executing program 3 (id=31102): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/61, 0x3d}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) 665.693094ms ago: executing program 3 (id=31105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 635.882567ms ago: executing program 7 (id=31108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) 551.209926ms ago: executing program 0 (id=31110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 509.04964ms ago: executing program 7 (id=31111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) 508.40767ms ago: executing program 0 (id=31113): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000002c0), 0x0, 0x0, 0x0) 500.599281ms ago: executing program 5 (id=31114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 487.684232ms ago: executing program 0 (id=31115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "fffffffff7ffffff", "6abc00000000000000000000001000", "f0630400", "2ad89f00"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="b9", 0xfffffffffffffca2, 0x8000, 0x0, 0x0) 453.051055ms ago: executing program 4 (id=31116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 452.507725ms ago: executing program 5 (id=31117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x3, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu<=0||!') 449.349916ms ago: executing program 0 (id=31118): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000228bd08000000000000000000080001007063690011000200"], 0x60}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20044014) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 425.434938ms ago: executing program 4 (id=31119): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 401.342571ms ago: executing program 0 (id=31120): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 400.797571ms ago: executing program 3 (id=31121): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 351.492225ms ago: executing program 7 (id=31122): r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x10a}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) listen(r1, 0x3) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) close_range(r0, r0, 0x0) 351.042256ms ago: executing program 5 (id=31123): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) 350.663145ms ago: executing program 4 (id=31124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) ioprio_get$pid(0x2, 0x0) 347.669775ms ago: executing program 3 (id=31125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x47a, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) 256.758305ms ago: executing program 0 (id=31126): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 93.938901ms ago: executing program 5 (id=31127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r1, 0x407, 0x6) 77.556433ms ago: executing program 4 (id=31128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 76.841953ms ago: executing program 3 (id=31129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = io_uring_setup(0x241a, &(0x7f0000000740)={0x0, 0x8813, 0x1, 0x1, 0x20b}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) fstatfs(r2, &(0x7f0000000000)=""/45) 50.569515ms ago: executing program 5 (id=31130): r0 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16) close(r0) 50.113225ms ago: executing program 4 (id=31131): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21.457308ms ago: executing program 5 (id=31132): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 15.449179ms ago: executing program 3 (id=31133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r3, 0x909, 0x70bd25, 0x0, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 0s ago: executing program 4 (id=31134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): p7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 746.892284][ T3342] loop6: detected capacity change from 0 to 1024 [ 746.940989][ T3342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.047735][ T3357] IPv6: NLM_F_CREATE should be specified when creating new route [ 747.764529][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 747.770814][ T29] audit: type=1326 audit(775.010:32508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.28112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7303fd5e67 code=0x50000 [ 747.793651][ T29] audit: type=1326 audit(775.010:32509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.28112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7303f7b099 code=0x50000 [ 747.816389][ T29] audit: type=1326 audit(775.010:32510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.28112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7303f7b15f code=0x50000 [ 747.839123][ T29] audit: type=1326 audit(775.010:32511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.28112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7303fdefc9 code=0x50000 [ 747.902866][ T3397] netlink: 'syz.3.28117': attribute type 3 has an invalid length. [ 747.910761][ T3397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28117'. [ 747.958779][ T29] audit: type=1326 audit(775.220:32512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3403 comm="syz.3.28120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 747.991896][ T29] audit: type=1326 audit(775.220:32513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3403 comm="syz.3.28120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 748.015018][ T29] audit: type=1326 audit(775.220:32514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3403 comm="syz.3.28120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 748.038182][ T29] audit: type=1326 audit(775.220:32515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3403 comm="syz.3.28120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 748.061185][ T29] audit: type=1326 audit(775.220:32516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3403 comm="syz.3.28120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 748.084321][ T29] audit: type=1326 audit(775.220:32517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3403 comm="syz.3.28120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 748.136224][ T3416] netlink: 'syz.7.28124': attribute type 10 has an invalid length. [ 748.144753][ T3416] ipvlan0: entered allmulticast mode [ 748.150306][ T3416] veth0_vlan: entered allmulticast mode [ 748.195052][ T3422] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 748.339998][ T3440] netlink: 'syz.2.28135': attribute type 4 has an invalid length. [ 748.393415][ T3445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.28138'. [ 748.402411][ T3445] netlink: 348 bytes leftover after parsing attributes in process `syz.7.28138'. [ 748.411591][ T3445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.28138'. [ 748.420664][ T3445] netlink: 348 bytes leftover after parsing attributes in process `syz.7.28138'. [ 748.574653][ T3463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3463 comm=syz.7.28145 [ 748.699343][ T3467] SELinux: failed to load policy [ 748.731101][T27205] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.745102][ T3474] netlink: 'syz.2.28151': attribute type 10 has an invalid length. [ 748.767150][ T3474] ipvlan0: entered allmulticast mode [ 748.772518][ T3474] veth0_vlan: entered allmulticast mode [ 748.792162][ T3474] team0: Device ipvlan0 failed to register rx_handler [ 748.823416][ T3479] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3479 comm=syz.3.28154 [ 748.854888][ T3481] program syz.2.28155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 749.103381][ T3511] 9pnet_fd: Insufficient options for proto=fd [ 749.208816][ T3527] lo speed is unknown, defaulting to 1000 [ 749.620607][ T3560] netlink: 'syz.3.28191': attribute type 3 has an invalid length. [ 749.797842][ T3576] __nla_validate_parse: 3 callbacks suppressed [ 749.797863][ T3576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28200'. [ 749.813169][ T3576] netlink: 108 bytes leftover after parsing attributes in process `syz.3.28200'. [ 749.822651][ T3576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28200'. [ 749.832534][ T3576] netlink: 108 bytes leftover after parsing attributes in process `syz.3.28200'. [ 749.841802][ T3576] netlink: 84 bytes leftover after parsing attributes in process `syz.3.28200'. [ 749.864286][ T3574] No such timeout policy "syz0" [ 749.920006][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.28203'. [ 750.198163][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.28216'. [ 750.228101][ T3610] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 750.303309][ T3615] veth0: entered promiscuous mode [ 750.310132][ T3616] macvtap0: refused to change device tx_queue_len [ 750.316714][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28218'. [ 750.332568][ T3615] veth0 (unregistering): left promiscuous mode [ 750.584232][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 750.640897][ T3627] lo speed is unknown, defaulting to 1000 [ 750.819662][ T3647] lo speed is unknown, defaulting to 1000 [ 750.936184][ T3627] chnl_net:caif_netlink_parms(): no params data found [ 750.979186][T24016] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.068207][T24016] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.082758][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.089976][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.097770][ T3627] bridge_slave_0: entered allmulticast mode [ 751.113998][ T3627] bridge_slave_0: entered promiscuous mode [ 751.140679][T24016] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.160387][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.167650][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.175685][ T3627] bridge_slave_1: entered allmulticast mode [ 751.186828][ T3627] bridge_slave_1: entered promiscuous mode [ 751.210092][T24016] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.253653][ T3627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.274724][ T3627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.331609][ T3627] team0: Port device team_slave_0 added [ 751.345220][ T3627] team0: Port device team_slave_1 added [ 751.377942][T24016] bridge_slave_1: left allmulticast mode [ 751.383658][T24016] bridge_slave_1: left promiscuous mode [ 751.389443][T24016] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.398101][ T3712] netlink: 'syz.2.28251': attribute type 3 has an invalid length. [ 751.417122][T24016] bridge_slave_0: left allmulticast mode [ 751.422904][T24016] bridge_slave_0: left promiscuous mode [ 751.428654][T24016] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.567144][T24016] bond0 (unregistering): left promiscuous mode [ 751.573416][T24016] bond_slave_0: left promiscuous mode [ 751.579085][T24016] bond_slave_1: left promiscuous mode [ 751.609132][T24016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.623484][T24016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.642456][T24016] bond0 (unregistering): Released all slaves [ 751.651004][T24016] bond1 (unregistering): Released all slaves [ 751.673140][T24016] bond2 (unregistering): Released all slaves [ 751.702077][ T3627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.709178][ T3627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.735232][ T3627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.749727][ T3647] chnl_net:caif_netlink_parms(): no params data found [ 751.771437][ T3733] netlink: 272 bytes leftover after parsing attributes in process `syz.7.28258'. [ 751.781301][ T3627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.788390][ T3627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.814489][ T3627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.857208][T24016] tipc: Left network mode [ 751.988672][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28267'. [ 752.012821][ T3627] hsr_slave_0: entered promiscuous mode [ 752.019394][ T3627] hsr_slave_1: entered promiscuous mode [ 752.026014][ T3627] debugfs: 'hsr0' already exists in 'hsr' [ 752.031831][ T3627] Cannot create hsr debugfs directory [ 752.058556][T24016] veth1_to_bridge: left promiscuous mode [ 752.073176][T24016] hsr_slave_0: left promiscuous mode [ 752.092118][T24016] hsr_slave_1: left promiscuous mode [ 752.097937][T24016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.120875][T24016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.176600][T24016] team0 (unregistering): Port device team_slave_1 removed [ 752.196906][T24016] team0 (unregistering): Port device team_slave_0 removed [ 752.245709][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.252928][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.271287][ T3647] bridge_slave_0: entered allmulticast mode [ 752.271934][ T3647] bridge_slave_0: entered promiscuous mode [ 752.292951][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.300064][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.307760][ T3647] bridge_slave_1: entered allmulticast mode [ 752.315846][ T3647] bridge_slave_1: entered promiscuous mode [ 752.357460][ T3647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.393016][ T3647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.446637][ T3647] team0: Port device team_slave_0 added [ 752.458475][ T3786] 9pnet_fd: Insufficient options for proto=fd [ 752.468322][ T3647] team0: Port device team_slave_1 added [ 752.503844][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.510913][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.537089][ T3647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.550667][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.557777][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.583750][ T3647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.619212][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 752.619231][ T29] audit: type=1326 audit(780.112:32682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.7.28285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 752.652691][ T29] audit: type=1326 audit(780.154:32683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.7.28285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 752.675804][ T29] audit: type=1326 audit(780.154:32684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.7.28285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 752.698821][ T29] audit: type=1326 audit(780.154:32685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.7.28285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 752.722130][ T29] audit: type=1326 audit(780.154:32686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.7.28285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 752.749690][ T3647] hsr_slave_0: entered promiscuous mode [ 752.756692][ T3647] hsr_slave_1: entered promiscuous mode [ 752.762806][ T3647] debugfs: 'hsr0' already exists in 'hsr' [ 752.768670][ T3647] Cannot create hsr debugfs directory [ 752.786782][ T29] audit: type=1400 audit(780.290:32687): avc: denied { read } for pid=3802 comm="syz.3.28290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 752.787981][ T3801] SELinux: failed to load policy [ 753.002170][ T3627] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 753.002514][ T3823] xt_l2tp: wrong L2TP version: 1 [ 753.026320][ T3627] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 753.037436][ T3827] netlink: 'syz.7.28301': attribute type 3 has an invalid length. [ 753.045618][ T3627] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 753.064294][ T3627] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 753.099216][ T29] audit: type=1326 audit(780.616:32688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.7.28304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 753.122234][ T29] audit: type=1326 audit(780.616:32689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.7.28304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 753.145283][ T29] audit: type=1326 audit(780.616:32690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.7.28304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 753.168318][ T29] audit: type=1326 audit(780.616:32691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.7.28304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 753.194866][ T3627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.215056][ T3627] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.225096][T24016] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.232324][T24016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.250906][T24039] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.258059][T24039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.277222][ T3627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 753.287694][ T3627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.356885][ T3647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 753.377169][ T3647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 753.391786][ T3647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 753.413875][ T3647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 753.426290][ T3627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.457451][ T3876] loop7: detected capacity change from 0 to 512 [ 753.485487][ T3876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.522042][ T3647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.543407][ T3647] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.551789][T30386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.573648][T24016] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.580889][T24016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.596893][T24016] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.604170][T24016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.768568][ T3647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.780432][ T3627] veth0_vlan: entered promiscuous mode [ 753.791715][ T3627] veth1_vlan: entered promiscuous mode [ 753.811277][ T3627] veth0_macvtap: entered promiscuous mode [ 753.819338][ T3627] veth1_macvtap: entered promiscuous mode [ 753.832805][ T3627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.852921][ T3627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.878086][T24016] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.889592][T24065] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.908847][T24065] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.923112][T24065] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.985942][ T3647] veth0_vlan: entered promiscuous mode [ 754.006759][ T3940] Cannot find del_set index 3 as target [ 754.016833][ T3647] veth1_vlan: entered promiscuous mode [ 754.041565][ T3647] veth0_macvtap: entered promiscuous mode [ 754.054730][ T3647] veth1_macvtap: entered promiscuous mode [ 754.087872][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.098820][ T3947] IPVS: Error connecting to the multicast addr [ 754.108284][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.126814][T24065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.161442][T24065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.180294][T24065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.197920][T24065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.828678][ T4038] loop7: detected capacity change from 0 to 512 [ 754.836093][ T4038] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 754.876763][ T4038] EXT4-fs (loop7): 1 truncate cleaned up [ 754.884726][ T4038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.939325][T30386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.003631][ T4059] __nla_validate_parse: 3 callbacks suppressed [ 755.003647][ T4059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28388'. [ 755.099973][ T4075] 9pnet_fd: Insufficient options for proto=fd [ 755.152893][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.28396'. [ 755.296458][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28406'. [ 755.315791][ T4095] uprobe: syz.7.28403:4095 failed to unregister, leaking uprobe [ 755.620638][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28426'. [ 755.774842][ T4171] loop9: detected capacity change from 0 to 512 [ 755.781917][ T4171] EXT4-fs: Ignoring removed nobh option [ 755.802337][ T4171] EXT4-fs (loop9): failed to initialize system zone (-117) [ 755.814499][ T4176] x_tables: duplicate underflow at hook 4 [ 755.823064][ T4171] EXT4-fs (loop9): mount failed [ 756.209549][ T4240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28467'. [ 756.255308][ T4242] loop9: detected capacity change from 0 to 512 [ 756.278756][ T4242] EXT4-fs (loop9): orphan cleanup on readonly fs [ 756.317105][ T4242] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.28466: bg 0: block 248: padding at end of block bitmap is not set [ 756.367199][ T4242] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.28466: Failed to acquire dquot type 1 [ 756.387260][ T4258] lo speed is unknown, defaulting to 1000 [ 756.399096][ T4242] EXT4-fs (loop9): 1 truncate cleaned up [ 756.419128][ T4242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 756.482897][ T3627] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.606071][ T4270] netlink: 16 bytes leftover after parsing attributes in process `syz.9.28479'. [ 756.904951][ T4288] netlink: 72 bytes leftover after parsing attributes in process `syz.7.28487'. [ 757.021532][ T4299] No such timeout policy "syz1" [ 757.187755][ T4309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28496'. [ 757.309710][ T4316] netlink: 19 bytes leftover after parsing attributes in process `syz.2.28499'. [ 757.499038][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 757.499058][ T29] audit: type=1400 audit(785.235:32845): avc: denied { create } for pid=4330 comm="syz.7.28507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 757.580472][ T29] audit: type=1400 audit(785.298:32846): avc: denied { bind } for pid=4330 comm="syz.7.28507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 757.599747][ T4336] uprobe: syz.2.28506:4336 failed to unregister, leaking uprobe [ 757.690456][ T29] audit: type=1326 audit(785.434:32847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.28511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 757.713684][ T29] audit: type=1326 audit(785.434:32848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.28511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 757.736732][ T29] audit: type=1326 audit(785.434:32849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.28511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f002db2f003 code=0x7ffc0000 [ 757.759729][ T29] audit: type=1326 audit(785.434:32850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.28511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f002db2da7f code=0x7ffc0000 [ 757.782748][ T29] audit: type=1326 audit(785.434:32851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.28511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f002db2f057 code=0x7ffc0000 [ 757.805681][ T29] audit: type=1326 audit(785.434:32852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.28511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f002db2d810 code=0x7ffc0000 [ 757.926824][ T29] audit: type=1326 audit(785.592:32853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.28511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f002db2dc2a code=0x7ffc0000 [ 757.949818][ T29] audit: type=1326 audit(785.592:32854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.3.28511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 758.023969][ T4352] loop9: detected capacity change from 0 to 512 [ 758.055953][ T4352] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 758.134338][ T4368] lo speed is unknown, defaulting to 1000 [ 758.177909][ T4376] uprobe: syz.0.28524:4376 failed to unregister, leaking uprobe [ 758.416351][ T4396] loop9: detected capacity change from 0 to 1024 [ 758.437281][ T4396] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 758.448422][ T4396] EXT4-fs (loop9): group descriptors corrupted! [ 758.481058][ T4396] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 758.523078][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28538'. [ 758.653362][ T4419] IPVS: Unknown mcast interface: ipvlan1 [ 758.730846][ T4422] program syz.9.28543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 758.852901][ T4431] loop9: detected capacity change from 0 to 8192 [ 759.036644][ T4466] loop7: detected capacity change from 0 to 1024 [ 759.047695][ T4466] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 759.058664][ T4466] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 759.069479][ T4466] JBD2: no valid journal superblock found [ 759.075471][ T4466] EXT4-fs (loop7): Could not load journal inode [ 759.374253][ T4515] sd 0:0:1:0: device reset [ 759.420321][ T4521] rtc_cmos 00:00: Alarms can be up to one day in the future [ 759.428442][T17098] rtc_cmos 00:00: Alarms can be up to one day in the future [ 759.436307][T17098] rtc_cmos 00:00: Alarms can be up to one day in the future [ 759.444110][T17098] rtc_cmos 00:00: Alarms can be up to one day in the future [ 759.451772][T17098] rtc_cmos 00:00: Alarms can be up to one day in the future [ 759.459152][T17098] rtc rtc0: __rtc_set_alarm: err=-22 [ 759.551084][ T4535] SELinux: failed to load policy [ 759.596060][ T4541] uprobe: syz.3.28590:4541 failed to unregister, leaking uprobe [ 760.030541][ T4584] xt_hashlimit: max too large, truncated to 1048576 [ 760.327178][ T4610] __nla_validate_parse: 3 callbacks suppressed [ 760.327197][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28625'. [ 760.351889][ T4610] bond0: (slave vxcan1): Releasing backup interface [ 760.358986][ T4610] vxcan1 (unregistering): left promiscuous mode [ 760.367346][ T4610] bond0: Destroying bond [ 760.374493][ T4610] bond0 (unregistering): Released all slaves [ 760.627490][T24063] batadv0: left allmulticast mode [ 760.632618][T24063] batadv0: left promiscuous mode [ 760.637854][T24063] bridge0: port 2(batadv0) entered disabled state [ 760.667932][ T4633] uprobe: syz.9.28632:4633 failed to unregister, leaking uprobe [ 760.679988][T24063] bridge_slave_0: left allmulticast mode [ 760.685779][T24063] bridge_slave_0: left promiscuous mode [ 760.691561][T24063] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.841487][ T4659] ref_ctr_offset mismatch. inode: 0x115 offset: 0x0 ref_ctr_offset(old): 0x4000000 ref_ctr_offset(new): 0x0 [ 760.856370][ T4664] loop9: detected capacity change from 0 to 164 [ 760.867680][ T4666] netlink: 16 bytes leftover after parsing attributes in process `syz.7.28649'. [ 760.873783][ T4664] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 760.902773][T24063] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.919853][T24063] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.933163][T24063] .` (unregistering): (slave dummy0): Releasing backup interface [ 760.946335][ T4664] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 760.955343][T24063] .` (unregistering): Released all slaves [ 760.964394][T24063] bond1 (unregistering): Released all slaves [ 760.990115][T24063] bond2 (unregistering): Released all slaves [ 761.032318][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.28653'. [ 761.041486][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.9.28653'. [ 761.076773][T24063] tipc: Disabling bearer [ 761.076895][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.28653'. [ 761.082153][T24063] tipc: Left network mode [ 761.095491][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.9.28653'. [ 761.105844][T24063] IPVS: stopping backup sync thread 31342 ... [ 761.240017][T24063] hsr_slave_0: left promiscuous mode [ 761.270088][T24063] hsr_slave_1: left promiscuous mode [ 761.308922][ T4713] netlink: 'syz.2.28669': attribute type 10 has an invalid length. [ 761.415501][ T4725] loop7: detected capacity change from 0 to 512 [ 761.428354][ T4725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.460046][ T4725] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.28673: corrupted inode contents [ 761.473961][ T4725] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.28673: mark_inode_dirty error [ 761.497347][ T4725] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.28673: corrupted inode contents [ 761.530917][ T4725] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.28673: mark_inode_dirty error [ 761.591718][T30386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.609719][ T4751] 9pnet_fd: Insufficient options for proto=fd [ 761.677852][ T4764] netlink: 404 bytes leftover after parsing attributes in process `syz.9.28686'. [ 761.687224][ T4764] netlink: 20 bytes leftover after parsing attributes in process `syz.9.28686'. [ 761.705514][T24063] IPVS: stop unused estimator thread 0... [ 761.716980][ T4769] program syz.2.28687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 761.879886][ T4795] lo speed is unknown, defaulting to 1000 [ 762.074800][ T4833] ref_ctr_offset mismatch. inode: 0xb89 offset: 0x0 ref_ctr_offset(old): 0x4000000 ref_ctr_offset(new): 0x0 [ 762.120036][ T4837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28714'. [ 762.308863][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 762.308882][ T29] audit: type=1400 audit(790.285:33160): avc: denied { read write } for pid=4860 comm="syz.7.28724" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 762.338025][ T29] audit: type=1400 audit(790.285:33161): avc: denied { open } for pid=4860 comm="syz.7.28724" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 762.388829][ T29] audit: type=1400 audit(790.368:33162): avc: denied { ioctl } for pid=4860 comm="syz.7.28724" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 762.578193][ T29] audit: type=1400 audit(790.578:33163): avc: denied { listen } for pid=4872 comm="syz.9.28728" lport=44802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 762.612137][ T29] audit: type=1400 audit(790.599:33164): avc: denied { accept } for pid=4872 comm="syz.9.28728" lport=44802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 762.654010][ T4887] netlink: 'syz.7.28733': attribute type 10 has an invalid length. [ 762.665937][ T29] audit: type=1326 audit(790.662:33165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.28734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367facefc9 code=0x7ffc0000 [ 762.705130][ T29] audit: type=1326 audit(790.662:33166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.28734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367facefc9 code=0x7ffc0000 [ 762.728284][ T29] audit: type=1326 audit(790.683:33167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.28734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f367facefc9 code=0x7ffc0000 [ 762.751593][ T29] audit: type=1326 audit(790.694:33168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.28734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367facefc9 code=0x7ffc0000 [ 762.774696][ T29] audit: type=1326 audit(790.694:33169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.28734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367facefc9 code=0x7ffc0000 [ 762.945834][ T4909] loop7: detected capacity change from 0 to 512 [ 762.964085][ T4909] EXT4-fs: Ignoring removed i_version option [ 762.970187][ T4909] EXT4-fs: Ignoring removed bh option [ 762.999788][ T4909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.063291][T30386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.088567][ T4925] xt_hashlimit: max too large, truncated to 1048576 [ 763.114728][ T4925] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 763.183419][ T4936] netem: incorrect ge model size [ 763.188706][ T4936] netem: change failed [ 763.350538][ T4971] loop7: detected capacity change from 0 to 256 [ 763.371803][ T4971] Invalid ELF header magic: != ELF [ 763.372535][ T4958] SELinux: failed to load policy [ 763.548360][ T5008] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.28780'. [ 763.826151][ T5057] loop9: detected capacity change from 0 to 512 [ 763.865173][ T5057] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.28804: inode has both inline data and extents flags [ 763.882852][ T5057] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.28804: couldn't read orphan inode 15 (err -117) [ 763.900735][ T5057] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.952183][ T5065] vhci_hcd: invalid port number 96 [ 763.957380][ T5065] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 764.012981][ T3627] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.827051][ T5185] 9pnet_fd: Insufficient options for proto=fd [ 764.968621][ T5193] loop7: detected capacity change from 0 to 8192 [ 765.024100][ T5217] 9pnet_fd: Insufficient options for proto=fd [ 765.025281][T30386] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 765.038108][T30386] FAT-fs (loop7): Filesystem has been set read-only [ 765.268448][ T5251] __nla_validate_parse: 4 callbacks suppressed [ 765.268469][ T5251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28889'. [ 765.632204][ T5281] netlink: 'syz.7.28904': attribute type 5 has an invalid length. [ 765.638036][ T5280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28903'. [ 765.652987][ T5281] batman_adv: batadv0: Adding interface: vxlan0 [ 765.659353][ T5281] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.690264][ T5281] batman_adv: batadv0: Interface activated: vxlan0 [ 765.698047][T24065] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.706603][T24065] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.715591][T24065] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.737767][T24065] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.750538][ T5288] blktrace: Concurrent blktraces are not allowed on loop15 [ 765.786440][ T5293] tls_set_device_offload: netdev not found [ 765.814686][ T5299] pim6reg1: entered promiscuous mode [ 765.821264][ T5299] pim6reg1: entered allmulticast mode [ 765.846911][ T5304] wg2: entered promiscuous mode [ 765.851831][ T5304] wg2: entered allmulticast mode [ 765.959136][ T5312] batadv_slave_0: left promiscuous mode [ 765.980320][ T5312] hsr0: left promiscuous mode [ 766.005258][ T5312] ip6gre2: left promiscuous mode [ 766.031317][T17085] lo speed is unknown, defaulting to 1000 [ 766.037159][T17085] syz0: Port: 1 Link DOWN [ 766.041654][T24046] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.050205][T24046] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.082601][T24046] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.092042][T24046] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.158324][ T5341] loop9: detected capacity change from 0 to 512 [ 766.253784][ T5360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5360 comm=syz.3.28940 [ 766.257192][ T5359] pimreg: entered allmulticast mode [ 766.283951][ T5359] pimreg: left allmulticast mode [ 766.455600][ T5376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.502652][ T5376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.552653][ T5376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.638375][ T5376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.684285][ T5391] 9pnet_fd: Insufficient options for proto=fd [ 766.697799][T24046] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.713415][T24046] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.722383][T24046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.751295][T24046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.896590][ T5417] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 767.102208][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 767.102298][ T29] audit: type=1400 audit(795.324:33620): avc: denied { mount } for pid=5453 comm="syz.9.28983" name="/" dev="autofs" ino=226782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 767.153346][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.9.28985'. [ 767.162577][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.9.28985'. [ 767.187035][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.9.28985'. [ 767.196186][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.9.28985'. [ 767.237842][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.9.28985'. [ 767.247032][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.9.28985'. [ 767.302277][ T29] audit: type=1326 audit(795.523:33621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.9.28988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 767.304315][ T5474] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 767.325354][ T29] audit: type=1326 audit(795.523:33622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.9.28988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 767.355739][ T29] audit: type=1326 audit(795.534:33623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.9.28988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 767.378779][ T29] audit: type=1326 audit(795.534:33624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.9.28988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 767.401853][ T29] audit: type=1326 audit(795.534:33625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.9.28988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 767.478023][ T29] audit: type=1400 audit(795.712:33626): avc: denied { firmware_load } for pid=5477 comm="syz.9.28991" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 767.573285][ T5482] SELinux: failed to load policy [ 767.582378][ T5484] netlink: 'syz.9.28994': attribute type 6 has an invalid length. [ 767.643647][ T5488] loop9: detected capacity change from 0 to 512 [ 767.655859][ T5488] EXT4-fs: Ignoring removed orlov option [ 767.675085][ T5488] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.28996: inode has both inline data and extents flags [ 767.716512][ T5488] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.28996: couldn't read orphan inode 15 (err -117) [ 767.746480][ T5488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.762807][ T29] audit: type=1400 audit(796.016:33627): avc: denied { create } for pid=5503 comm="syz.7.29002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 767.784163][ T29] audit: type=1400 audit(796.037:33628): avc: denied { listen } for pid=5503 comm="syz.7.29002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 767.803505][ T29] audit: type=1400 audit(796.037:33629): avc: denied { accept } for pid=5503 comm="syz.7.29002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 767.952678][ T3627] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.099879][ T5528] lo speed is unknown, defaulting to 1000 [ 768.119083][ T5532] loop9: detected capacity change from 0 to 128 [ 768.177283][ T5538] loop9: detected capacity change from 0 to 128 [ 768.194607][ T5538] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 768.211759][ T5538] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.29019: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 768.240742][ T5538] EXT4-fs error (device loop9) in do_split:2029: Corrupt filesystem [ 768.265773][ T3627] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 768.352870][ T5547] bridge0: entered promiscuous mode [ 768.362999][ T5547] macvtap1: entered allmulticast mode [ 768.368470][ T5547] bridge0: entered allmulticast mode [ 768.402920][ T5547] batman_adv: batadv0: Adding interface: macvtap1 [ 768.409517][ T5547] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.463550][ T5547] batman_adv: batadv0: Interface activated: macvtap1 [ 768.477692][ T5549] netlink: 'syz.2.29023': attribute type 3 has an invalid length. [ 768.847155][ T5589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29042'. [ 768.856386][ T5589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29042'. [ 769.133706][ T5606] SELinux: failed to load policy [ 770.088167][ T5689] ref_ctr_offset mismatch. inode: 0xd01 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 770.211396][ T5704] __nla_validate_parse: 4 callbacks suppressed [ 770.211418][ T5704] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.29092'. [ 770.365943][ T5722] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 770.382052][ T5724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29101'. [ 770.436670][ T5729] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.495675][ T5729] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.554796][ T5729] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.610365][ T5729] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.654539][T24065] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.674431][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.29111'. [ 770.683479][ T5751] netlink: 348 bytes leftover after parsing attributes in process `syz.7.29111'. [ 770.692677][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.29111'. [ 770.701737][ T5751] netlink: 348 bytes leftover after parsing attributes in process `syz.7.29111'. [ 770.711116][T24065] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.719697][T24065] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.728276][T24065] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.736639][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.29111'. [ 770.778436][ T5753] macvtap1: entered allmulticast mode [ 770.783884][ T5753] bridge0: entered allmulticast mode [ 770.796501][ T5753] batman_adv: batadv0: Adding interface: macvtap1 [ 770.803100][ T5753] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.828996][ T5753] batman_adv: batadv0: Interface activated: macvtap1 [ 771.002340][T24016] Bluetooth: hci0: Frame reassembly failed (-84) [ 771.261864][ T5799] netlink: 19 bytes leftover after parsing attributes in process `syz.0.29134'. [ 771.381956][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29141'. [ 771.522436][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29151'. [ 771.878427][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 771.878445][ T29] audit: type=1400 audit(800.331:33719): avc: denied { mounton } for pid=5872 comm="syz.0.29169" path=2F3135382FE91F7189591E9233614B dev="tmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 771.893151][ T5879] SELinux: failed to load policy [ 771.995636][ T5889] xt_policy: neither incoming nor outgoing policy selected [ 772.059623][ T5903] loop9: detected capacity change from 0 to 256 [ 772.116882][ T29] audit: type=1326 audit(800.583:33720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.139965][ T29] audit: type=1326 audit(800.583:33721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.169343][ T29] audit: type=1326 audit(800.636:33722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.192614][ T29] audit: type=1326 audit(800.636:33723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.215684][ T29] audit: type=1326 audit(800.636:33724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.238858][ T29] audit: type=1326 audit(800.636:33725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.261945][ T29] audit: type=1326 audit(800.636:33726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.284977][ T29] audit: type=1326 audit(800.636:33727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.307970][ T29] audit: type=1326 audit(800.636:33728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.9.29185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f689852efc9 code=0x7ffc0000 [ 772.349922][ T5916] netlink: 'syz.3.29189': attribute type 2 has an invalid length. [ 772.442221][ T5927] ip6gre1: entered promiscuous mode [ 772.447619][ T5927] ip6gre1: entered allmulticast mode [ 772.535945][T25641] kernel write not supported for file bpf-prog (pid: 25641 comm: kworker/0:14) [ 772.627926][ T5955] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 772.979189][T27839] Bluetooth: hci0: command 0x1003 tx timeout [ 772.979224][T29422] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 773.454506][ T6031] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.523003][ T6031] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.608542][ T6031] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.657065][ T6031] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.748762][T24046] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.762299][T24063] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.775866][T24063] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.787301][T24063] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.182053][ T6109] netlink: 'syz.3.29281': attribute type 7 has an invalid length. [ 774.642927][ T6179] IPv6: NLM_F_CREATE should be specified when creating new route [ 774.761796][ T6194] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 775.085131][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.093792][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.499315][ T6246] __nla_validate_parse: 25 callbacks suppressed [ 775.499330][ T6246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.29342'. [ 775.575727][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29347'. [ 775.585363][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29347'. [ 775.937625][T24063] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.992090][ T6274] SELinux: failed to load policy [ 776.009791][T24063] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.035093][ T6283] netlink: 'syz.3.29362': attribute type 1 has an invalid length. [ 776.043031][ T6283] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.29362'. [ 776.053927][ T6285] SELinux: policydb version 6848 does not match my version range 15-35 [ 776.062838][ T6285] SELinux: failed to load policy [ 776.085830][T24063] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.109555][ T6291] netem: incorrect gi model size [ 776.146438][T24063] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.234089][T24063] bridge_slave_1: left allmulticast mode [ 776.239845][T24063] bridge_slave_1: left promiscuous mode [ 776.245512][T24063] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.253435][T24063] bridge_slave_0: left allmulticast mode [ 776.259215][T24063] bridge_slave_0: left promiscuous mode [ 776.264925][T24063] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.272831][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29372'. [ 776.330165][T24063] batman_adv: batadv0: Interface deactivated: macvtap1 [ 776.338355][T24063] bridge0 (unregistering): left allmulticast mode [ 776.346494][T24063] batman_adv: batadv0: Removing interface: macvtap1 [ 776.410466][T24063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.426502][T24063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.446947][T24063] bond0 (unregistering): Released all slaves [ 776.467681][ T6319] vxlan0: entered promiscuous mode [ 776.477294][T24046] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.489517][ T6286] lo speed is unknown, defaulting to 1000 [ 776.495830][T24046] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.513329][T24046] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.531850][T24046] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.663410][T24063] hsr_slave_0: left promiscuous mode [ 776.669595][ T6345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29385'. [ 776.679702][T24063] hsr_slave_1: left promiscuous mode [ 776.685621][T24063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.693033][T24063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.701240][T24063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.708794][T24063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.719688][T24063] veth1_macvtap: left promiscuous mode [ 776.725247][T24063] veth0_macvtap: left promiscuous mode [ 776.776849][T24063] team0 (unregistering): Port device team_slave_1 removed [ 776.786862][T24063] team0 (unregistering): Port device team_slave_0 removed [ 776.885120][ T6286] chnl_net:caif_netlink_parms(): no params data found [ 776.921482][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29391'. [ 776.930604][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29391'. [ 776.941661][ T6360] netlink: 'syz.3.29390': attribute type 4 has an invalid length. [ 776.992352][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.999674][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.008950][ T6286] bridge_slave_0: entered allmulticast mode [ 777.015460][ T6286] bridge_slave_0: entered promiscuous mode [ 777.022788][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.029876][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.037381][ T6286] bridge_slave_1: entered allmulticast mode [ 777.044451][ T6286] bridge_slave_1: entered promiscuous mode [ 777.064128][ T6374] SELinux: policydb version 6848 does not match my version range 15-35 [ 777.064674][ T6286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.082990][ T6286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.091685][ T6374] SELinux: failed to load policy [ 777.109545][ T6286] team0: Port device team_slave_0 added [ 777.116357][ T6286] team0: Port device team_slave_1 added [ 777.136760][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.143807][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.169890][ T6286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.188056][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.195171][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.221518][ T6286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.253516][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 777.253602][ T29] audit: type=1326 audit(813.977:33886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.283190][ T29] audit: type=1326 audit(813.987:33887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.306261][ T29] audit: type=1326 audit(813.987:33888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.329492][ T29] audit: type=1326 audit(813.987:33889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.345052][ T6388] SELinux: failed to load policy [ 777.352575][ T29] audit: type=1326 audit(813.987:33890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.380687][ T29] audit: type=1326 audit(813.987:33891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.404092][ T29] audit: type=1326 audit(813.987:33892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.427221][ T29] audit: type=1326 audit(813.987:33893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.428309][ T6392] SELinux: failed to load policy [ 777.450436][ T29] audit: type=1326 audit(813.987:33894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.478219][ T29] audit: type=1326 audit(813.987:33895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.29401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 777.537010][ T6286] hsr_slave_0: entered promiscuous mode [ 777.545132][ T6286] hsr_slave_1: entered promiscuous mode [ 777.553920][ T6286] debugfs: 'hsr0' already exists in 'hsr' [ 777.559698][ T6286] Cannot create hsr debugfs directory [ 777.569225][ T6401] netlink: 104 bytes leftover after parsing attributes in process `syz.7.29407'. [ 777.706109][ T6421] rdma_op ffff888137d2dd80 conn xmit_rdma 0000000000000000 [ 777.860287][ T6448] rdma_op ffff888118c0f180 conn xmit_rdma 0000000000000000 [ 777.872856][ T6286] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 777.884516][ T6286] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 777.895365][ T6286] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 777.906770][ T6286] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 777.967400][ T6462] binfmt_misc: register: failed to install interpreter file ./file2 [ 778.002164][ T6286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.022295][ T6286] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.049048][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.29439'. [ 778.067153][T24046] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.074311][T24046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.084080][T24046] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.091456][T24046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.139178][ T6286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 778.149638][ T6286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.256895][ T6286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.333586][ T6502] macsec0: entered promiscuous mode [ 778.338861][ T6502] bridge0: entered promiscuous mode [ 778.345095][ T6502] bridge0: port 1(macsec0) entered blocking state [ 778.351712][ T6502] bridge0: port 1(macsec0) entered disabled state [ 778.358580][ T6502] macsec0: entered allmulticast mode [ 778.363971][ T6502] bridge0: entered allmulticast mode [ 778.380115][ T6502] macsec0: left allmulticast mode [ 778.385206][ T6502] bridge0: left allmulticast mode [ 778.392928][ T6502] bridge0: left promiscuous mode [ 778.584150][ T6286] veth0_vlan: entered promiscuous mode [ 778.597332][ T6286] veth1_vlan: entered promiscuous mode [ 778.606340][ T6549] rdma_op ffff888118c0c180 conn xmit_rdma 0000000000000000 [ 778.634211][ T6286] veth0_macvtap: entered promiscuous mode [ 778.643315][ T6286] veth1_macvtap: entered promiscuous mode [ 778.658019][ T6555] bridge0: entered promiscuous mode [ 778.663571][ T6555] macsec1: entered promiscuous mode [ 778.670920][ T6555] bridge0: port 3(macsec1) entered blocking state [ 778.677447][ T6555] bridge0: port 3(macsec1) entered disabled state [ 778.685041][ T6555] macsec1: entered allmulticast mode [ 778.690505][ T6555] bridge0: entered allmulticast mode [ 778.696867][ T6555] macsec1: left allmulticast mode [ 778.701939][ T6555] bridge0: left allmulticast mode [ 778.708285][ T6555] bridge0: left promiscuous mode [ 778.720514][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.731918][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.746685][T24016] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.776426][T24016] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.806058][T24016] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.826733][T24016] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.849800][ T6572] xt_hashlimit: max too large, truncated to 1048576 [ 779.070287][ T6593] lo speed is unknown, defaulting to 1000 [ 779.578781][ T6652] netlink: 'syz.2.29510': attribute type 3 has an invalid length. [ 779.699807][ T6668] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 779.942747][ T6696] lo speed is unknown, defaulting to 1000 [ 781.620517][ T6881] __nla_validate_parse: 12 callbacks suppressed [ 781.620544][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29617'. [ 781.681565][ T6889] lo speed is unknown, defaulting to 1000 [ 781.691116][ T6891] lo speed is unknown, defaulting to 1000 [ 781.829195][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29625'. [ 782.430225][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29639'. [ 782.439382][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29639'. [ 782.459569][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29640'. [ 782.476197][ T6933] hsr_slave_0: left promiscuous mode [ 782.485946][ T6933] hsr_slave_1: left promiscuous mode [ 782.869157][ T6972] netlink: 'syz.3.29656': attribute type 22 has an invalid length. [ 782.877267][ T6972] netlink: 168 bytes leftover after parsing attributes in process `syz.3.29656'. [ 783.126784][ T6986] netlink: 3 bytes leftover after parsing attributes in process `syz.3.29664'. [ 783.180932][ T6986] 1ªX¹¦À: renamed from 60ªX¹¦À [ 783.187958][ T6986] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 783.404153][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 783.404174][ T29] audit: type=1326 audit(820.433:34116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.29672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.433683][ T29] audit: type=1326 audit(820.433:34117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.29672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.461568][ T29] audit: type=1326 audit(820.496:34118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.29672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.484754][ T29] audit: type=1326 audit(820.496:34119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.29672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.507888][ T29] audit: type=1326 audit(820.496:34120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.29672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.543692][ T29] audit: type=1326 audit(820.580:34121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.3.29674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.566817][ T29] audit: type=1326 audit(820.580:34122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.3.29674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.597573][ T29] audit: type=1326 audit(820.632:34123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.3.29674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.620711][ T29] audit: type=1326 audit(820.632:34124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.3.29674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.643715][ T29] audit: type=1326 audit(820.632:34125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.3.29674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002db2efc9 code=0x7ffc0000 [ 783.744043][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29678'. [ 783.752488][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.29679'. [ 783.753223][ T7025] netlink: 'syz.3.29678': attribute type 1 has an invalid length. [ 783.769902][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29678'. [ 783.781420][ T7025] netlink: 'syz.3.29678': attribute type 1 has an invalid length. [ 784.164022][ T7068] ip6gre3: entered allmulticast mode [ 784.342664][ T7086] IPVS: Error connecting to the multicast addr [ 784.427578][ T7094] pim6reg: entered allmulticast mode [ 784.450590][ T7096] ip6gre2: entered allmulticast mode [ 784.459759][ T7094] pim6reg: left allmulticast mode [ 785.880711][ T7198] lo speed is unknown, defaulting to 1000 [ 786.270079][ T7220] IPv6: Can't replace route, no match found [ 786.634830][ T7247] __nla_validate_parse: 7 callbacks suppressed [ 786.634851][ T7247] netlink: 52 bytes leftover after parsing attributes in process `syz.7.29783'. [ 786.650195][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.7.29783'. [ 786.659285][ T7247] netlink: 52 bytes leftover after parsing attributes in process `syz.7.29783'. [ 787.410524][ T7300] random: crng reseeded on system resumption [ 787.514584][ T7305] netlink: 'syz.8.29805': attribute type 39 has an invalid length. [ 787.713680][ T7334] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.29822'. [ 787.744174][ T7336] loop9: detected capacity change from 0 to 7 [ 787.752257][ T7336] Buffer I/O error on dev loop9, logical block 0, async page read [ 787.761251][ T7336] Buffer I/O error on dev loop9, logical block 0, async page read [ 787.769351][ T7336] loop9: unable to read partition table [ 787.779526][ T7336] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 787.779526][ T7336] ) failed (rc=-5) [ 787.830459][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29826'. [ 787.839592][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29826'. [ 787.848708][ T7342] netlink: 'syz.0.29826': attribute type 15 has an invalid length. [ 787.863381][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29826'. [ 787.863381][T24046] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 787.863425][T24046] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 787.872411][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29826'. [ 787.872446][ T7342] netlink: 'syz.0.29826': attribute type 15 has an invalid length. [ 787.914995][T24046] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 787.923324][T24046] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 787.956749][ T7344] bridge_slave_0: left promiscuous mode [ 787.962716][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.971134][ T7344] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 788.192916][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29841'. [ 788.278545][ T7381] block device autoloading is deprecated and will be removed. [ 788.355172][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 788.355192][ T29] audit: type=1326 audit(825.629:34254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.8.29845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 788.395640][ T29] audit: type=1326 audit(825.671:34255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.8.29845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 788.422198][ T29] audit: type=1326 audit(825.703:34256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.8.29845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 788.449733][ T29] audit: type=1326 audit(825.734:34257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.8.29845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 788.490909][ T29] audit: type=1400 audit(825.776:34258): avc: denied { listen } for pid=7395 comm="syz.8.29849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 788.534055][ T29] audit: type=1400 audit(825.808:34259): avc: denied { accept } for pid=7395 comm="syz.8.29849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 788.577717][ T7401] lo speed is unknown, defaulting to 1000 [ 788.807052][ T7423] netlink: 'syz.3.29861': attribute type 13 has an invalid length. [ 788.815097][ T7423] netlink: 'syz.3.29861': attribute type 17 has an invalid length. [ 788.943058][ T7423] erspan0: left promiscuous mode [ 789.002320][ T7423] 1ªX¹¦À: left allmulticast mode [ 789.007305][ T7423] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 789.023246][T25641] lo speed is unknown, defaulting to 1000 [ 789.029234][T25641] syz0: Port: 1 Link ACTIVE [ 789.120437][ T29] audit: type=1326 audit(826.438:34260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.0.29872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 789.182211][ T29] audit: type=1326 audit(826.469:34261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.0.29872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 789.205334][ T29] audit: type=1326 audit(826.469:34262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.0.29872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 789.228346][ T29] audit: type=1326 audit(826.469:34263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.0.29872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 789.279304][ T7454] netlink: 'syz.0.29875': attribute type 3 has an invalid length. [ 790.154035][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.29886'. [ 790.443582][ T7497] xt_time: unknown flags 0xf4 [ 791.173615][ T7522] lo speed is unknown, defaulting to 1000 [ 792.400524][ T7579] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 792.803770][ T7612] __nla_validate_parse: 1 callbacks suppressed [ 792.803794][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz.7.29954'. [ 793.011963][ T7620] serio: Serial port ptm0 [ 793.159040][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 793.159056][ T29] audit: type=1326 audit(830.679:34377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.204793][ T29] audit: type=1326 audit(830.710:34378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.235837][ T29] audit: type=1326 audit(830.752:34379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.259021][ T29] audit: type=1326 audit(830.752:34380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.282111][ T29] audit: type=1326 audit(830.752:34381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.306919][ T7639] netlink: 19 bytes leftover after parsing attributes in process `syz.7.29958'. [ 793.307400][ T29] audit: type=1326 audit(830.826:34382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.341281][ T29] audit: type=1326 audit(830.868:34383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.365415][ T29] audit: type=1326 audit(830.889:34384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.388516][ T29] audit: type=1326 audit(830.889:34385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.411550][ T29] audit: type=1326 audit(830.889:34386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.8.29956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b38e6efc9 code=0x7ffc0000 [ 793.584152][T24021] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 793.618129][T24021] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 793.632301][T24021] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 793.646939][ T7662] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 794.927879][ T7657] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 794.974941][ T7657] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 795.022680][ T7657] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 795.113453][T24021] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 795.129400][T24021] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 795.152109][T24021] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 795.166271][T24021] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 796.216753][ T7728] netlink: 'syz.7.30000': attribute type 3 has an invalid length. [ 796.656741][ T7760] lo speed is unknown, defaulting to 1000 [ 796.893426][T24021] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.903435][T24021] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.937649][ T7810] binfmt_misc: register: failed to install interpreter file ./file2 [ 796.948633][ T7760] chnl_net:caif_netlink_parms(): no params data found [ 796.966787][T24021] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.976637][T24021] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.040573][T24021] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.050448][T24021] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.169226][T24021] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.179123][T24021] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.213966][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30045'. [ 797.229632][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.236801][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.246576][ T7760] bridge_slave_0: entered allmulticast mode [ 797.258882][ T7760] bridge_slave_0: entered promiscuous mode [ 797.271250][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.278368][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.287227][ T7760] bridge_slave_1: entered allmulticast mode [ 797.294775][ T7760] bridge_slave_1: entered promiscuous mode [ 797.334236][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.354357][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.412871][ T7760] team0: Port device team_slave_0 added [ 797.419610][ T7760] team0: Port device team_slave_1 added [ 797.467336][ T7856] lo speed is unknown, defaulting to 1000 [ 797.469161][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.480169][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.506168][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.633909][T24021] bond0 (unregistering): Released all slaves [ 797.643277][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.650272][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.676296][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.688554][ T7875] netlink: 'syz.3.30064': attribute type 4 has an invalid length. [ 797.747363][T17098] lo speed is unknown, defaulting to 1000 [ 797.753144][T17098] syz0: Port: 1 Link DOWN [ 797.779001][ T7760] hsr_slave_0: entered promiscuous mode [ 797.793840][ T7760] hsr_slave_1: entered promiscuous mode [ 797.799887][ T7760] debugfs: 'hsr0' already exists in 'hsr' [ 797.805703][ T7760] Cannot create hsr debugfs directory [ 798.069447][ T7886] sd 0:0:1:0: device reset [ 798.095758][T24021] hsr_slave_0: left promiscuous mode [ 798.108141][T24021] hsr_slave_1: left promiscuous mode [ 798.117401][T24021] veth1_vlan: left promiscuous mode [ 798.123001][T24021] veth0_vlan: left promiscuous mode [ 798.202686][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.8.30085'. [ 798.211847][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.8.30085'. [ 798.221110][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.8.30085'. [ 798.245209][ T7917] vlan2: entered allmulticast mode [ 798.281092][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 798.281110][ T29] audit: type=1400 audit(836.054:34530): avc: denied { ioctl } for pid=7923 comm="syz.8.30087" path="socket:[235179]" dev="sockfs" ino=235179 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 798.555423][ T7760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 798.562315][ T7936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 798.568886][ T7936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 798.576551][ T7936] vhci_hcd vhci_hcd.0: Device attached [ 798.585123][ T7760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 798.596752][ T7760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 798.608027][ T7942] vhci_hcd: connection closed [ 798.608193][T24046] vhci_hcd: stop threads [ 798.617275][T24046] vhci_hcd: release socket [ 798.618356][ T7760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 798.621711][T24046] vhci_hcd: disconnect device [ 798.639366][ T29] audit: type=1400 audit(836.421:34531): avc: denied { setattr } for pid=7946 comm="syz.7.30096" name="ns" dev="proc" ino=235226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 798.670549][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.7.30097'. [ 798.679795][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.7.30097'. [ 798.688937][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.7.30097'. [ 798.738170][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.789374][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.799962][T24065] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.807096][T24065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.821264][T24063] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.828511][T24063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.885284][ T29] audit: type=1400 audit(836.684:34532): avc: denied { relabelto } for pid=7965 comm="syz.7.30102" name="cgroup.controllers" dev="tmpfs" ino=4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 798.909894][ T29] audit: type=1400 audit(836.684:34533): avc: denied { associate } for pid=7965 comm="syz.7.30102" name="cgroup.controllers" dev="tmpfs" ino=4600 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 798.940030][ T29] audit: type=1400 audit(836.684:34534): avc: denied { unlink } for pid=30386 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 798.994159][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.005740][ T7973] netlink: 14 bytes leftover after parsing attributes in process `syz.7.30104'. [ 799.185399][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30107'. [ 799.211578][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30107'. [ 799.230867][ T29] audit: type=1326 audit(837.041:34535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7995 comm="syz.7.30109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 799.254018][ T29] audit: type=1326 audit(837.041:34536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7995 comm="syz.7.30109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 799.275859][ T7760] veth0_vlan: entered promiscuous mode [ 799.298805][ T29] audit: type=1326 audit(837.114:34537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7995 comm="syz.7.30109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 799.304493][ T7760] veth1_vlan: entered promiscuous mode [ 799.321901][ T29] audit: type=1326 audit(837.114:34538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7995 comm="syz.7.30109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 799.341103][ T7760] veth0_macvtap: entered promiscuous mode [ 799.350444][ T29] audit: type=1326 audit(837.114:34539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7995 comm="syz.7.30109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 799.360604][ T7760] veth1_macvtap: entered promiscuous mode [ 799.436488][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.462042][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.483244][T24021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.519624][T24021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.548881][T24052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.558756][T24052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.580910][ T8014] rdma_op ffff88813f300580 conn xmit_rdma 0000000000000000 [ 799.666658][ T8022] SELinux: failed to load policy [ 799.677712][ T8026] netlink: 7 bytes leftover after parsing attributes in process `syz.0.30121'. [ 799.741459][ T8038] netlink: 'syz.0.30126': attribute type 1 has an invalid length. [ 799.749449][ T8038] netlink: 'syz.0.30126': attribute type 2 has an invalid length. [ 799.945894][ T8056] lo speed is unknown, defaulting to 1000 [ 800.288743][ T8091] Falling back ldisc for ttyS3. [ 800.505234][ T8113] wg2: Caught tx_queue_len zero misconfig [ 800.750266][ T8139] 9pnet_fd: Insufficient options for proto=fd [ 801.166488][ T8168] netlink: 'syz.7.30186': attribute type 13 has an invalid length. [ 801.174606][ T8168] netlink: 'syz.7.30186': attribute type 17 has an invalid length. [ 801.248522][ T8168] bridge0: entered promiscuous mode [ 801.256013][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.277363][ T8168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.385740][ T8180] SELinux: failed to load policy [ 801.740506][ T8207] lo speed is unknown, defaulting to 1000 [ 801.768267][ T8206] SELinux: failed to load policy [ 801.896087][ T8225] netlink: 'syz.3.30214': attribute type 29 has an invalid length. [ 801.905564][ T8225] netlink: 'syz.3.30214': attribute type 29 has an invalid length. [ 812.901157][ T8258] __nla_validate_parse: 7 callbacks suppressed [ 812.901178][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30228'. [ 812.950917][ T8265] serio: Serial port ptm0 [ 812.965191][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30228'. [ 813.025560][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 813.025578][ T29] audit: type=1326 audit(851.538:34654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8270 comm="syz.7.30234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.081843][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30235'. [ 813.083670][ T29] audit: type=1326 audit(851.570:34655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8270 comm="syz.7.30234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.113874][ T29] audit: type=1326 audit(851.570:34656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8270 comm="syz.7.30234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.136894][ T29] audit: type=1326 audit(851.570:34657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8270 comm="syz.7.30234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.187340][ T29] audit: type=1326 audit(851.696:34658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.30238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.210392][ T29] audit: type=1326 audit(851.696:34659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.30238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.233727][ T29] audit: type=1326 audit(851.696:34660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.30238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.256920][ T29] audit: type=1326 audit(851.706:34661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.30238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.280189][ T29] audit: type=1326 audit(851.706:34662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.30238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.304489][T24039] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.325456][ T29] audit: type=1326 audit(851.822:34663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.7.30238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 813.362011][ T8252] lo speed is unknown, defaulting to 1000 [ 813.390697][T24039] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.401204][ T8288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.30239'. [ 813.456753][T24039] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.491603][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.7.30248'. [ 813.537790][ T8309] SELinux: policydb version 0 does not match my version range 15-35 [ 813.560426][ T8309] SELinux: failed to load policy [ 813.581270][T24039] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.681526][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 813.768492][T24039] bridge_slave_1: left allmulticast mode [ 813.774278][T24039] bridge_slave_1: left promiscuous mode [ 813.780211][T24039] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.844390][T24039] bridge_slave_0: left allmulticast mode [ 813.850087][T24039] bridge_slave_0: left promiscuous mode [ 813.855782][T24039] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.087735][T24039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.106172][T24039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.127942][T24039] bond0 (unregistering): Released all slaves [ 814.160502][ T8352] syzkaller1: entered promiscuous mode [ 814.166070][ T8352] syzkaller1: entered allmulticast mode [ 814.220546][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.227794][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.261839][ T8252] bridge_slave_0: entered allmulticast mode [ 814.284741][ T8252] bridge_slave_0: entered promiscuous mode [ 814.303391][T24039] hsr_slave_0: left promiscuous mode [ 814.312206][T24039] hsr_slave_1: left promiscuous mode [ 814.318003][T24039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.325486][T24039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.352928][ T8380] serio: Serial port ttyS3 [ 814.368316][T24039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.375801][T24039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.403195][T24039] veth1_macvtap: left promiscuous mode [ 814.411087][T24039] veth0_macvtap: left promiscuous mode [ 814.416687][T24039] veth1_vlan: left promiscuous mode [ 814.422000][T24039] veth0_vlan: left promiscuous mode [ 814.545574][T24039] team0 (unregistering): Port device team_slave_1 removed [ 814.556329][T24039] team0 (unregistering): Port device team_slave_0 removed [ 814.592714][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.600006][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.614750][ T8252] bridge_slave_1: entered allmulticast mode [ 814.621538][ T8252] bridge_slave_1: entered promiscuous mode [ 814.683886][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.705143][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.732659][ T8252] team0: Port device team_slave_0 added [ 814.741645][ T8252] team0: Port device team_slave_1 added [ 814.769584][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.776576][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.802621][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.814369][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.821435][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.847439][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.890786][ T8252] hsr_slave_0: entered promiscuous mode [ 814.898989][ T8252] hsr_slave_1: entered promiscuous mode [ 814.905610][ T8252] debugfs: 'hsr0' already exists in 'hsr' [ 814.911426][ T8252] Cannot create hsr debugfs directory [ 815.247075][ T8252] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 815.257004][ T8452] vhci_hcd: invalid port number 96 [ 815.262205][ T8452] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 815.265854][ T8252] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 815.284218][ T8252] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 815.303992][ T8252] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 815.421614][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.446864][ T8252] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.465976][T24052] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.473141][T24052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.511512][T24052] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.518630][T24052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.721322][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.757122][ T8498] netlink: 240 bytes leftover after parsing attributes in process `syz.0.30321'. [ 816.086181][ T8518] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 816.254657][ T8252] veth0_vlan: entered promiscuous mode [ 816.278171][ T8252] veth1_vlan: entered promiscuous mode [ 816.305578][ T8252] veth0_macvtap: entered promiscuous mode [ 816.323606][ T8252] veth1_macvtap: entered promiscuous mode [ 816.359992][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.385062][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.413441][T24065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.436832][T24065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.472970][T24065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.481890][T24065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.563454][ T8546] SELinux: failed to load policy [ 816.921705][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881193bcc00: rx timeout, send abort [ 816.930011][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881193bc200: rx timeout, send abort [ 816.938323][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881193bcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 816.952666][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881193bc200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 817.144479][ T8598] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 817.190328][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30364'. [ 817.199548][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30364'. [ 817.297191][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30370'. [ 817.809301][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 817.809320][ T29] audit: type=1400 audit(856.556:34888): avc: denied { create } for pid=8693 comm="syz.4.30406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.845122][ T29] audit: type=1400 audit(856.556:34889): avc: denied { write } for pid=8693 comm="syz.4.30406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.877685][ T29] audit: type=1400 audit(856.619:34890): avc: denied { execute } for pid=8697 comm="syz.5.30408" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=239080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 817.903671][ T29] audit: type=1400 audit(856.619:34891): avc: denied { create } for pid=8697 comm="syz.5.30408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 817.930415][ T8696] wireguard0: entered promiscuous mode [ 817.936019][ T8696] wireguard0: entered allmulticast mode [ 817.999303][ T29] audit: type=1400 audit(856.672:34892): avc: denied { bind } for pid=8697 comm="syz.5.30408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 818.018306][ T29] audit: type=1400 audit(856.672:34893): avc: denied { write } for pid=8697 comm="syz.5.30408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 818.110630][ T29] audit: type=1400 audit(856.861:34894): avc: denied { lock } for pid=8706 comm="syz.5.30411" path="socket:[239678]" dev="sockfs" ino=239678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 818.177545][ T29] audit: type=1400 audit(856.924:34895): avc: denied { create } for pid=8712 comm="syz.3.30414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 818.196765][ T29] audit: type=1400 audit(856.924:34896): avc: denied { connect } for pid=8712 comm="syz.3.30414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 818.198770][T25640] hid_parser_main: 62 callbacks suppressed [ 818.198801][T25640] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 818.216368][ T29] audit: type=1400 audit(856.955:34897): avc: denied { read write } for pid=8714 comm="syz.0.30415" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 818.274531][T25640] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 818.331071][ T8723] $Hÿ: renamed from bond0 (while UP) [ 818.346402][ T8723] $Hÿ: entered promiscuous mode [ 818.351768][ T8723] bond_slave_0: entered promiscuous mode [ 818.357549][ T8723] bond_slave_1: entered promiscuous mode [ 818.603638][ T8755] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 818.812764][ T8781] 9pnet_fd: p9_fd_create_unix (8781): problem connecting socket: ./file0: -2 [ 818.942111][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30459'. [ 819.036723][ T8818] netlink: 'syz.4.30464': attribute type 1 has an invalid length. [ 819.044632][ T8818] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.30464'. [ 819.058842][ T8824] binfmt_misc: register: failed to install interpreter file ./file2 [ 819.103789][ T8826] ALSA: seq fatal error: cannot create timer (-19) [ 819.301092][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.30486'. [ 819.323017][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.30486'. [ 819.398665][ T8879] vhci_hcd: invalid port number 96 [ 819.403841][ T8879] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 819.443628][ T8884] netlink: 277 bytes leftover after parsing attributes in process `syz.3.30496'. [ 819.828205][ T8941] loop0: detected capacity change from 0 to 164 [ 820.125879][ T8973] atomic_op ffff88811ee5e528 conn xmit_atomic 0000000000000000 [ 820.191225][ T8985] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 820.198244][ T8985] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 820.205317][ T8985] veth0_to_bridge: entered allmulticast mode [ 820.211968][ T8985] veth0_to_bridge: entered promiscuous mode [ 820.406786][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30554'. [ 820.420909][ T9019] vxlan2: entered promiscuous mode [ 820.429383][T24039] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.438004][T24039] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.447550][ T9022] xt_hashlimit: max too large, truncated to 1048576 [ 820.453092][T24039] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.465791][T24039] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.600065][ T9043] netlink: 'syz.5.30567': attribute type 3 has an invalid length. [ 820.628571][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30569'. [ 820.638317][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30569'. [ 820.746026][ T9067] loop0: detected capacity change from 0 to 128 [ 820.799843][ T9074] loop0: detected capacity change from 0 to 512 [ 820.813760][ T9074] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 820.826676][ T9074] EXT4-fs (loop0): orphan cleanup on readonly fs [ 820.833648][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 820.847459][ T9074] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 820.857242][ T9074] EXT4-fs (loop0): 1 orphan inode deleted [ 820.863571][ T9074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 820.879475][ T9077] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 820.888026][ T9074] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 820.898564][ T9074] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 820.909471][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 820.923564][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 820.939115][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 820.961236][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 820.983925][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 820.999854][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 821.013569][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 821.027287][ T9074] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.30581: Block bitmap for bg 0 marked uninitialized [ 821.054468][ T3647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.160308][ T9094] netlink: 'syz.0.30591': attribute type 7 has an invalid length. [ 821.280294][ T9106] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 821.286863][ T9106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 821.294724][ T9106] vhci_hcd vhci_hcd.0: Device attached [ 821.343044][ T9112] vhci_hcd: connection closed [ 821.354836][T24016] vhci_hcd: stop threads [ 821.363993][T24016] vhci_hcd: release socket [ 821.368430][T24016] vhci_hcd: disconnect device [ 821.623216][ T9136] netlink: 5452 bytes leftover after parsing attributes in process `syz.7.30608'. [ 821.704288][ T9147] netlink: 256 bytes leftover after parsing attributes in process `syz.7.30613'. [ 822.065468][ T9187] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 822.077783][ T9186] netlink: 'syz.4.30629': attribute type 21 has an invalid length. [ 822.168945][ T9198] program syz.5.30634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 822.233588][T24039] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.253188][T24039] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.277329][T24039] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.301294][T24039] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.594221][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 822.594302][ T29] audit: type=1326 audit(861.575:35264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.630024][ T9254] bridge0: port 3(gretap0) entered blocking state [ 822.636624][ T9254] bridge0: port 3(gretap0) entered disabled state [ 822.645702][ T9254] gretap0: entered allmulticast mode [ 822.666074][ T29] audit: type=1326 audit(861.575:35265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.670366][ T9254] gretap0: entered promiscuous mode [ 822.689113][ T29] audit: type=1326 audit(861.575:35266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.689150][ T29] audit: type=1326 audit(861.575:35267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.689183][ T29] audit: type=1326 audit(861.575:35268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.717555][ T9254] bridge0: port 3(gretap0) entered blocking state [ 822.740349][ T29] audit: type=1326 audit(861.575:35269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.763346][ T9254] bridge0: port 3(gretap0) entered forwarding state [ 822.769747][ T29] audit: type=1326 audit(861.575:35270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.769790][ T29] audit: type=1326 audit(861.575:35271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.845311][ T29] audit: type=1326 audit(861.575:35272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 822.868354][ T29] audit: type=1326 audit(861.575:35273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.30661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e26eefc9 code=0x7ffc0000 [ 823.373692][ T9323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.453606][ T9329] loop0: detected capacity change from 0 to 128 [ 823.490910][ T9329] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 823.547562][ T3647] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 823.686416][ T9349] netlink: 'syz.4.30701': attribute type 12 has an invalid length. [ 823.964138][ T9375] netlink: 'syz.4.30717': attribute type 2 has an invalid length. [ 824.044254][ T9385] __nla_validate_parse: 8 callbacks suppressed [ 824.044272][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30721'. [ 824.119536][ T9396] batadv_slave_1: entered promiscuous mode [ 824.126269][ T9394] batadv_slave_1: left promiscuous mode [ 824.215089][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.5.30735'. [ 824.337723][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.30744'. [ 824.348623][T27040] IPVS: starting estimator thread 0... [ 824.445701][ T9439] IPVS: using max 2304 ests per chain, 115200 per kthread [ 824.831007][ T9507] lo speed is unknown, defaulting to 1000 [ 825.268955][ T9580] 9pnet_fd: Insufficient options for proto=fd [ 825.365925][ T9590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9590 comm=syz.5.30813 [ 825.378590][ T9590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9590 comm=syz.5.30813 [ 825.427677][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30817'. [ 825.469024][ T9608] netlink: 536 bytes leftover after parsing attributes in process `syz.5.30822'. [ 825.478499][ T9608] netlink: 104 bytes leftover after parsing attributes in process `syz.5.30822'. [ 825.600846][ T9630] sd 0:0:1:0: device reset [ 825.732052][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.739545][ T9653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.749113][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.756690][ T9653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.806334][ T9661] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 825.924487][ T9677] netlink: 'syz.7.30855': attribute type 21 has an invalid length. [ 825.933434][ T9677] netlink: 132 bytes leftover after parsing attributes in process `syz.7.30855'. [ 825.942743][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.7.30855'. [ 825.960599][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30857'. [ 825.970306][ T9681] netlink: 32 bytes leftover after parsing attributes in process `syz.5.30857'. [ 826.101643][ T9700] netlink: 'syz.0.30866': attribute type 1 has an invalid length. [ 826.122416][ T9700] bond3: entered promiscuous mode [ 826.135079][ T9700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 826.157965][ T9700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 826.167193][ T9700] bond3: (slave bond4): making interface the new active one [ 826.174893][ T9700] bond4: entered promiscuous mode [ 826.182135][ T9700] bond3: (slave bond4): Enslaving as an active interface with an up link [ 826.295257][T17098] kernel write not supported for file bpf-prog (pid: 17098 comm: kworker/1:14) [ 826.332347][T24016] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 826.349627][T24016] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 826.363374][T24016] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 826.372052][T24016] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 826.466495][ T9725] lo speed is unknown, defaulting to 1000 [ 826.904433][ T9762] IPVS: Error connecting to the multicast addr [ 827.060625][ T9776] block device autoloading is deprecated and will be removed. [ 827.140915][ T9790] loop7: detected capacity change from 0 to 1024 [ 827.148533][ T9790] EXT4-fs (loop7): filesystem is read-only [ 827.156200][ T9790] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 827.166910][ T9790] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 827.178126][ T9790] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.30900: inode #1: comm syz.7.30900: iget: illegal inode # [ 827.191927][ T9790] EXT4-fs (loop7): no journal found [ 827.197176][ T9790] EXT4-fs (loop7): can't get journal size [ 827.205554][ T9790] EXT4-fs (loop7): failed to initialize system zone (-22) [ 827.212803][ T9790] EXT4-fs (loop7): mount failed [ 827.395132][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 827.395153][ T29] audit: type=1326 audit(866.614:35540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.7.30915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 827.465009][ T29] audit: type=1326 audit(866.614:35541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.7.30915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 827.488124][ T29] audit: type=1326 audit(866.656:35542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.7.30915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 827.511179][ T29] audit: type=1326 audit(866.656:35543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.7.30915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 827.534194][ T29] audit: type=1326 audit(866.656:35544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9821 comm="syz.7.30915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303fdefc9 code=0x7ffc0000 [ 827.827001][ T9858] loop7: detected capacity change from 0 to 512 [ 827.835239][ T9858] EXT4-fs (loop7): orphan cleanup on readonly fs [ 827.845205][ T29] audit: type=1326 audit(867.086:35545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.5.30933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 827.868462][ T29] audit: type=1326 audit(867.086:35546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.5.30933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 827.891503][ T29] audit: type=1326 audit(867.086:35547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.5.30933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 827.906992][ T9858] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 827.925128][ T9858] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 827.934588][ T9858] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.30931: Failed to acquire dquot type 1 [ 827.947537][ T9858] EXT4-fs (loop7): 1 truncate cleaned up [ 827.955542][ T9858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 827.977402][ T9869] lo speed is unknown, defaulting to 1000 [ 828.007993][T30386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.112162][ T9877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 828.722836][ T9933] netlink: 'syz.3.30965': attribute type 22 has an invalid length. [ 828.784262][ T9940] netlink: 'syz.3.30968': attribute type 1 has an invalid length. [ 828.838743][ T9946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=9946 comm=syz.4.30971 [ 828.975973][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 828.983657][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 828.991344][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 828.998745][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 829.006216][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 829.013657][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 829.021167][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 829.028643][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 829.036087][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 829.043615][T25641] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 829.088767][T25641] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 829.329548][ T9993] __nla_validate_parse: 10 callbacks suppressed [ 829.329568][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.30989'. [ 829.344914][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.30989'. [ 829.390869][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.7.30995'. [ 829.599063][T10015] netlink: 'syz.5.31011': attribute type 10 has an invalid length. [ 830.012300][T10025] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 830.050254][T10027] lo speed is unknown, defaulting to 1000 [ 830.166890][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31015'. [ 830.466913][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 830.610879][T10084] loop0: detected capacity change from 0 to 128 [ 830.613133][T10081] lo speed is unknown, defaulting to 1000 [ 830.656896][T10084] bio_check_eod: 16454 callbacks suppressed [ 830.656970][T10084] syz.0.31035: attempt to access beyond end of device [ 830.656970][T10084] loop0: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 830.700523][T10084] syz.0.31035: attempt to access beyond end of device [ 830.700523][T10084] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 830.728902][T10084] syz.0.31035: attempt to access beyond end of device [ 830.728902][T10084] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 830.763658][T10084] syz.0.31035: attempt to access beyond end of device [ 830.763658][T10084] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 830.792217][T10084] syz.0.31035: attempt to access beyond end of device [ 830.792217][T10084] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 830.828339][T10084] syz.0.31035: attempt to access beyond end of device [ 830.828339][T10084] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 830.845966][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31039'. [ 830.856328][T10084] syz.0.31035: attempt to access beyond end of device [ 830.856328][T10084] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 830.884332][T10084] syz.0.31035: attempt to access beyond end of device [ 830.884332][T10084] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 830.895201][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31039'. [ 830.922997][T10084] syz.0.31035: attempt to access beyond end of device [ 830.922997][T10084] loop0: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 831.002982][T10097] macvtap0: refused to change device tx_queue_len [ 831.057990][T10101] loop0: detected capacity change from 0 to 164 [ 831.078085][T10101] syz.0.31044: attempt to access beyond end of device [ 831.078085][T10101] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 831.164941][T10110] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 831.299205][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31053'. [ 831.344797][T10122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31054'. [ 831.912250][T10161] vlan0: entered allmulticast mode [ 832.026916][T10171] rdma_op ffff888118c0e580 conn xmit_rdma 0000000000000000 [ 832.334593][T10218] netlink: '': attribute type 3 has an invalid length. [ 832.343673][T10215] 9pnet_fd: p9_fd_create_unix (10215): problem connecting socket: ./file0: -2 [ 832.490473][T10236] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 832.674886][T10261] netlink: 'syz.0.31118': attribute type 2 has an invalid length. [ 832.682791][T10261] netlink: 48 bytes leftover after parsing attributes in process `syz.0.31118'. [ 832.719266][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31119'. [ 832.767323][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 832.767361][ T29] audit: type=1400 audit(872.251:35709): avc: denied { listen } for pid=10268 comm="syz.7.31122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 832.796404][ T29] audit: type=1400 audit(872.282:35710): avc: denied { accept } for pid=10268 comm="syz.7.31122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 832.827446][ T29] audit: type=1326 audit(872.314:35711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.31123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 832.850728][ T29] audit: type=1326 audit(872.314:35712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.31123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 832.874138][ T29] audit: type=1326 audit(872.314:35713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.31123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 832.885021][T10278] loop0: detected capacity change from 0 to 8192 [ 832.897298][ T29] audit: type=1326 audit(872.314:35714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.31123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 832.926813][ T29] audit: type=1326 audit(872.314:35715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.31123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 832.949932][ T29] audit: type=1326 audit(872.314:35716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.31123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 832.973055][ T29] audit: type=1326 audit(872.314:35717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.31123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 832.996197][ T29] audit: type=1326 audit(872.314:35718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.31123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccba5efc9 code=0x7ffc0000 [ 833.163279][T10278] ================================================================== [ 833.171443][T10278] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 833.178589][T10278] [ 833.180949][T10278] write to 0xffff88814ddd8598 of 2 bytes by task 10282 on cpu 1: [ 833.188671][T10278] fat16_ent_put+0x28/0x60 [ 833.193100][T10278] fat_alloc_clusters+0x4d1/0xa80 [ 833.198137][T10278] fat_get_block+0x258/0x5e0 [ 833.202742][T10278] __block_write_begin_int+0x400/0xf90 [ 833.208255][T10278] cont_write_begin+0x5fc/0x970 [ 833.213121][T10278] fat_write_begin+0x4f/0xe0 [ 833.217723][T10278] generic_perform_write+0x184/0x490 [ 833.223031][T10278] __generic_file_write_iter+0x9e/0x120 [ 833.228587][T10278] generic_file_write_iter+0x8d/0x2f0 [ 833.233972][T10278] do_iter_readv_writev+0x4a1/0x540 [ 833.239190][T10278] vfs_writev+0x2df/0x8b0 [ 833.243539][T10278] __se_sys_pwritev2+0xfc/0x1c0 [ 833.248403][T10278] __x64_sys_pwritev2+0x67/0x80 [ 833.253263][T10278] x64_sys_call+0x2c59/0x3000 [ 833.257948][T10278] do_syscall_64+0xd2/0x200 [ 833.262467][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.268369][T10278] [ 833.270704][T10278] read to 0xffff88814ddd8400 of 512 bytes by task 10278 on cpu 0: [ 833.278512][T10278] fat_mirror_bhs+0x1df/0x320 [ 833.283210][T10278] fat_ent_write+0xd0/0xe0 [ 833.287631][T10278] fat_chain_add+0x15d/0x440 [ 833.292262][T10278] fat_get_block+0x46c/0x5e0 [ 833.296883][T10278] __block_write_begin_int+0x400/0xf90 [ 833.302367][T10278] cont_write_begin+0x5fc/0x970 [ 833.307241][T10278] fat_write_begin+0x4f/0xe0 [ 833.311856][T10278] cont_write_begin+0x1b0/0x970 [ 833.316738][T10278] fat_write_begin+0x4f/0xe0 [ 833.321370][T10278] generic_cont_expand_simple+0xb0/0x150 [ 833.327125][T10278] fat_cont_expand+0x3e/0x170 [ 833.331828][T10278] fat_setattr+0x2a5/0x8a0 [ 833.336261][T10278] notify_change+0x872/0x8f0 [ 833.340865][T10278] do_ftruncate+0x34b/0x450 [ 833.345387][T10278] __x64_sys_ftruncate+0x68/0xc0 [ 833.350347][T10278] x64_sys_call+0x2d61/0x3000 [ 833.355035][T10278] do_syscall_64+0xd2/0x200 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 833.359552][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.365451][T10278] [ 833.367795][T10278] Reported by Kernel Concurrency Sanitizer on: [ 833.373954][T10278] CPU: 0 UID: 0 PID: 10278 Comm: syz.0.31126 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 833.385419][T10278] Tainted: [W]=WARN [ 833.389225][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.399297][T10278] ================================================================== [ 833.653291][T24052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.791692][T24052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.868190][T24052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.967425][T24052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.045625][T24052] gretap0: left allmulticast mode [ 834.050774][T24052] gretap0: left promiscuous mode [ 834.055904][T24052] bridge0: port 3(gretap0) entered disabled state [ 834.063079][T24052] bridge_slave_1: left allmulticast mode [ 834.068767][T24052] bridge_slave_1: left promiscuous mode [ 834.074480][T24052] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.082556][T24052] bridge_slave_0: left allmulticast mode [ 834.088228][T24052] bridge_slave_0: left promiscuous mode [ 834.093947][T24052] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.184135][T24052] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.193230][T24052] bond_slave_0: left promiscuous mode [ 834.200079][T24052] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.208955][T24052] bond_slave_1: left promiscuous mode [ 834.215340][T24052] $Hÿ (unregistering): Released all slaves [ 834.281826][T24052] hsr_slave_0: left promiscuous mode [ 834.287559][T24052] hsr_slave_1: left promiscuous mode [ 834.296985][T24052] veth1_macvtap: left promiscuous mode [ 834.302577][T24052] veth0_macvtap: left promiscuous mode [ 834.308265][T24052] veth1_vlan: left promiscuous mode [ 834.313488][T24052] veth0_vlan: left promiscuous mode [ 834.379723][T24052] team0 (unregistering): Port device team_slave_1 removed [ 834.389544][T24052] team0 (unregistering): Port device team_slave_0 removed [ 834.633059][T24052] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 834.642758][T24052] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 834.652590][T24052] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.678661][T24052] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 834.688588][T24052] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 834.698464][T24052] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.735700][T24052] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 834.745404][T24052] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 834.755185][T24052] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.792576][T24052] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 834.802380][T24052] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 834.812184][T24052] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.853721][T24052] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.863576][T24052] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.897112][T24052] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.906937][T24052] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.954069][T24052] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.963882][T24052] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.001849][T24052] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.011667][T24052] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.091352][T24052] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.101184][T24052] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 835.135260][T24052] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.145066][T24052] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 835.192435][T24052] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.202326][T24052] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 835.268365][T24052] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.278369][T24052] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 835.321264][T24052] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.331671][T24052] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.374704][T24052] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.385014][T24052] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.412829][T24052] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.423169][T24052] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.450809][T24052] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.461133][T24052] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.528823][T24052] bridge_slave_1: left allmulticast mode [ 835.534534][T24052] bridge_slave_1: left promiscuous mode [ 835.540150][T24052] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.548155][T24052] bridge_slave_0: left promiscuous mode [ 835.553899][T24052] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.564207][T24052] veth0_to_bridge: left allmulticast mode [ 835.569982][T24052] veth0_to_bridge: left promiscuous mode [ 835.575886][T24052] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 835.584007][T24052] bridge_slave_1: left allmulticast mode [ 835.589657][T24052] bridge_slave_1: left promiscuous mode [ 835.595475][T24052] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.603495][T24052] bridge_slave_0: left allmulticast mode [ 835.609145][T24052] bridge_slave_0: left promiscuous mode [ 835.614980][T24052] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.624485][T24052] batman_adv: batadv0: Interface deactivated: vxlan0 [ 835.803114][T24052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.813040][T24052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.822563][T24052] bond0 (unregistering): Released all slaves [ 835.831067][T24052] bond1 (unregistering): Released all slaves [ 835.839326][T24052] bond2 (unregistering): Released all slaves [ 835.848407][T24052] bond3 (unregistering): (slave bond4): Releasing backup interface [ 835.856336][T24052] bond4 (unregistering): left promiscuous mode [ 835.863113][T24052] bond3 (unregistering): Released all slaves [ 835.871896][T24052] bond4 (unregistering): Released all slaves [ 835.900443][T24052] batman_adv: batadv0: Removing interface: vxlan0 [ 835.908498][T24052] batman_adv: batadv0: Interface deactivated: macvtap1 [ 835.915540][T24052] bridge0 (unregistering): left allmulticast mode [ 835.923184][T24052] batman_adv: batadv0: Removing interface: macvtap1 [ 835.973754][T24052] bond0 (unregistering): Released all slaves [ 835.982567][T24052] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 835.990573][T24052] vxcan3: left promiscuous mode [ 835.996343][T24052] bond1 (unregistering): Released all slaves [ 836.201958][T24052] bond1 (unregistering): Released all slaves [ 836.210278][T24052] bond2 (unregistering): Released all slaves [ 836.259943][T24052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.269840][T24052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.279447][T24052] bond0 (unregistering): Released all slaves [ 836.314758][T24052] tipc: Left network mode [ 836.322862][T24052] IPVS: stopping backup sync thread 8423 ... [ 836.456067][T24052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.463567][T24052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.471267][T24052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.478788][T24052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.488696][T24052] hsr_slave_0: left promiscuous mode [ 836.494259][T24052] hsr_slave_1: left promiscuous mode [ 836.500081][T24052] veth1_to_bridge: left promiscuous mode [ 836.507359][T24052] hsr_slave_0: left promiscuous mode [ 836.512987][T24052] hsr_slave_1: left promiscuous mode [ 836.518632][T24052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.526035][T24052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.533533][T24052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.541013][T24052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.555653][T24052] veth1_macvtap: left promiscuous mode [ 836.561181][T24052] veth0_macvtap: left promiscuous mode [ 836.566762][T24052] veth1_vlan: left promiscuous mode [ 836.571997][T24052] veth0_vlan: left promiscuous mode [ 836.577710][T24052] veth1_macvtap: left promiscuous mode [ 836.583545][T24052] veth0_macvtap: left promiscuous mode [ 836.589030][T24052] veth1_vlan: left promiscuous mode [ 836.594261][T24052] veth0_vlan: left promiscuous mode [ 836.599700][T24052] veth1_macvtap: left promiscuous mode [ 836.605235][T24052] veth0_macvtap: left promiscuous mode [ 836.709800][T24052] team0 (unregistering): Port device team_slave_1 removed [ 836.719607][T24052] team0 (unregistering): Port device team_slave_0 removed [ 836.933690][T24052] team0 (unregistering): Port device team_slave_1 removed [ 836.943373][T24052] team0 (unregistering): Port device team_slave_0 removed [ 837.743418][T24052] IPVS: stop unused estimator thread 0... [ 837.749624][T24052] IPVS: stop unused estimator thread 0... [ 837.791070][T24052] ------------[ cut here ]------------ [ 837.796673][T24052] WARNING: CPU: 1 PID: 24052 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 837.806396][T24052] Modules linked in: [ 837.810313][T24052] CPU: 1 UID: 0 PID: 24052 Comm: kworker/u8:36 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 837.822061][T24052] Tainted: [W]=WARN [ 837.825860][T24052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 837.836065][T24052] Workqueue: netns cleanup_net [ 837.840848][T24052] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 837.846483][T24052] Code: 48 8d bb 70 0e 00 00 e8 a5 a2 b7 fc 48 8b bb 70 0e 00 00 e8 29 4e c4 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 78 4b 9c fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 6a 4b 9c fc 90 0f 0b 90 4c 89 f7 e8 6e [ 837.866130][T24052] RSP: 0018:ffffc900024ebc60 EFLAGS: 00010293 [ 837.872211][T24052] RAX: ffffffff84baf408 RBX: ffff88810c0ac680 RCX: ffff888104363180 [ 837.880192][T24052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810c0ad4c0 [ 837.888174][T24052] RBP: ffffffff86c91000 R08: 0001ffff8684802f R09: 0000000000000000 [ 837.896160][T24052] R10: ffffc900024ebbe8 R11: 0001c900024ebbe8 R12: ffffffff86c91020 [ 837.904164][T24052] R13: ffff88810c0ac6a8 R14: ffff88810c0ad4c0 R15: ffff88810c0ac680 [ 837.912259][T24052] FS: 0000000000000000(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 837.921284][T24052] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.927903][T24052] CR2: 0000001b2fe1eff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 837.935883][T24052] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 837.943897][T24052] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 837.951873][T24052] Call Trace: [ 837.955215][T24052] [ 837.958158][T24052] xfrm_net_exit+0x2d/0x60 [ 837.962626][T24052] ops_undo_list+0x27b/0x410 [ 837.967264][T24052] cleanup_net+0x2f4/0x4f0 [ 837.971688][T24052] process_scheduled_works+0x4ce/0x9d0 [ 837.977217][T24052] worker_thread+0x582/0x770 [ 837.981842][T24052] kthread+0x489/0x510 [ 837.985943][T24052] ? finish_task_switch+0xad/0x2b0 [ 837.991106][T24052] ? __pfx_worker_thread+0x10/0x10 [ 837.996253][T24052] ? __pfx_kthread+0x10/0x10 [ 838.000873][T24052] ret_from_fork+0x122/0x1b0 [ 838.005482][T24052] ? __pfx_kthread+0x10/0x10 [ 838.010074][T24052] ret_from_fork_asm+0x1a/0x30 [ 838.014856][T24052] [ 838.017919][T24052] ---[ end trace 0000000000000000 ]--- [ 838.024043][T24052] ------------[ cut here ]------------ [ 838.029592][T24052] WARNING: CPU: 1 PID: 24052 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0 [ 838.039279][T24052] Modules linked in: [ 838.043185][T24052] CPU: 1 UID: 0 PID: 24052 Comm: kworker/u8:36 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 838.054824][T24052] Tainted: [W]=WARN [ 838.058713][T24052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 838.068780][T24052] Workqueue: netns cleanup_net [ 838.073551][T24052] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 838.079188][T24052] Code: a2 b7 fc 4d 8b 3e e9 06 ff ff ff e8 51 4b 9c fc 90 0f 0b 90 4c 89 f7 e8 55 a2 b7 fc 4d 8b 3e e9 24 ff ff ff e8 38 4b 9c fc 90 <0f> 0b 90 4c 89 f7 e8 3c a2 b7 fc 4d 8b 3e e9 42 ff ff ff e8 1f 4b [ 838.098859][T24052] RSP: 0018:ffffc900024ebc60 EFLAGS: 00010293 [ 838.104921][T24052] RAX: ffffffff84baf448 RBX: ffff88810c0ac680 RCX: ffff888104363180 [ 838.112898][T24052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811ae99200 [ 838.120877][T24052] RBP: 0000000000000040 R08: 000188810c0ad4df R09: 0000000000000000 [ 838.128890][T24052] R10: ffff88811ae991c0 R11: 000188811ae9927f R12: ffffffff86c91020 [ 838.136929][T24052] R13: ffff88810c0ac6a8 R14: ffff88810c0ad4d8 R15: ffff88811ae99200 [ 838.144951][T24052] FS: 0000000000000000(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 838.153891][T24052] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.160489][T24052] CR2: 0000001b2fe1eff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 838.168478][T24052] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 838.176463][T24052] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 838.184533][T24052] Call Trace: [ 838.187810][T24052] [ 838.190741][T24052] xfrm_net_exit+0x2d/0x60 [ 838.195203][T24052] ops_undo_list+0x27b/0x410 [ 838.199798][T24052] cleanup_net+0x2f4/0x4f0 [ 838.204261][T24052] process_scheduled_works+0x4ce/0x9d0 [ 838.209756][T24052] worker_thread+0x582/0x770 [ 838.214360][T24052] kthread+0x489/0x510 [ 838.218427][T24052] ? finish_task_switch+0xad/0x2b0 [ 838.223595][T24052] ? __pfx_worker_thread+0x10/0x10 [ 838.228790][T24052] ? __pfx_kthread+0x10/0x10 [ 838.233468][T24052] ret_from_fork+0x122/0x1b0 [ 838.238143][T24052] ? __pfx_kthread+0x10/0x10 [ 838.242791][T24052] ret_from_fork_asm+0x1a/0x30 [ 838.247569][T24052] [ 838.250597][T24052] ---[ end trace 0000000000000000 ]--- [ 838.256766][T24052] ------------[ cut here ]------------ [ 838.262222][T24052] WARNING: CPU: 1 PID: 24052 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0 [ 838.271915][T24052] Modules linked in: [ 838.275807][T24052] CPU: 1 UID: 0 PID: 24052 Comm: kworker/u8:36 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 838.287449][T24052] Tainted: [W]=WARN [ 838.291263][T24052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 838.301331][T24052] Workqueue: netns cleanup_net [ 838.306184][T24052] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 838.311747][T24052] Code: a2 b7 fc 4d 8b 3e e9 24 ff ff ff e8 38 4b 9c fc 90 0f 0b 90 4c 89 f7 e8 3c a2 b7 fc 4d 8b 3e e9 42 ff ff ff e8 1f 4b 9c fc 90 <0f> 0b 90 4c 89 f7 e8 23 a2 b7 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 838.331453][T24052] RSP: 0018:ffffc900024ebc60 EFLAGS: 00010293 [ 838.337544][T24052] RAX: ffffffff84baf461 RBX: ffff88810c0ac680 RCX: ffff888104363180 [ 838.345527][T24052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811ae99280 [ 838.353509][T24052] RBP: 0000000000000040 R08: 000188810c0ad4d7 R09: 0000000000000000 [ 838.361480][T24052] R10: ffff88811ae99240 R11: 000188811ae9923f R12: ffffffff86c91020 [ 838.369499][T24052] R13: ffff88810c0ac6a8 R14: ffff88810c0ad4d0 R15: ffff88811ae99280 [ 838.377509][T24052] FS: 0000000000000000(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 838.386456][T24052] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.393051][T24052] CR2: 0000001b2fe1eff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 838.401046][T24052] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 838.409017][T24052] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 838.417003][T24052] Call Trace: [ 838.420294][T24052] [ 838.423257][T24052] xfrm_net_exit+0x2d/0x60 [ 838.427685][T24052] ops_undo_list+0x27b/0x410 [ 838.432343][T24052] cleanup_net+0x2f4/0x4f0 [ 838.436771][T24052] process_scheduled_works+0x4ce/0x9d0 [ 838.442294][T24052] worker_thread+0x582/0x770 [ 838.446943][T24052] kthread+0x489/0x510 [ 838.451070][T24052] ? finish_task_switch+0xad/0x2b0 [ 838.456187][T24052] ? __pfx_worker_thread+0x10/0x10 [ 838.461313][T24052] ? __pfx_kthread+0x10/0x10 [ 838.465930][T24052] ret_from_fork+0x122/0x1b0 [ 838.470592][T24052] ? __pfx_kthread+0x10/0x10 [ 838.475185][T24052] ret_from_fork_asm+0x1a/0x30 [ 838.479977][T24052] [ 838.483002][T24052] ---[ end trace 0000000000000000 ]---