last executing test programs: 6m16.481534107s ago: executing program 32 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 5m48.991716981s ago: executing program 33 (id=1163): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 3m55.219086855s ago: executing program 6 (id=6824): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e) 3m55.176242356s ago: executing program 6 (id=6830): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 3m55.130391687s ago: executing program 6 (id=6836): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x2130, 0x10000, 0x0, 0x1, 0x0, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 3m54.24807193s ago: executing program 6 (id=6879): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 3m54.24404958s ago: executing program 6 (id=6881): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xd0}}], 0x1, 0x0) close(r2) 3m54.18832818s ago: executing program 34 (id=6883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) writev(r3, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="a4f9c75ce5faec13c7683334664a337a96cb0e15869ff47948e2d3594a99b77ada08c33e25dee70fd4aa06e7663286e33ee5544f8287f4577dab231ca2f9635713b099aed18da796c0c2d2f5c2a13fb24f72ce76f6c3d888d0ff8a67b8355ab3af729ef04c4837ea8dc9d9cf13281d299dc99c28460f7667e6dfcd93f00c43eff02fdb05f72385a74755e3307d03b5e31b52a1ccb5d2bbb9d2f0b0aa7550cadcc26627156f87bb44bf5ff1667183fd654da1e2b35196d1d0651d831e5530e2f0386bc8c63ff1cd71c65d7583eb0228a0b0f4996b15716f0c862617133a64d22606296e7f73b17c319bdb0280bc1f28f00a48d5838acc30182c95d0083c1b1dccd5320c847051fa3d57c75b1b5628248e9834f5283ccb2eb6d013b7e97225a01f82e4c384d33c69d77755b1c340f8da44e87f13a1cb7ef779f68aee5034b7207b675fc76839475d3dc2661bd54cbf57b1535c7e4b7062a315beb469c505882c23adb120810ecc6f895720e498c98adadde8993edba182e68b62498afdee239e22207c3cc5e208a1d519793638d565fcf8f1fdc560909802ee3c8a479dd1c64ca94e36d74ad83ecd32eec2f93fd70d2c789e8aa8a58afcff177434956089fdcf88024edc97158c8d91b313a88e2973b32b65158a2f832b4515c2ba79f5242a3bcc63757e4d86fda87b9fa6179a9b2bed13f6a96d7d9ce87dcf53a08dd646f50d9dedce522de5217af2ae9d3a5c324e1c94ac1863177b824d15705c72a1d31568d8d9f7ea9bf06a8e0c8e0371d35becc2896be68d95d574534be552a5923fde8fac67e42b116b0d6801f7081263f0f9002ade20075eb4aa62386f253609655c4dfcab1bb963465d766a7ef1e9d00f3902c2eebbc6a6210246b76b2b7a2f318104b5e6acd863b98891bb366931f0307406dd0875cbbf4dd6601e813d96d83238bd0fa88aab97ed382ec2b00e7f093f10799c1b1cacce0eb1c69d32782ab27532c0dbea3d7bf5edc2e68ce14d04a889a6276d529f7722a68bf4747181a7999a6d62a35a411a815209d28c6aa5ebf6f8d90d561f0541341f42b67b6c50508dea6608b07a1dbedd04572d3c2e4506ff59445b5a3ecf82a4c4b6f1df0f31bc8f8c153f54ff74dfa20849f31473e5e05da4fbb619cd7262000d60771432a516ac372e12c8b2d966014752a6ef27e8d261b168cf9af53d68b5de9b269496c8114e7e0ec5d65deba477afafe7ba00ca418c3289eae530a144f52e7413477e35db5cf6b05884a7b1409ae38adabe0d1deebb280bc5ec35f94ea4e1b102874625ba65a850f06d3cd0dd0506aa1322859c12e2988aea106b27d61bfa914eed771ad485916b33274d3b9ebb9b7d3a1ebe1710f33c4f0fa97528181c78d34e49d66b4af2cc27c948e98e65592b48600deea7b97cfe976653a020a1aa1955f70f16b243bcbd45825c8cf6501972ec74a43d6690289a16dea63a23c248d9036fa171c3a690fd29cc5da91a6797315148a5f3b8c0e6023f40a46989a363ce4e5eb6ceecda0488dfc81a8e4cc0e8fdb5dc17ba4a3fb1d725420871205602e9c421fa8fb5be1957be05bc68486b4ed7588ed532d024439c9ba271efc1031ff9fdc55716726c15a19a62c4dd1b3d3460bd81a24aef083748b839c36b3447160f36d6c010b2af2e9ab7b82dd1600ab9b249b3fa905888aa5fa87bcf8d432e92af69e38347bba6773ee586962c248a1c7871fbccdf61ebe3be942e21e314e2bfbee135a649394641744105f5564d8cd2a5098f84b2075c7b67d205d1bdb54eb2308b66e24a8480ecb5bba60fde4bb78fe34817a81e96bb83cc37e19e7839c55fca388aa61d6718055a5bf2c9e4b619af0ac09050ef766c2f3624961efc203d0e2225c6b9269a515b5465e39ae5830bf66ca1dac95bb9e3d3de9636e720cf80df2ab43149670bd72917dfd5bc252ffe5b5a17014f3f95b4185db219448bebed2f05c8389d06ee60b058dbefa1e6ce630c68ed11383df6d0101158b330373f1b4a95d7d1b448609c40655a80ec9cd1368f68b525fea8e21461976952ae6a3916e855d8de49c2a1a607b8247fd8ba32bbdd429623e34d8947d80129cbb737711ab9908cb87902babde1941619d6d323aec54a99a042c438f46e4d3a2d3aeea4f26d83a791d5a96d6c04cb584042a19bba545c44adec7f5d6718769fcc1236b467b12031358ec3f21b4def005e2fda16f560dc055648bd2e5b5555690467f2fcd29183580966bb3a683856006c80ad617a68568332b461e01650f2bab983bb872e254b64b0f07b9f76a11861f2c3de70e9f3cc9f596eaff8347140f68610e0e778d75fc9b87313e525b2412a0fc35ef3821e814d6e2c56c7d462f09880582a8931325ac7a3e02417fb58f0d972427cf728190071ee8cfe88117365a862f20cf3d4205489afb4b366fb6b1f9c25bbf7d587ed41e3ae101ae7e543a25a966e99bd51b4da07ee3a56b99ee97364eea8d275a67a76112f02690bf10599cdda840b1b39befc2159b0f574678e260667ff9bf85ea4b736a1212e3217cbad4627ce85d02e69bd40c7f5a725d4a5fefc36f837c0d1e0221cfe14f0aed6d9e21d224144bdd6b44211aba0820470d0965a5f5ab57ecf779a12ddbc6e17b5d00b5cd22a35fb13abf3bd667d38e1cccc0b98c997cf7216126d620dcf86372243d8fa006afda3cfb42c564676d6c8fd8ecc32bf6ac6f9978297ef1aa7e97f145cd6d8490be49c01a543470795c6a82228c7d33366dc36809ed33490fe9a08ebd9ee27c09211fdd752cd32ba5697d5b229533b6588210a4e2e3755d9ee4a687e591d39e1b0a6e4058db67981b5ff7a983d1f92fc7d3cfdc9baa1ec3f2b3026caaf41279425e8edbf3b5248c67763054b57601ab9775641aaa273221f019309d5fef778b5d239b1e1b47d958064c3d53ad0f02c1fe20040ad7000e123157eeffdd6cfc9b36e6a517a626cdb9600cfad8f6af0fbf4f565f282204de2546fd97673bd0ac4954dffa7eb531e2ce88729da1c80294b9e74c5ef5070efa1a9e5daa0fa436cd7abff4c36243744a3f1d0c1a2851143362ada81f303acb9839f04a4311e52f8d199b167988a1adba156d6e152b76b5d4359f66d5e04582976fb6875ddf814e28157eeed0b5bcb0384250c9d10a9043be1ea9e02faf0a3f226a16a4ecb47f21fda4b456f99e2aef8f0c9ecd4701ac0832cfc40a4290286da25a5d87cd3dd88d6a0ea27076e2f248144cd64432c7fba88b469111d1007c0ac41d4c4ff7579b100c30cc66a2a61ff2b23d7d2678e74f59b1d34aca8c19f22972ba69b4ba819dc2b879ab8a052f58877ef1b7acf1dd9703abd7286e310ccf0749cdeff0bc1b32938ca80ff109fb17f41a6924ae340059ac472c430465d4ba38ac04d16b941a6c9c7501a2444f3590db0b696510aaf46f840a2d0e2c01d16475342b8e27e977c672f65786e9757a746be652321091402b4ac572c4e2f3610252db85dc4ee9622c2c72f6d8ef28109f8158ff3344a42aa04adac192761041dc92e1053ab44c05481fe3b4ce842d2ae1dfa389d77324c5a1425de45123f061c7a9d1398b26be8cdf199cc38e0dca5cf45cde1ba6c819efca55c0a06c75d870d02581243676c2f056ee149467a0ef463d4f267986c9ab29eccec654b2ed1b95998540512213ae6e8912e7ccdda90ad4e559c19e0a516e3e6386e2704d7b66a0c9675b71a4ca099cd1b97cee35a73a34b1f383a14410557191443f242d640bb4125a160a72553b93ffd137945fde22811c8390a2411ecf31197f6e6331b65f1635aefd4cb1540078515c2f3103a343a7f8323e94387900e026c62235bdd611a78f52812d4fc987dd20d7941a52bf61b8a2e51163f869f0a174c0e65a3337e42f2f99abe74ced5448516dc58ab655d863c616c20e1144ec9d197b82815cddb467f68a0993d41a9519e53e6be90acaac921f71bf4e9790423542a35f2c3a63fe1fdf8bbc94a2f4a7ab3df26b4f9f4d2b95210867d1fe1781633404fcce84975ff9855fb94d2e737e1a4bda737abbbc8b46752881ef1e69255a66bbe2abc72049234297a41f15c79f36cbdd8594e0b45e58e8ddb421b5e78205355cf00df006a7b63f8600cfe14b67f0819d750b9ad01a1ba6d4878330fb4c8aeda1a4725eebe814aa9f3dfa670ba05d03c1e909ed36d5a7adb490a4e9a321a78bfd3347af44a012af42001e94f4844373b37e2226c7c129ab99bba5cb83d9d17967f3d72ec8841bf14ef9f2df9c746d4de9c298ae726d850a3af310f7e7e1b3dc5b8ac3a6b8374ce8fa3240260acca3000fd3097ad25838c3dcdc4ba4656ab054bab120dc0e3baee4fb078b9d71027e61b59a281b52749da1287affe9472f47e608b3fdb5af9ef828021da2963a1cc97317c9cb42b1b241d928e980b043392f6c99cec49eac2e42e056520d05dcf5f464038f60b9917d3d7020b35ae72fa7699c9c7df21ac9353e8e6a01faa888e7e8e359f157beef4cd50565ff97998c6544cf57f227e8a665a3a0f725a9a6df59c59dc57e822b69c0cd7e6c3d385bc53a03d3f642367553e79f1f0926456ef34ff35108eb68fee979520632e3443efa662587a2d79b96228be373b1a43e0b0717c9b2b10c53b55149a09f81f13b019edd9ddcac4d044efd989323f787b465086033000b9c9e76fa503f8f179e7ac926eaf379323590df8c89d79b450a2c153c328b87f8d503d03dc6de93f65efff59e12873f581fcd500f7194274d1fb7ed3d9f70a5ab837a539e13551eea003ee772c73644f5a916990719b8cbd2bcbdab556d2e5dc882c99f4b3e3dc4afa4e9ad48023897b32fb9c4a7a15cb93cc5565f8ecae56bf7dc1d3f365e5646f64bf00229fc1bfde01885ef1ee8c234bea31e0b07a6a12f32d2ade473eceadc22d64412cc39c081707135a2648d0355228b430ffb0c05e1699b32fad3acc07cc32aec3cf10885505116eb6f969fb8e816f2c48f96eaf7b30cbe626ba04e22b7fb44d5395781f56b67236b3f9d75f44fdd8c5836a1ebd16fc5a63a4b24953647b4ac616796bffc3043533bd3270d0f718f36336f5d6a5ea6e7546c58a0a6257146fad5afef1dbbf38bd003dc6459b82d8de92e9c79fb606101e0be3fcd948bdf1a5e17afcee17bdc307f3a229adafc5f513a3639b425d746280f23f8f14fdd85a81e61231615c1d90ee96ec7cafa2328cc3b326abfb663ee21eb4b0c49354275343caead7ed6b0ee1ff591bcce3e76685498d22a2ef36f33b7ab6b3", 0xe8f}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 3m53.587281209s ago: executing program 6 (id=6898): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 3m53.5658345s ago: executing program 35 (id=6898): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 3m16.398297457s ago: executing program 7 (id=8485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffc, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 3m16.339161527s ago: executing program 7 (id=8488): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3m16.338823998s ago: executing program 7 (id=8489): unshare(0x2c020400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) 3m15.46640674s ago: executing program 7 (id=8520): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x10, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x82) renameat2(r2, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) 3m15.46591485s ago: executing program 7 (id=8521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1800) 3m15.213685004s ago: executing program 7 (id=8533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, r3, {0xa, 0x7}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x82}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3m15.157192585s ago: executing program 36 (id=8533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, r3, {0xa, 0x7}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x82}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2m33.91020302s ago: executing program 4 (id=10069): r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 2m33.88750094s ago: executing program 4 (id=10081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.85457365s ago: executing program 4 (id=10072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0x4) 2m33.768144602s ago: executing program 4 (id=10075): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 2m33.591712485s ago: executing program 4 (id=10083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0x1, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 2m33.484139236s ago: executing program 4 (id=10088): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 2m33.430137877s ago: executing program 37 (id=10088): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 1m25.928646985s ago: executing program 8 (id=12130): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 1m25.828530327s ago: executing program 8 (id=12134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 1m25.765941037s ago: executing program 8 (id=12136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.668797489s ago: executing program 8 (id=12141): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 1m25.59931396s ago: executing program 8 (id=12142): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m25.430460162s ago: executing program 8 (id=12152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) shutdown(r2, 0x0) 1m25.397175993s ago: executing program 38 (id=12152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) shutdown(r2, 0x0) 56.674931816s ago: executing program 5 (id=13099): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1, 0x0, 0xffffffffffffff7d}, 0x40004220) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 55.868268658s ago: executing program 5 (id=13127): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0xdf8, 0x16) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 55.032860669s ago: executing program 5 (id=13155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x8}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 54.98392502s ago: executing program 5 (id=13156): arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) pwrite64(r0, &(0x7f0000000300)="ec", 0x1, 0x8000c61) 54.214971782s ago: executing program 5 (id=13166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {}, 0xff}, 0x18) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r4, 0x1, {0x2, 0xf0, 0x3}}, 0x18) 54.020623305s ago: executing program 5 (id=13168): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 54.020458385s ago: executing program 39 (id=13168): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 17.380413554s ago: executing program 0 (id=14292): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 17.315035955s ago: executing program 0 (id=14294): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffff9, 0x4}, 0x0, 0xfffc, 0xfffffff8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17.262954476s ago: executing program 0 (id=14297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) write$cgroup_devices(r1, 0x0, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.028538049s ago: executing program 0 (id=14307): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 16.526694616s ago: executing program 0 (id=14317): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 16.181415602s ago: executing program 0 (id=14318): futex(0x0, 0x10b, 0x0, 0x0, 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000020183e7de22cd4285ba1741da9a0e0404000280040001800c0019"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket(0x10, 0x3, 0x0) 16.181214502s ago: executing program 40 (id=14318): futex(0x0, 0x10b, 0x0, 0x0, 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000020183e7de22cd4285ba1741da9a0e0404000280040001800c0019"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket(0x10, 0x3, 0x0) 7.822123144s ago: executing program 2 (id=14360): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0xa4000021) creat(0x0, 0x0) read(r2, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x0, 0x212, 0x100009, 0x2, 0xfff}) 7.812816464s ago: executing program 3 (id=14361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 6.477168264s ago: executing program 9 (id=14363): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.476750494s ago: executing program 2 (id=14364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x1180, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 6.476240384s ago: executing program 3 (id=14365): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) close(r0) 6.475983824s ago: executing program 1 (id=14366): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.029667376s ago: executing program 9 (id=14367): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 5.014932706s ago: executing program 2 (id=14368): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.014486596s ago: executing program 3 (id=14369): ioperm(0x2, 0x8, 0xa) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 5.014118606s ago: executing program 1 (id=14370): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 3.489073908s ago: executing program 9 (id=14371): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 3.488464598s ago: executing program 2 (id=14372): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180a0000000000fdffffef000000bc"], 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 3.487972328s ago: executing program 3 (id=14373): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x8c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 3.487553188s ago: executing program 1 (id=14374): r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) write(r0, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x6}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.853318743s ago: executing program 9 (id=14375): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 1.852236482s ago: executing program 2 (id=14376): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x74, 0x40, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.851635842s ago: executing program 3 (id=14377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010000104000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c0002800400120014000700fe80000000000000000000000000003008000300", @ANYRES32=r4], 0x58}, 0x1, 0xd}, 0x0) 1.848597702s ago: executing program 1 (id=14378): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) close_range(r2, 0xffffffffffffffff, 0x0) 1.778885623s ago: executing program 9 (id=14379): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket(0x1e, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd61fbb2ea000033ff20010000000000000000000000000000ff020000000000000000000000000001"], 0x0) 1.778592873s ago: executing program 1 (id=14380): socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext, 0x14065, 0x0, 0xfffffffe, 0xe, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 58.847209ms ago: executing program 2 (id=14381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x5460, &(0x7f0000000300)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.344359ms ago: executing program 9 (id=14382): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 461.67µs ago: executing program 3 (id=14383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/98, 0x62}], 0x1}, 0x4}], 0x1, 0x40000042, 0x0) 0s ago: executing program 1 (id=14384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) kernel console output (not intermixed with test programs): 11102] EXT4-fs (loop1): 1 truncate cleaned up [ 332.851150][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 332.856650][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12534'. [ 332.863177][T11138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.865368][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 332.896853][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 332.904750][ T8827] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 1 [ 332.916389][ T10] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 332.924717][T11102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.962903][ T1952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.992494][T11166] tipc: Enabled bearer , priority 0 [ 333.009272][T11166] tipc: Disabling bearer [ 333.560526][T11184] loop5: detected capacity change from 0 to 512 [ 333.568506][T11184] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.581175][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12544'. [ 333.593343][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12544'. [ 333.594046][T11184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.614899][T11184] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.678929][ T9620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.755814][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 333.755829][ T29] audit: type=1400 audit(1751691140.069:25464): avc: denied { listen } for pid=11204 comm="syz.3.12548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.809378][ T29] audit: type=1400 audit(1751691140.112:25465): avc: denied { accept } for pid=11204 comm="syz.3.12548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.844915][T11212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12551'. [ 333.917829][ T29] audit: type=1326 audit(1751691140.239:25466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.3.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 333.973476][ T29] audit: type=1326 audit(1751691140.239:25467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.3.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 333.997316][ T29] audit: type=1326 audit(1751691140.239:25468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.3.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dc02ed290 code=0x7ffc0000 [ 334.021080][ T29] audit: type=1326 audit(1751691140.239:25469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.3.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dc02ed290 code=0x7ffc0000 [ 334.044852][ T29] audit: type=1326 audit(1751691140.239:25470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.3.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 334.068646][ T29] audit: type=1326 audit(1751691140.239:25471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.3.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 334.092423][ T29] audit: type=1326 audit(1751691140.239:25472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.3.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 334.116077][ T29] audit: type=1326 audit(1751691140.239:25473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.3.12557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 334.817484][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12569'. [ 334.930156][T11313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12578'. [ 335.244634][T11381] loop1: detected capacity change from 0 to 128 [ 335.254175][T11381] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 335.270803][T11381] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.997143][T11441] @: renamed from vlan0 [ 336.048920][ T1952] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.919127][T11545] siw: device registration error -23 [ 337.165793][T11584] __nla_validate_parse: 5 callbacks suppressed [ 337.172102][T11584] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.12651'. [ 337.181376][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12651'. [ 337.279601][T11585] loop5: detected capacity change from 0 to 8192 [ 337.339229][T11594] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12657'. [ 337.852154][T11680] tipc: Started in network mode [ 337.857115][T11680] tipc: Node identity da9f3500ec64, cluster identity 4711 [ 337.864259][T11680] tipc: Enabled bearer , priority 0 [ 337.901171][T11680] tipc: Disabling bearer [ 337.908922][T11626] netlink: 'syz.5.12663': attribute type 12 has an invalid length. [ 338.047479][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12688'. [ 338.056620][T11691] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12688'. [ 338.092806][T11703] syzkaller1: entered promiscuous mode [ 338.098360][T11703] syzkaller1: entered allmulticast mode [ 338.229560][T11718] program syz.3.12689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.239488][T11718] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 338.369746][T11740] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 338.370211][T11741] program syz.3.12699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.432311][T11746] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12702'. [ 338.444730][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12702'. [ 338.497770][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 338.497866][ T29] audit: type=1400 audit(1751691145.082:25493): avc: denied { read } for pid=11750 comm="syz.3.12703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.566010][T11755] vhci_hcd: invalid port number 96 [ 338.571164][T11755] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 338.714221][T11762] loop5: detected capacity change from 0 to 256 [ 338.749584][T11762] FAT-fs (loop5): bogus number of FAT sectors [ 338.755812][T11762] FAT-fs (loop5): Can't find a valid FAT filesystem [ 339.125663][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12711'. [ 339.134687][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12711'. [ 339.194720][ T29] audit: type=1400 audit(1751691145.822:25494): avc: denied { associate } for pid=11781 comm="syz.9.12715" name="791" dev="tmpfs" ino=4100 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 339.262959][T11787] tipc: Started in network mode [ 339.269187][T11787] tipc: Node identity 020d2ec595c, cluster identity 4711 [ 339.276408][T11787] tipc: Enabled bearer , priority 0 [ 339.297588][ T29] audit: type=1400 audit(1751691145.886:25495): avc: denied { remove_name } for pid=28903 comm="syz-executor" name="binderfs" dev="tmpfs" ino=4104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 339.324968][ T29] audit: type=1400 audit(1751691145.886:25496): avc: denied { rmdir } for pid=28903 comm="syz-executor" name="791" dev="tmpfs" ino=4100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 339.353021][ T29] audit: type=1326 audit(1751691145.970:25497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz.3.12720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc02e58e7 code=0x7ffc0000 [ 339.354424][T11793] siw: device registration error -23 [ 339.376655][ T29] audit: type=1326 audit(1751691145.970:25498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz.3.12720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5dc028ab19 code=0x7ffc0000 [ 339.376682][ T29] audit: type=1326 audit(1751691145.970:25499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz.3.12720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc02e58e7 code=0x7ffc0000 [ 339.376706][ T29] audit: type=1326 audit(1751691145.970:25500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz.3.12720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5dc028ab19 code=0x7ffc0000 [ 339.376767][ T29] audit: type=1326 audit(1751691145.970:25501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz.3.12720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 339.376790][ T29] audit: type=1326 audit(1751691145.970:25502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz.3.12720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 339.510286][T11799] tipc: Disabling bearer [ 339.668862][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.677587][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.725152][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.732655][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.740079][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.747461][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.755302][T11832] loop5: detected capacity change from 0 to 512 [ 339.756897][T11832] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 339.762527][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.781208][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.788610][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.796094][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.803477][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.812283][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.842440][T11832] EXT4-fs (loop5): 1 truncate cleaned up [ 339.850808][T11832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.853954][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.872038][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.879434][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.886980][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.895664][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.903196][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.910605][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.918082][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.926714][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.934124][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.941581][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.950228][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.957626][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.965058][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.972462][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 339.981529][ T9] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 339.997611][ T9620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.073036][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12733'. [ 340.319685][T11888] tipc: Enabled bearer , priority 0 [ 340.343780][T11888] tipc: Disabling bearer [ 340.520924][T11911] bridge0: entered promiscuous mode [ 340.536676][T11911] bridge0: port 3(macvlan2) entered blocking state [ 340.543243][T11911] bridge0: port 3(macvlan2) entered disabled state [ 340.563756][T11911] macvlan2: entered allmulticast mode [ 340.569341][T11911] bridge0: entered allmulticast mode [ 340.583810][T11911] macvlan2: left allmulticast mode [ 340.588988][T11911] bridge0: left allmulticast mode [ 340.613073][T11918] sd 0:0:1:0: device reset [ 340.614396][T11911] bridge0: left promiscuous mode [ 340.816248][T11951] atomic_op ffff888124a97d28 conn xmit_atomic 0000000000000000 [ 341.156047][T12010] syzkaller1: entered promiscuous mode [ 341.161684][T12010] syzkaller1: entered allmulticast mode [ 341.349141][T12054] loop5: detected capacity change from 0 to 128 [ 341.357816][T12054] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.372341][T12054] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 341.461202][T12070] binfmt_misc: register: failed to install interpreter file ./file2 [ 341.472032][ T9620] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.569656][T12090] loop5: detected capacity change from 0 to 1024 [ 341.590920][T12090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.635906][T12090] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.12796: Allocating blocks 497-513 which overlap fs metadata [ 341.654524][T12089] EXT4-fs (loop5): pa ffff888106a3e1c0: logic 128, phys. 273, len 15 [ 341.662758][T12089] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 341.701632][ T9620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.981187][T12156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.982119][T12161] netlink: 'syz.9.12819': attribute type 83 has an invalid length. [ 342.704260][T12190] bridge0: entered promiscuous mode [ 342.712856][T12190] bridge0: port 3(macvlan2) entered blocking state [ 342.719572][T12190] bridge0: port 3(macvlan2) entered disabled state [ 342.726747][T12190] macvlan2: entered allmulticast mode [ 342.732223][T12190] bridge0: entered allmulticast mode [ 342.743092][T12190] macvlan2: left allmulticast mode [ 342.748425][T12190] bridge0: left allmulticast mode [ 342.764402][T12190] bridge0: left promiscuous mode [ 342.770484][T12193] SELinux: failed to load policy [ 342.783153][T12201] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 342.795796][T12201] SELinux: failed to load policy [ 342.884549][T12213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.919808][T12213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.157400][T12236] vhci_hcd: invalid port number 96 [ 343.162579][T12236] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 343.162842][T12246] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 343.492888][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 343.492903][ T29] audit: type=1400 audit(1751691150.367:25595): avc: denied { read } for pid=12275 comm="syz.1.12864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 343.524406][T12278] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 343.555076][ T29] audit: type=1326 audit(1751691150.430:25596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 343.587328][T12287] netlink: 'syz.1.12869': attribute type 1 has an invalid length. [ 343.601949][ T29] audit: type=1326 audit(1751691150.441:25597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 343.626912][ T29] audit: type=1326 audit(1751691150.441:25598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 343.637941][T12287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.652023][ T29] audit: type=1326 audit(1751691150.441:25599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 343.682288][ T29] audit: type=1326 audit(1751691150.441:25600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 343.706036][ T29] audit: type=1326 audit(1751691150.441:25601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 343.731022][ T29] audit: type=1326 audit(1751691150.462:25602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.5.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 343.767462][T12294] loop5: detected capacity change from 0 to 512 [ 343.780071][T12287] bond2: (slave veth5): Enslaving as an active interface with a down link [ 343.789259][T12294] EXT4-fs (loop5): orphan cleanup on readonly fs [ 343.796117][T12294] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.12870: bg 0: block 248: padding at end of block bitmap is not set [ 343.802951][T12355] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 343.813267][T12294] Quota error (device loop5): write_blk: dquota write failed [ 343.819143][T12355] bond2: (slave batadv1): making interface the new active one [ 343.824688][T12294] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 343.833263][T12355] batadv1: entered promiscuous mode [ 343.843240][T12294] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.12870: Failed to acquire dquot type 1 [ 343.847451][T12355] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 343.893456][T12294] EXT4-fs (loop5): 1 truncate cleaned up [ 343.899742][T12294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.918539][T12294] netlink: 'syz.5.12870': attribute type 10 has an invalid length. [ 343.943797][T12294] geneve1: entered promiscuous mode [ 343.971743][T12294] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 344.012286][ T9620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.134604][T12389] hub 9-0:1.0: USB hub found [ 344.139912][T12389] hub 9-0:1.0: 8 ports detected [ 344.160477][T12394] serio: Serial port ptm0 [ 344.569001][T12445] __nla_validate_parse: 6 callbacks suppressed [ 344.569011][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12890'. [ 344.611385][T12461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.125504][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.134170][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.141642][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.154494][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.163326][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.170874][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.178515][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.186012][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.195014][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.202454][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.209998][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.218693][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.226093][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.233669][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.244481][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.253288][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.260717][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.268260][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.277066][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.284602][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.291988][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.299477][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.308287][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.315703][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.323104][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.330571][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.339328][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.346888][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.354332][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 345.365065][ T1036] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 345.424509][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12911'. [ 345.613645][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12918'. [ 346.314291][T12625] batman_adv: batadv0: Adding interface: dummy0 [ 346.320632][T12625] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.354434][T12625] batman_adv: batadv0: Interface activated: dummy0 [ 346.369635][T12625] batadv0: mtu less than device minimum [ 346.375600][T12625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.386356][T12625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.397238][T12625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.407882][T12625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.418612][T12625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.429372][T12625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.440032][T12625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.450923][T12625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.612360][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12940'. [ 347.275833][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12963'. [ 347.285574][T12715] netlink: 'syz.3.12964': attribute type 10 has an invalid length. [ 347.323019][T12715] geneve1: entered promiscuous mode [ 347.371626][T12715] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 348.290234][T12771] syzkaller0: entered promiscuous mode [ 348.295811][T12771] syzkaller0: entered allmulticast mode [ 348.544477][T12806] serio: Serial port ptm0 [ 348.671326][T12822] loop5: detected capacity change from 0 to 1024 [ 348.700251][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13005'. [ 348.703233][T12822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.808957][T12822] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.13004: Allocating blocks 449-513 which overlap fs metadata [ 348.873334][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 348.873347][ T29] audit: type=1400 audit(1751691156.050:25614): avc: denied { append } for pid=12821 comm="syz.5.13004" path="/144/file1/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 348.924344][T12822] SELinux: Context @ is not valid (left unmapped). [ 348.926235][ T29] audit: type=1400 audit(1751691156.050:25615): avc: denied { audit_read } for pid=12846 comm="syz.2.13010" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 348.953713][ T29] audit: type=1400 audit(1751691156.114:25616): avc: denied { relabelto } for pid=12821 comm="syz.5.13004" name="cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 348.958791][T12822] EXT4-fs (loop5): pa ffff888106a3e230: logic 48, phys. 177, len 21 [ 348.988211][T12822] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 349.117132][ T9620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.126936][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13020'. [ 349.136189][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13020'. [ 349.145269][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13020'. [ 349.160925][T12877] netlink: 'syz.2.13021': attribute type 3 has an invalid length. [ 349.169568][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13020'. [ 349.178678][T12874] netlink: 'syz.3.13020': attribute type 6 has an invalid length. [ 349.333296][ T29] audit: type=1326 audit(1751691156.536:25617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.5.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 349.357062][ T29] audit: type=1326 audit(1751691156.536:25618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.5.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 349.394675][ T29] audit: type=1326 audit(1751691156.536:25619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.5.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 349.418408][ T29] audit: type=1326 audit(1751691156.536:25620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.5.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 349.442149][ T29] audit: type=1326 audit(1751691156.536:25621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.5.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 349.446974][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13034'. [ 349.465795][ T29] audit: type=1326 audit(1751691156.536:25622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.5.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 349.465905][ T29] audit: type=1326 audit(1751691156.536:25623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.5.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b9cbe929 code=0x7ffc0000 [ 349.526238][T12920] syzkaller1: entered promiscuous mode [ 349.531742][T12920] syzkaller1: entered allmulticast mode [ 349.533731][T12908] loop5: detected capacity change from 0 to 128 [ 349.547983][T12908] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.591693][T12908] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.627872][ T9620] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.782182][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13044'. [ 349.894472][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13050'. [ 349.908503][T12981] -1: renamed from syzkaller0 [ 350.077665][T13029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13064'. [ 350.134892][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13067'. [ 350.236466][T13063] pim6reg1: entered promiscuous mode [ 350.241795][T13063] pim6reg1: entered allmulticast mode [ 350.336098][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13077'. [ 350.356667][T13079] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13077'. [ 350.382734][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13078'. [ 350.402260][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13078'. [ 350.485592][T13113] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 351.198843][T13166] batadv_slave_1: entered promiscuous mode [ 351.210197][T13166] batadv_slave_1: left promiscuous mode [ 351.261144][T13168] loop5: detected capacity change from 0 to 128 [ 351.436263][T13189] serio: Serial port ptm0 [ 351.765465][T13233] netem: change failed [ 351.816124][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13129'. [ 351.879314][T13255] loop1: detected capacity change from 0 to 512 [ 351.887865][T13255] EXT4-fs: Ignoring removed orlov option [ 351.894319][T13255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.911328][T13255] EXT4-fs (loop1): orphan cleanup on readonly fs [ 351.924331][T13255] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13122: bg 0: block 248: padding at end of block bitmap is not set [ 351.945339][T13255] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.13122: Failed to acquire dquot type 1 [ 351.957187][T13255] EXT4-fs (loop1): 1 truncate cleaned up [ 351.976960][T13255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.994045][T13262] program syz.2.13124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.019926][T13255] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 352.064741][T13255] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.13122: Abort forced by user [ 352.078525][T13255] EXT4-fs (loop1): Remounting filesystem read-only [ 352.086511][T13255] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 352.118868][ T1952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.173288][T13280] loop1: detected capacity change from 0 to 512 [ 352.180446][T13280] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 352.924124][T13336] -1: renamed from syzkaller0 [ 352.951923][T13345] loop5: detected capacity change from 0 to 512 [ 352.961223][T13345] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.13156: casefold flag without casefold feature [ 352.975602][T13345] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.13156: couldn't read orphan inode 15 (err -117) [ 352.991654][T13345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.047735][T13345] loop5: detected capacity change from 512 to 0 [ 353.057890][T13345] syz.5.13156: attempt to access beyond end of device [ 353.057890][T13345] loop5: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 353.145984][T13345] syz.5.13156: attempt to access beyond end of device [ 353.145984][T13345] loop5: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 353.176576][T13345] syz.5.13156: attempt to access beyond end of device [ 353.176576][T13345] loop5: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 353.209685][T13345] syz.5.13156: attempt to access beyond end of device [ 353.209685][T13345] loop5: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 353.226271][T13345] syz.5.13156: attempt to access beyond end of device [ 353.226271][T13345] loop5: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 353.239922][T13345] syz.5.13156: attempt to access beyond end of device [ 353.239922][T13345] loop5: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 353.254725][T13345] syz.5.13156: attempt to access beyond end of device [ 353.254725][T13345] loop5: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 353.268714][T13345] syz.5.13156: attempt to access beyond end of device [ 353.268714][T13345] loop5: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 353.283497][T13345] syz.5.13156: attempt to access beyond end of device [ 353.283497][T13345] loop5: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 353.296938][T13345] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 9: comm syz.5.13156: unable to read itable block [ 353.311205][T13345] syz.5.13156: attempt to access beyond end of device [ 353.311205][T13345] loop5: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 353.325810][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.338397][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.345630][T13345] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 9: comm syz.5.13156: unable to read itable block [ 353.360718][T13361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.369404][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.379045][T13361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.388427][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.395257][T13345] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: IO failure [ 353.404192][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.414126][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.421012][T13345] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.13156: mark_inode_dirty error [ 353.433051][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.442791][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.452433][T13345] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 9: comm syz.5.13156: unable to read itable block [ 353.483615][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.514692][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.521622][T13345] EXT4-fs error (device loop5): ext4_get_max_inline_size:121: inode #18: comm syz.5.13156: can't get inode location 18 [ 353.537479][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.546232][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.554467][T13345] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 9: comm syz.5.13156: unable to read itable block [ 353.585190][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.593926][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.600739][T13345] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: IO failure [ 353.609672][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.618082][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.624866][T13345] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.13156: mark_inode_dirty error [ 353.636679][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.645096][T13345] EXT4-fs (loop5): I/O error while writing superblock [ 353.652015][T13345] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.13156: Error while async write back metadata [ 353.664920][T13345] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 353.691914][ T9620] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 354.064762][T13389] chnl_net:caif_netlink_parms(): no params data found [ 354.119243][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.126412][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.139751][T13389] bridge_slave_0: entered allmulticast mode [ 354.146331][T13389] bridge_slave_0: entered promiscuous mode [ 354.154676][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.161822][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.172043][T13389] bridge_slave_1: entered allmulticast mode [ 354.179137][T13389] bridge_slave_1: entered promiscuous mode [ 354.207208][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.226715][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.270906][T13389] team0: Port device team_slave_0 added [ 354.277499][T13389] team0: Port device team_slave_1 added [ 354.306950][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.314419][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.340537][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.388777][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.395801][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.423046][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.459886][T13389] hsr_slave_0: entered promiscuous mode [ 354.466070][T13389] hsr_slave_1: entered promiscuous mode [ 354.472065][T13389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.481194][T13389] Cannot create hsr debugfs directory [ 354.532747][T13698] __nla_validate_parse: 5 callbacks suppressed [ 354.532761][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13178'. [ 354.560196][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13178'. [ 354.630560][ T8836] batadv1: left promiscuous mode [ 354.738605][T13389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.756166][T13389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.768222][T13389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.786525][T13389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.813792][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.820894][T13389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.828204][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.835249][T13389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.894578][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.907404][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.915527][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.927882][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.938853][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.946026][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.983748][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.990919][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.007215][T13389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.017630][T13389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.040067][T13786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13191'. [ 355.083851][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.143658][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13193'. [ 355.158882][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13193'. [ 355.202000][T13389] veth0_vlan: entered promiscuous mode [ 355.221744][T13389] veth1_vlan: entered promiscuous mode [ 355.275326][T13389] veth0_macvtap: entered promiscuous mode [ 355.297513][T13389] veth1_macvtap: entered promiscuous mode [ 355.318050][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.339994][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.356223][T13389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.365085][T13389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.373933][T13389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.384289][T13389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.428376][T13833] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 355.502683][T13842] netlink: 'syz.0.13169': attribute type 4 has an invalid length. [ 355.565572][T13849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.760471][T13870] dvmrp1: entered allmulticast mode [ 355.893276][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 355.893290][ T29] audit: type=1400 audit(1751691163.462:25705): avc: denied { getopt } for pid=13895 comm="syz.0.13219" lport=33978 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 355.976423][ T29] audit: type=1326 audit(1751691163.557:25706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.0.13223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x0 [ 356.260489][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13239'. [ 356.307761][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13239'. [ 356.343188][ T29] audit: type=1400 audit(1751691163.937:25707): avc: denied { read } for pid=13952 comm="syz.3.13243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.554745][T13986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13253'. [ 356.565135][T13986] netlink: 'syz.3.13253': attribute type 7 has an invalid length. [ 356.572967][T13986] netlink: 'syz.3.13253': attribute type 8 has an invalid length. [ 356.580851][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13253'. [ 356.594353][T13989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13254'. [ 356.603983][T13989] netlink: 'syz.2.13254': attribute type 6 has an invalid length. [ 356.662478][ T29] audit: type=1326 audit(1751691164.275:25708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.2.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94770ce929 code=0x7ffc0000 [ 356.687691][ T29] audit: type=1326 audit(1751691164.275:25709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.2.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94770ce929 code=0x7ffc0000 [ 356.718706][ T29] audit: type=1326 audit(1751691164.275:25710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.2.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94770ce929 code=0x7ffc0000 [ 356.742429][ T29] audit: type=1326 audit(1751691164.275:25711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.2.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94770ce929 code=0x7ffc0000 [ 356.767546][ T29] audit: type=1326 audit(1751691164.275:25712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.2.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94770ce929 code=0x7ffc0000 [ 356.792496][ T29] audit: type=1326 audit(1751691164.275:25713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.2.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94770ce929 code=0x7ffc0000 [ 356.816206][ T29] audit: type=1326 audit(1751691164.275:25714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.2.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94770ce929 code=0x7ffc0000 [ 357.028067][T14039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.035304][T14039] IPv6: NLM_F_CREATE should be set when creating new route [ 357.298942][T14074] pim6reg1: entered promiscuous mode [ 357.304333][T14074] pim6reg1: entered allmulticast mode [ 357.475272][ T2734] bond0: (slave syz_tun): Releasing backup interface [ 357.557563][ T8832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.636044][ T8832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.696879][ T8832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.748086][ T8832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.761361][T14088] chnl_net:caif_netlink_parms(): no params data found [ 357.799207][T14088] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.806493][T14088] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.814020][T14088] bridge_slave_0: entered allmulticast mode [ 357.820437][T14088] bridge_slave_0: entered promiscuous mode [ 357.827854][T14088] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.834984][T14088] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.842248][T14088] bridge_slave_1: entered allmulticast mode [ 357.848578][T14088] bridge_slave_1: entered promiscuous mode [ 357.869671][T14088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.883039][T14088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.912415][T14088] team0: Port device team_slave_0 added [ 357.918508][ T8832] bridge_slave_1: left allmulticast mode [ 357.924399][ T8832] bridge_slave_1: left promiscuous mode [ 357.930206][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.939488][ T8832] bridge_slave_0: left promiscuous mode [ 357.945173][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.009566][ T8832] dvmrp1 (unregistering): left allmulticast mode [ 358.147580][ T8832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.157684][ T8832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.167319][ T8832] bond0 (unregistering): Released all slaves [ 358.176574][ T8832] bond1 (unregistering): Released all slaves [ 358.185402][ T8832] bond2 (unregistering): (slave veth5): Releasing active interface [ 358.193483][ T8832] batadv1: entered promiscuous mode [ 358.200166][ T8832] bond2 (unregistering): (slave batadv1): Releasing active interface [ 358.209260][ T8832] bond2 (unregistering): Released all slaves [ 358.217756][T14088] team0: Port device team_slave_1 added [ 358.244714][T14088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.251815][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.277918][T14088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.290510][T14088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.297490][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.323463][T14088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.339030][ T8832] tipc: Left network mode [ 358.346859][ T8832] IPVS: stopping backup sync thread 7369 ... [ 358.357389][T14088] hsr_slave_0: entered promiscuous mode [ 358.364600][T14088] hsr_slave_1: entered promiscuous mode [ 358.381555][T14088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.404954][T14088] Cannot create hsr debugfs directory [ 358.427656][ T8832] hsr_slave_0: left promiscuous mode [ 358.435103][ T8832] hsr_slave_1: left promiscuous mode [ 358.442938][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.450543][ T8832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.465025][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.473917][ T8832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.488108][ T8832] veth1_macvtap: left promiscuous mode [ 358.497612][ T8832] veth0_macvtap: left promiscuous mode [ 358.503487][ T8832] veth1_vlan: left promiscuous mode [ 358.510832][ T8832] veth0_vlan: left promiscuous mode [ 358.624559][ T8832] team0 (unregistering): Port device team_slave_1 removed [ 358.642166][ T8832] team0 (unregistering): Port device team_slave_0 removed [ 358.931700][T14494] netlink: 'syz.3.13310': attribute type 1 has an invalid length. [ 358.945653][T14494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.979052][T14494] vlan0: entered allmulticast mode [ 358.984216][T14494] bond4: entered allmulticast mode [ 359.057157][T14546] 9pnet: p9_errstr2errno: server reported unknown error L O! [ 359.111663][T14088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.125777][T14088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.146017][T14088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.160408][T14088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.312349][T14602] __nla_validate_parse: 11 callbacks suppressed [ 359.312364][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13328'. [ 359.348656][T14088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.394215][T14088] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.410144][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.417373][ T8802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.454205][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.461300][ T8802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.493305][T14088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.582359][T14088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.601445][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13340'. [ 359.674991][T14661] xt_hashlimit: max too large, truncated to 1048576 [ 359.719661][T14088] veth0_vlan: entered promiscuous mode [ 359.732631][T14088] veth1_vlan: entered promiscuous mode [ 359.751450][T14088] veth0_macvtap: entered promiscuous mode [ 359.759132][T14088] veth1_macvtap: entered promiscuous mode [ 359.770279][T14088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.782656][T14088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.793588][T14088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.802457][T14088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.812647][T14088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.821508][T14088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.862296][T14671] syzkaller0: entered promiscuous mode [ 359.867862][T14671] syzkaller0: entered allmulticast mode [ 360.082383][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13353'. [ 360.185421][T14707] tipc: Started in network mode [ 360.190399][T14707] tipc: Node identity 5aedaae544df, cluster identity 4711 [ 360.197602][T14707] tipc: Enabled bearer , priority 0 [ 360.240122][T14707] tipc: Disabling bearer [ 360.264148][T14713] ipvlan2: entered promiscuous mode [ 360.287985][T14713] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 360.301130][T14713] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 360.446285][T14743] loop1: detected capacity change from 0 to 512 [ 360.512181][T14743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.515565][T14755] netlink: 'syz.0.13371': attribute type 12 has an invalid length. [ 360.532622][T14755] netlink: 'syz.0.13371': attribute type 29 has an invalid length. [ 360.539906][T14743] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.540633][T14755] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13371'. [ 360.559858][T14755] netlink: 'syz.0.13371': attribute type 2 has an invalid length. [ 360.567720][T14755] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13371'. [ 360.586903][T14743] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.13366: corrupted inode contents [ 360.600918][T14743] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.13366: mark_inode_dirty error [ 360.618824][T14743] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.13366: corrupted inode contents [ 360.649468][T14762] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.13366: corrupted inode contents [ 360.649564][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 360.649576][ T29] audit: type=1400 audit(1751691168.475:25796): avc: denied { create } for pid=14740 comm="syz.1.13366" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 360.662644][T14762] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.13366: mark_inode_dirty error [ 360.706411][ T29] audit: type=1400 audit(1751691168.538:25797): avc: denied { create } for pid=14763 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 360.731541][T14762] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.13366: corrupted inode contents [ 360.734784][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13377'. [ 360.786101][T14762] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.13366: mark_inode_dirty error [ 360.807025][T14762] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.13366: corrupted inode contents [ 360.830253][T14762] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.13366: mark_inode_dirty error [ 360.901695][T14790] netlink: 'syz.2.13387': attribute type 13 has an invalid length. [ 360.913956][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.923421][T14797] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.13385'. [ 360.932760][T14797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13385'. [ 361.043077][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13395'. [ 361.084861][T14818] loop1: detected capacity change from 0 to 764 [ 361.099961][T14818] rock: directory entry would overflow storage [ 361.106270][T14818] rock: sig=0x4654, size=5, remaining=4 [ 361.119474][ T29] audit: type=1400 audit(1751691168.971:25798): avc: denied { mount } for pid=14817 comm="syz.1.13396" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 361.233026][ T29] audit: type=1326 audit(1751691169.097:25799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.9.13401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x0 [ 361.242578][T14818] syzkaller0: entered promiscuous mode [ 361.261715][T14818] syzkaller0: entered allmulticast mode [ 361.301452][T14840] vlan2: entered allmulticast mode [ 361.405152][ T29] audit: type=1326 audit(1751691169.287:25800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.2.13408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94770ce929 code=0x0 [ 361.785598][ T29] audit: type=1326 audit(1751691169.688:25801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14869 comm="syz.3.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 361.810793][ T29] audit: type=1326 audit(1751691169.688:25802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14869 comm="syz.3.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 361.834545][ T29] audit: type=1326 audit(1751691169.688:25803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14869 comm="syz.3.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 361.858222][ T29] audit: type=1326 audit(1751691169.688:25804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14869 comm="syz.3.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 361.881901][ T29] audit: type=1326 audit(1751691169.688:25805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14869 comm="syz.3.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 362.456458][T14921] syzkaller1: entered promiscuous mode [ 362.462108][T14921] syzkaller1: entered allmulticast mode [ 362.966897][T14952] netlink: 'syz.3.13443': attribute type 4 has an invalid length. [ 362.987019][T14952] netlink: 'syz.3.13443': attribute type 4 has an invalid length. [ 363.122535][T14971] binfmt_misc: register: failed to install interpreter file ./file2 [ 363.255825][T15006] netlink: 'syz.9.13464': attribute type 1 has an invalid length. [ 363.273299][T15006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.292826][T15006] vlan2: entered allmulticast mode [ 363.298025][T15006] bond2: entered allmulticast mode [ 363.337529][T15052] tipc: Started in network mode [ 363.342497][T15052] tipc: Node identity 9aff1d005df, cluster identity 4711 [ 363.349609][T15052] tipc: Enabled bearer , priority 0 [ 363.360801][T15052] tipc: Disabling bearer [ 363.479326][T15072] SELinux: syz.0.13473 (15072) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 363.728511][T15110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13485'. [ 364.396251][T15166] __nla_validate_parse: 1 callbacks suppressed [ 364.396265][T15166] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13509'. [ 364.440985][T15180] netlink: 'syz.9.13510': attribute type 10 has an invalid length. [ 364.448963][T15180] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13510'. [ 364.459828][T15180] dummy0: entered promiscuous mode [ 364.465043][T15180] batman_adv: batadv0: Interface deactivated: dummy0 [ 364.471910][T15180] batman_adv: batadv0: Removing interface: dummy0 [ 364.480050][T15180] bridge0: port 3(dummy0) entered blocking state [ 364.486485][T15180] bridge0: port 3(dummy0) entered disabled state [ 364.493652][T15180] dummy0: entered allmulticast mode [ 364.500707][T15180] bridge0: port 3(dummy0) entered blocking state [ 364.507173][T15180] bridge0: port 3(dummy0) entered forwarding state [ 364.689193][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13515'. [ 364.698218][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13515'. [ 364.744398][T15194] wireguard0: entered promiscuous mode [ 364.749958][T15194] wireguard0: entered allmulticast mode [ 364.932799][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13527'. [ 364.941870][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13527'. [ 364.995387][T15235] netlink: 'syz.9.13532': attribute type 16 has an invalid length. [ 365.003456][T15235] netlink: 'syz.9.13532': attribute type 17 has an invalid length. [ 365.044626][T15242] loop1: detected capacity change from 0 to 2048 [ 365.072264][T15235] net_ratelimit: 11 callbacks suppressed [ 365.072274][T15235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.104645][T15242] loop1: p1 < > p4 [ 365.113607][T15242] loop1: p4 size 8388608 extends beyond EOD, truncated [ 365.270071][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13545'. [ 365.464622][T15309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15309 comm=syz.1.13559 [ 365.542207][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 365.542219][ T29] audit: type=1326 audit(1751691173.698:25894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.9.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 365.573392][ T29] audit: type=1326 audit(1751691173.698:25895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.9.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 365.597112][ T29] audit: type=1326 audit(1751691173.698:25896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.9.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 365.622139][ T29] audit: type=1326 audit(1751691173.698:25897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.9.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 365.867704][T15341] tipc: Started in network mode [ 365.872601][T15341] tipc: Node identity 4, cluster identity 4711 [ 365.879679][T15341] tipc: Node number set to 4 [ 366.016690][T15358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13576'. [ 366.046033][T15374] x_tables: duplicate underflow at hook 1 [ 366.100441][T15390] syzkaller1: entered promiscuous mode [ 366.107314][T15390] syzkaller1: entered allmulticast mode [ 366.308657][ T29] audit: type=1326 audit(1751691174.485:25898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.1.13577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc04782e929 code=0x0 [ 366.413139][ T29] audit: type=1326 audit(1751691174.601:25899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.0.13597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 366.438190][ T29] audit: type=1326 audit(1751691174.601:25900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.0.13597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 366.461900][ T29] audit: type=1326 audit(1751691174.601:25901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.0.13597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 366.486811][ T29] audit: type=1326 audit(1751691174.601:25902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.0.13597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 366.510542][ T29] audit: type=1326 audit(1751691174.601:25903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz.0.13597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 366.712630][T15477] netlink: 'syz.3.13603': attribute type 1 has an invalid length. [ 366.720570][T15477] netlink: 'syz.3.13603': attribute type 4 has an invalid length. [ 366.728461][T15477] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13603'. [ 366.871891][T15512] tipc: New replicast peer: 255.255.255.255 [ 366.879411][T15512] tipc: Enabled bearer , priority 10 [ 366.964915][ T3390] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 366.973710][ T3390] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.093031][T15537] serio: Serial port ptm0 [ 367.344092][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13620'. [ 367.355138][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.361945][T15547] dummy0: left allmulticast mode [ 367.362623][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.367539][T15547] bridge0: port 1(dummy0) entered disabled state [ 367.374865][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.392707][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.400223][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.407673][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.415214][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.422631][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.430176][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.437581][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.444970][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.452378][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.459854][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.467479][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.475001][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.482404][ T3390] hid-generic 0006:0000:0000.0016: unknown main item tag 0x0 [ 367.493081][ T3390] hid-generic 0006:0000:0000.0016: hidraw1: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 367.545442][T15556] loop1: detected capacity change from 0 to 512 [ 367.552679][T15556] journal_path: Lookup failure for './file0/../file0' [ 367.559483][T15556] EXT4-fs: error: could not find journal device path [ 368.251464][T15640] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 368.251464][T15640] [ 368.345984][T15650] SELinux: failed to load policy [ 368.366409][T15653] : renamed from vlan1 (while UP) [ 368.462210][T15679] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 368.466943][T15688] netlink: 'syz.9.13664': attribute type 1 has an invalid length. [ 368.468738][T15679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.468850][T15679] vhci_hcd vhci_hcd.0: Device attached [ 368.490984][T15689] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 368.497515][T15689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.505056][T15689] vhci_hcd vhci_hcd.0: Device attached [ 368.533996][T15688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.560680][T15679] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 368.561779][T15688] bond3: (slave geneve3): making interface the new active one [ 368.567201][T15679] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 368.567245][T15679] vhci_hcd vhci_hcd.0: Device attached [ 368.569084][T15679] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 368.576727][T15688] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 368.628024][T15749] loop1: detected capacity change from 0 to 128 [ 368.636596][T15688] bond3: entered promiscuous mode [ 368.641654][T15688] geneve3: entered promiscuous mode [ 368.647961][T15679] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 368.654568][T15679] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.662836][T15679] vhci_hcd vhci_hcd.0: Device attached [ 368.697679][T15679] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 368.704306][T15679] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 368.711743][T15679] vhci_hcd vhci_hcd.0: Device attached [ 368.732370][ T9] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 368.746158][T15689] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(16) [ 368.752784][T15689] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.761278][T15689] vhci_hcd vhci_hcd.0: Device attached [ 368.804747][T15679] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(15) [ 368.811377][T15679] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.819290][T15766] veth1_to_bond: entered allmulticast mode [ 368.819660][T15679] vhci_hcd vhci_hcd.0: Device attached [ 368.825733][T15766] veth1_to_bond: entered promiscuous mode [ 368.842036][T15763] vhci_hcd: connection closed [ 368.842184][T15761] vhci_hcd: connection closed [ 368.842255][ T8834] vhci_hcd: stop threads [ 368.847866][T15685] vhci_hcd: connection reset by peer [ 368.851750][ T8834] vhci_hcd: release socket [ 368.865764][T15750] vhci_hcd: connection closed [ 368.865850][ T8834] vhci_hcd: disconnect device [ 368.865884][T15745] vhci_hcd: connection closed [ 368.870705][T15754] vhci_hcd: connection closed [ 368.877947][T15690] vhci_hcd: connection closed [ 368.885880][T15766] veth1_to_bond: left promiscuous mode [ 368.889318][ T8834] vhci_hcd: stop threads [ 368.890640][T15766] veth1_to_bond: left allmulticast mode [ 368.896086][ T8834] vhci_hcd: release socket [ 368.910370][ T8834] vhci_hcd: disconnect device [ 368.919405][ T8834] vhci_hcd: stop threads [ 368.923792][ T8834] vhci_hcd: release socket [ 368.928229][ T8834] vhci_hcd: disconnect device [ 368.947721][ T8834] vhci_hcd: stop threads [ 368.952047][ T8834] vhci_hcd: release socket [ 368.956477][ T8834] vhci_hcd: disconnect device [ 368.966495][ T8834] vhci_hcd: stop threads [ 368.970807][ T8834] vhci_hcd: release socket [ 368.975233][ T8834] vhci_hcd: disconnect device [ 368.980407][ T8834] vhci_hcd: stop threads [ 368.984690][ T8834] vhci_hcd: release socket [ 368.989228][ T8834] vhci_hcd: disconnect device [ 368.999223][ T8834] vhci_hcd: stop threads [ 369.003532][ T8834] vhci_hcd: release socket [ 369.008039][ T8834] vhci_hcd: disconnect device [ 369.067707][T15780] vhci_hcd: invalid port number 96 [ 369.072862][T15780] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 369.228898][T15798] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 369.277732][T15802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15802 comm=syz.2.13683 [ 369.446618][T15823] loop1: detected capacity change from 0 to 1024 [ 369.457352][T15823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.489607][T15823] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.13691: Allocating blocks 449-513 which overlap fs metadata [ 369.510803][T15822] EXT4-fs (loop1): pa ffff888106a3e2a0: logic 48, phys. 177, len 21 [ 369.519501][T15822] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 369.541866][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.635225][T15852] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 369.664583][T15856] loop1: detected capacity change from 0 to 512 [ 369.694758][T15856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.708521][T15856] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.722299][T15856] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.13701: corrupted inode contents [ 369.735143][T15856] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.13701: mark_inode_dirty error [ 369.749076][T15856] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.13701: corrupted inode contents [ 369.775835][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.796220][T15864] loop1: detected capacity change from 0 to 512 [ 369.806063][T15864] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.13702: corrupted in-inode xattr: invalid ea_ino [ 369.821247][T15864] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.13702: couldn't read orphan inode 15 (err -117) [ 369.834070][T15864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.851237][T15864] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.13702: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 369.871816][T15864] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.13702: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 369.901618][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.973130][T15880] bond4: entered promiscuous mode [ 369.978363][T15880] bond4: entered allmulticast mode [ 369.984765][T15880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.986389][T15915] netlink: 'syz.1.13707': attribute type 1 has an invalid length. [ 370.002656][T15880] bond4 (unregistering): Released all slaves [ 370.019963][T15915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.045860][T15915] bond1: (slave geneve2): making interface the new active one [ 370.056132][T15915] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 370.073107][T15915] bond1: entered promiscuous mode [ 370.078217][T15915] geneve2: entered promiscuous mode [ 370.327452][T16025] netlink: 'syz.0.13723': attribute type 1 has an invalid length. [ 370.345028][T16025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.364680][T16025] bond1: (slave geneve2): making interface the new active one [ 370.373543][T16025] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 370.391827][T16025] bond1: entered promiscuous mode [ 370.396911][T16025] geneve2: entered promiscuous mode [ 370.431823][T16062] ALSA: seq fatal error: cannot create timer (-19) [ 370.461034][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 370.461047][ T29] audit: type=1326 audit(1751691178.855:25918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.503559][ T29] audit: type=1326 audit(1751691178.855:25919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.527330][ T29] audit: type=1326 audit(1751691178.865:25920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.551008][ T29] audit: type=1326 audit(1751691178.865:25921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.574819][ T29] audit: type=1326 audit(1751691178.865:25922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.598854][ T29] audit: type=1326 audit(1751691178.865:25923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.622524][ T29] audit: type=1326 audit(1751691178.865:25924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.646236][ T29] audit: type=1326 audit(1751691178.865:25925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.669904][ T29] audit: type=1326 audit(1751691178.897:25926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.13728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776bf0e929 code=0x7ffc0000 [ 370.944350][T16095] SELinux: failed to load policy [ 370.978429][ T29] audit: type=1326 audit(1751691179.390:25927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.13749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94770ce929 code=0x0 [ 371.152674][T16121] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 371.157636][T16123] __nla_validate_parse: 8 callbacks suppressed [ 371.157782][T16123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13748'. [ 371.466377][T16173] serio: Serial port ptm0 [ 371.869822][T16193] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 371.869822][T16193] [ 371.956359][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 371.963850][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 371.971948][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 371.981411][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 371.984379][T16206] vlan0: entered allmulticast mode [ 371.988858][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.001986][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.010194][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.017693][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.025074][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.032677][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.041476][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.049300][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.056730][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.065585][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.073297][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.080735][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.088295][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.097096][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.104662][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.112136][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.119629][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.128458][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.136091][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.143481][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.151746][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.159123][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.166512][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.173887][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.182320][ T1036] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 372.192171][ T1036] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 372.241592][T16227] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 372.248135][T16227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.255711][T16227] vhci_hcd vhci_hcd.0: Device attached [ 372.264918][T16227] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 372.271462][T16227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.279084][T16227] vhci_hcd vhci_hcd.0: Device attached [ 372.286043][T16232] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.13780'. [ 372.295291][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13780'. [ 372.309716][T16227] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 372.316253][T16227] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 372.323927][T16227] vhci_hcd vhci_hcd.0: Device attached [ 372.331189][T16227] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.341068][T16227] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 372.347675][T16227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.356479][T16227] vhci_hcd vhci_hcd.0: Device attached [ 372.367639][T16227] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 372.374257][T16227] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 372.381837][T16227] vhci_hcd vhci_hcd.0: Device attached [ 372.401632][T16227] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 372.408292][T16227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.416474][T16227] vhci_hcd vhci_hcd.0: Device attached [ 372.422698][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13785'. [ 372.437836][T16227] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 372.444453][T16227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.452079][T16227] vhci_hcd vhci_hcd.0: Device attached [ 372.461987][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13785'. [ 372.462243][T16254] vhci_hcd: connection closed [ 372.471512][T16237] vhci_hcd: connection closed [ 372.472324][T16241] vhci_hcd: connection closed [ 372.476505][T16230] vhci_hcd: connection closed [ 372.481125][T16233] vhci_hcd: connection closed [ 372.490583][T16245] vhci_hcd: connection closed [ 372.492441][T16228] vhci_hcd: connection closed [ 372.504185][ T8836] vhci_hcd: stop threads [ 372.513240][ T8836] vhci_hcd: release socket [ 372.517653][ T8836] vhci_hcd: disconnect device [ 372.520871][ T3390] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 372.527117][ T8836] vhci_hcd: stop threads [ 372.533884][ T8836] vhci_hcd: release socket [ 372.538307][ T8836] vhci_hcd: disconnect device [ 372.543220][T16229] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 372.572548][ T8836] vhci_hcd: stop threads [ 372.576836][ T8836] vhci_hcd: release socket [ 372.582587][ T8836] vhci_hcd: disconnect device [ 372.594907][ T8836] vhci_hcd: stop threads [ 372.599269][ T8836] vhci_hcd: release socket [ 372.603680][ T8836] vhci_hcd: disconnect device [ 372.620003][ T8836] vhci_hcd: stop threads [ 372.624290][ T8836] vhci_hcd: release socket [ 372.628731][ T8836] vhci_hcd: disconnect device [ 372.644965][ T8836] vhci_hcd: stop threads [ 372.649242][ T8836] vhci_hcd: release socket [ 372.653755][ T8836] vhci_hcd: disconnect device [ 372.669240][ T8836] vhci_hcd: stop threads [ 372.673537][ T8836] vhci_hcd: release socket [ 372.677964][ T8836] vhci_hcd: disconnect device [ 372.821786][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13792'. [ 372.976158][T16303] vhci_hcd: invalid port number 96 [ 372.982732][T16303] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 373.181885][T16332] vlan2: entered allmulticast mode [ 373.188643][T16332] dummy0: entered allmulticast mode [ 373.316658][T16371] loop1: detected capacity change from 0 to 164 [ 373.346045][T16371] bio_check_eod: 119 callbacks suppressed [ 373.346060][T16371] syz.1.13815: attempt to access beyond end of device [ 373.346060][T16371] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 373.373447][T16371] syz.1.13815: attempt to access beyond end of device [ 373.373447][T16371] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 373.550629][ T9] usb 1-1: enqueue for inactive port 0 [ 373.556239][ T9] usb 1-1: enqueue for inactive port 0 [ 373.625779][ T9] vhci_hcd: vhci_device speed not set [ 374.453084][T16412] loop1: detected capacity change from 0 to 512 [ 374.464701][T16412] journal_path: Lookup failure for './file0/../file0' [ 374.471503][T16412] EXT4-fs: error: could not find journal device path [ 374.571324][T16434] SELinux: failed to load policy [ 374.626528][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13841'. [ 374.647228][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13841'. [ 374.699211][T16449] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13844'. [ 375.581036][T16498] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13861'. [ 375.590610][T16498] netlink: zone id is out of range [ 375.595804][T16498] netlink: zone id is out of range [ 375.601141][T16498] netlink: del zone limit has 8 unknown bytes [ 375.691726][T16516] loop1: detected capacity change from 0 to 128 [ 375.699910][T16516] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.714178][T16516] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.728728][T16521] all: renamed from lo (while UP) [ 375.729099][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 375.729111][ T29] audit: type=1400 audit(1751691184.513:26026): avc: denied { setattr } for pid=16515 comm="syz.1.13870" path="/78/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 375.768331][ T29] audit: type=1400 audit(1751691184.555:26027): avc: denied { ioctl } for pid=16515 comm="syz.1.13870" path="/78/file1/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 375.804205][T14088] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.845919][T16527] tipc: Enabled bearer , priority 0 [ 375.855122][T16527] tipc: Disabling bearer [ 375.926549][T16534] loop1: detected capacity change from 0 to 1024 [ 375.932966][ T29] audit: type=1326 audit(1751691184.723:26028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.9.13849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 375.933054][ T29] audit: type=1326 audit(1751691184.723:26029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16465 comm="syz.9.13849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 375.988430][T16534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.000658][T16534] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.013190][T16534] EXT4-fs (loop1): shut down requested (1) [ 376.019633][T16534] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 376.028536][T16534] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 376.039524][T16534] SELinux: syz.1.13874 (16534) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 376.108961][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.127688][T16541] loop1: detected capacity change from 0 to 512 [ 376.135684][T16541] EXT4-fs (loop1): orphan cleanup on readonly fs [ 376.143107][T16541] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13875: bg 0: block 248: padding at end of block bitmap is not set [ 376.158402][T16541] Quota error (device loop1): write_blk: dquota write failed [ 376.165775][T16541] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 376.175929][T16541] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.13875: Failed to acquire dquot type 1 [ 376.188229][T16541] EXT4-fs (loop1): 1 truncate cleaned up [ 376.194407][T16541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 376.218006][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.260894][T16551] xt_hashlimit: max too large, truncated to 1048576 [ 376.515783][T16574] IPv4: Oversized IP packet from 127.202.26.0 [ 376.597456][T16597] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13903'. [ 376.597645][ T29] audit: type=1326 audit(1751691185.426:26030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16596 comm="syz.3.13893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 376.631172][ T29] audit: type=1326 audit(1751691185.437:26031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16596 comm="syz.3.13893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 376.654892][ T29] audit: type=1326 audit(1751691185.437:26032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16596 comm="syz.3.13893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 376.678828][ T29] audit: type=1326 audit(1751691185.437:26033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16596 comm="syz.3.13893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 376.842777][T16635] netlink: 'syz.1.13902': attribute type 1 has an invalid length. [ 376.851418][T16635] netlink: 'syz.1.13902': attribute type 4 has an invalid length. [ 376.859404][T16635] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.13902'. [ 376.870989][T16635] netlink: 'syz.1.13902': attribute type 1 has an invalid length. [ 376.879390][T16635] netlink: 'syz.1.13902': attribute type 4 has an invalid length. [ 376.887298][T16635] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.13902'. [ 376.933263][T16642] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13906'. [ 377.030697][T16656] loop1: detected capacity change from 0 to 2048 [ 377.054295][T16656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.085266][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.357402][ T3390] usb 3-1: enqueue for inactive port 0 [ 377.362972][ T3390] usb 3-1: enqueue for inactive port 0 [ 377.433652][ T3390] vhci_hcd: vhci_device speed not set [ 377.953320][T16704] loop1: detected capacity change from 0 to 512 [ 377.961555][T16704] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.13920: iget: bad extended attribute block 1 [ 377.961943][T16703] tipc: New replicast peer: 255.255.255.83 [ 377.975901][T16704] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.13920: couldn't read orphan inode 15 (err -117) [ 377.981216][T16703] tipc: Enabled bearer , priority 10 [ 377.995769][T16704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.043712][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.115452][T16711] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13922'. [ 378.126356][T16719] tipc: Cannot configure node identity twice [ 378.197527][T16727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13933'. [ 378.350699][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13940'. [ 378.410175][T16770] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13942'. [ 378.441743][T16777] syzkaller0: refused to change device tx_queue_len [ 378.578839][T16785] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 379.009939][T16811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13954'. [ 379.066788][T16817] netlink: 'syz.0.13956': attribute type 16 has an invalid length. [ 379.074741][T16817] netlink: 'syz.0.13956': attribute type 17 has an invalid length. [ 379.139306][T16817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.889088][T16835] netlink: 96 bytes leftover after parsing attributes in process `syz.9.13969'. [ 380.075482][T16879] netlink: 'syz.2.13979': attribute type 4 has an invalid length. [ 380.086038][T16879] netlink: 'syz.2.13979': attribute type 4 has an invalid length. [ 380.101431][T16883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.108882][T16883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.123074][T16883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.132039][T16883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.355301][T16913] bridge0: port 2(dummy0) entered disabled state [ 380.365246][T16913] dummy0 (unregistering): left allmulticast mode [ 380.373095][T16913] bridge0: port 2(dummy0) entered disabled state [ 380.588204][ T8802] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.635116][ T8802] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.687334][ T8802] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.749074][ T8802] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.873936][ T8802] bridge_slave_1: left allmulticast mode [ 380.879659][ T8802] bridge_slave_1: left promiscuous mode [ 380.880847][T16951] loop1: detected capacity change from 0 to 8192 [ 380.885378][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.900655][ T8802] bridge_slave_0: left allmulticast mode [ 380.906395][ T8802] bridge_slave_0: left promiscuous mode [ 380.912160][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.971318][ T8802] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 380.996687][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.006763][ T8802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.008904][ T8802] bond0 (unregistering): Released all slaves [ 381.063125][ T8802] tipc: Left network mode [ 381.100067][ T8802] hsr_slave_0: left promiscuous mode [ 381.108538][ T8802] hsr_slave_1: left promiscuous mode [ 381.110250][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.121680][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.135299][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.135321][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.144713][ T8802] veth1_macvtap: left promiscuous mode [ 381.144790][ T8802] veth1_vlan: left promiscuous mode [ 381.144821][ T8802] veth0_vlan: left promiscuous mode [ 381.247336][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.254878][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.254931][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.256223][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.278435][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.285889][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.285990][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286009][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286029][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286052][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286076][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286104][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286127][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286151][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286255][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286279][ T3390] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 381.286684][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 381.288692][ T3390] hid-generic 0006:0000:0000.0018: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 381.297024][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 381.617374][T17012] netlink: 'syz.3.14019': attribute type 4 has an invalid length. [ 381.628182][T17012] netlink: 'syz.3.14019': attribute type 4 has an invalid length. [ 381.682277][T17020] netlink: 'syz.3.14022': attribute type 1 has an invalid length. [ 381.691543][T17020] 8021q: adding VLAN 0 to HW filter on device bond5 [ 381.713783][T17020] bond5: (slave veth11): Enslaving as an active interface with a down link [ 381.729279][T17020] dummy0: left promiscuous mode [ 381.732782][T17020] bond5: (slave dummy0): making interface the new active one [ 381.733557][T17020] dummy0: entered promiscuous mode [ 381.733661][T17020] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 381.735887][T17067] bond0: (slave bridge0): Releasing backup interface [ 381.736049][T17067] bridge0: left promiscuous mode [ 381.737068][T17067] batadv0: left promiscuous mode [ 381.737163][T17067] bridge0: port 1(batadv0) entered disabled state [ 381.738306][T17067] bond0: (slave bridge_slave_1): Releasing backup interface [ 381.738801][T17067] bridge_slave_1: left promiscuous mode [ 381.741142][T17067] bond4: (slave ip6gre1): Releasing backup interface [ 381.747956][T17067] bond5: (slave geneve2): Releasing active interface [ 381.751205][T17067] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 381.751241][T17067] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 381.751272][T17067] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 381.751457][T17067] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 381.867301][T17067] netlink: 'syz.2.14023': attribute type 10 has an invalid length. [ 381.944638][T17093] __nla_validate_parse: 3 callbacks suppressed [ 381.944652][T17093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14031'. [ 382.069637][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069673][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069697][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069733][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069757][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069784][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069810][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069834][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069857][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069877][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069896][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069967][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.069991][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.070014][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.070042][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.070091][ T9] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 382.085744][ T9] hid-generic 0006:0000:0000.0019: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 382.152427][T17125] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 382.315910][T17153] loop1: detected capacity change from 0 to 1024 [ 382.383526][T17153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.533163][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 382.533177][ T29] audit: type=1400 audit(1751691191.655:26073): avc: denied { mounton } for pid=17176 comm="syz.0.14048" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 382.661691][ T29] audit: type=1326 audit(1751691191.791:26074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.706022][ T29] audit: type=1326 audit(1751691191.791:26075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.729844][ T29] audit: type=1326 audit(1751691191.823:26076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.753655][ T29] audit: type=1326 audit(1751691191.823:26077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.777525][ T29] audit: type=1326 audit(1751691191.823:26078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.801675][ T29] audit: type=1326 audit(1751691191.823:26079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.825488][ T29] audit: type=1326 audit(1751691191.823:26080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.849313][ T29] audit: type=1326 audit(1751691191.823:26081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.881919][ T29] audit: type=1326 audit(1751691191.833:26082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.9.14052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7076ee929 code=0x7ffc0000 [ 382.920887][T17216] serio: Serial port ttyS3 [ 382.967593][T17222] netlink: 'syz.2.14056': attribute type 1 has an invalid length. [ 382.991317][T17222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 383.036963][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.064237][T17222] bond6: (slave veth15): Enslaving as an active interface with a down link [ 383.482120][T17312] bridge_slave_0: left promiscuous mode [ 383.487858][T17312] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.498240][T17312] bridge_slave_1: left allmulticast mode [ 383.504047][T17312] bridge_slave_1: left promiscuous mode [ 383.509780][T17312] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.520715][T17312] bond0: (slave bond_slave_0): Releasing backup interface [ 383.536875][T17312] bond0: (slave bond_slave_1): Releasing backup interface [ 383.562750][T17322] netlink: 'syz.0.14070': attribute type 10 has an invalid length. [ 383.572719][T17312] team0: Port device team_slave_0 removed [ 383.599134][T17312] team0: Port device team_slave_1 removed [ 383.622126][T17312] bond1: (slave geneve2): Releasing active interface [ 383.629893][T17312] geneve2: left promiscuous mode [ 383.648672][T17318] team0: Mode changed to "loadbalance" [ 383.662369][T17322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.685937][T17322] team0: Port device bond0 added [ 384.217684][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14096'. [ 384.384437][T17421] vhci_hcd: invalid port number 96 [ 384.389647][T17421] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 384.510579][T17439] netlink: 'syz.2.14117': attribute type 1 has an invalid length. [ 384.526998][T17439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 384.656425][T17488] bond0: (slave syz_tun): Releasing backup interface [ 384.672851][T17488] dummy0: left allmulticast mode [ 384.678041][T17488] bridge0: port 3(dummy0) entered disabled state [ 384.690398][T17488] bridge_slave_0: left promiscuous mode [ 384.696095][T17488] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.705897][T17488] bridge_slave_1: left allmulticast mode [ 384.711668][T17488] bridge_slave_1: left promiscuous mode [ 384.717440][T17488] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.729389][T17488] bond0: (slave bond_slave_0): Releasing backup interface [ 384.745607][T17488] bond0: (slave bond_slave_1): Releasing backup interface [ 384.767205][T17488] team0: Port device team_slave_0 removed [ 384.778481][T17496] netlink: 'syz.9.14120': attribute type 10 has an invalid length. [ 384.787190][T17488] team0: Port device team_slave_1 removed [ 384.793929][T17488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.801407][T17488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.810552][T17488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.818096][T17488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.839157][T17488] bond3: (slave geneve3): Releasing active interface [ 384.846028][T17488] geneve3: left promiscuous mode [ 384.858817][T17494] team0: Mode changed to "loadbalance" [ 384.883022][T17496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.892379][T17496] team0: Port device bond0 added [ 384.897757][T17499] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 384.922893][T17502] netlink: 'syz.9.14124': attribute type 1 has an invalid length. [ 384.940638][T17502] 8021q: adding VLAN 0 to HW filter on device bond4 [ 384.958927][T17540] netlink: 'syz.2.14126': attribute type 13 has an invalid length. [ 384.970030][T17502] bond4: (slave veth15): Enslaving as an active interface with a down link [ 384.985191][T17540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.994141][T17540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.010108][T17502] dummy0: left promiscuous mode [ 385.022945][T17502] bond4: (slave dummy0): making interface the new active one [ 385.032246][T17502] dummy0: entered promiscuous mode [ 385.037631][T17502] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 385.906324][T17576] bond5: (slave dummy0): Releasing active interface [ 385.941183][T17576] dummy0: left promiscuous mode [ 385.976372][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14138'. [ 386.053141][T17576] bond0: (slave geneve1): Releasing backup interface [ 386.065946][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14138'. [ 386.087729][T17593] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 386.097723][T17576] bond1: (slave bridge1): Releasing active interface [ 386.134688][T17576] bridge1: port 1(bond3) entered disabled state [ 386.160680][T17599] loop1: detected capacity change from 0 to 1024 [ 386.167538][T17576] bond5: (slave veth11): Releasing active interface [ 386.182929][T17599] EXT4-fs: Ignoring removed nobh option [ 386.189983][T17599] EXT4-fs: Ignoring removed bh option [ 386.269405][T17599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.347726][T14088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.385185][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14151'. [ 386.407701][T17640] IPv4: Oversized IP packet from 127.202.26.0 [ 386.707758][T17704] validate_nla: 3 callbacks suppressed [ 386.707773][T17704] netlink: 'syz.9.14177': attribute type 7 has an invalid length. [ 386.721319][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14177'. [ 386.739845][T17704] netlink: 'syz.9.14177': attribute type 7 has an invalid length. [ 386.747813][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14177'. [ 386.968996][T17737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.977791][T17737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.987065][T17737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14189'. [ 387.221992][T17749] SELinux: ebitmap: truncated map [ 387.228129][T17749] SELinux: failed to load policy [ 387.252040][T17752] pim6reg1: entered promiscuous mode [ 387.257493][T17752] pim6reg1: entered allmulticast mode [ 387.629927][T17815] netlink: 'syz.2.14216': attribute type 1 has an invalid length. [ 387.653342][T17815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.665110][T17815] vlan0: entered allmulticast mode [ 387.671711][T17815] bond8: entered allmulticast mode [ 387.734271][T17863] ip6gretap0: entered promiscuous mode [ 387.891822][T17884] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.14225'. [ 387.901141][T17884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14225'. [ 387.924512][T17885] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.593877][T17893] bridge_slave_0: left allmulticast mode [ 388.599576][T17893] bridge_slave_0: left promiscuous mode [ 388.605303][T17893] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.616080][T17893] bridge_slave_1: left allmulticast mode [ 388.621971][T17893] bridge_slave_1: left promiscuous mode [ 388.627649][T17893] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.639582][T17893] bond0: (slave bond_slave_0): Releasing backup interface [ 388.649610][T17893] bond0: (slave bond_slave_1): Releasing backup interface [ 388.663053][T17893] team0: Port device team_slave_0 removed [ 388.672792][T17893] team0: Port device team_slave_1 removed [ 388.680295][T17893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.687757][T17893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.695162][T17904] netlink: 'syz.1.14227': attribute type 10 has an invalid length. [ 388.696962][T17893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.712021][T17893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.736008][T17893] bond1: (slave geneve2): Releasing active interface [ 388.742763][T17893] geneve2: left promiscuous mode [ 388.750990][T17891] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 388.780587][T17898] team0: Mode changed to "loadbalance" [ 388.829435][T17904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.839384][T17904] team0: Port device bond0 added [ 389.152553][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 389.152568][ T29] audit: type=1326 audit(1751691198.608:26184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.184134][ T29] audit: type=1326 audit(1751691198.608:26185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.207872][ T29] audit: type=1326 audit(1751691198.608:26186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.231602][ T29] audit: type=1326 audit(1751691198.608:26187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.255416][ T29] audit: type=1326 audit(1751691198.608:26188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.279117][ T29] audit: type=1326 audit(1751691198.608:26189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.302845][ T29] audit: type=1326 audit(1751691198.608:26190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.326636][ T29] audit: type=1326 audit(1751691198.608:26191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.350352][ T29] audit: type=1326 audit(1751691198.608:26192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17992 comm="syz.3.14263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc02ee929 code=0x7ffc0000 [ 389.608458][T18026] netlink: 'syz.3.14276': attribute type 1 has an invalid length. [ 389.759456][T18070] pimreg: entered allmulticast mode [ 389.764821][ T29] audit: type=1400 audit(1751691199.238:26193): avc: denied { bind } for pid=18071 comm="syz.2.14281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 389.786832][T18070] pimreg: left allmulticast mode [ 390.558878][T18115] loop1: detected capacity change from 0 to 164 [ 390.567517][T18115] syz.1.14293: attempt to access beyond end of device [ 390.567517][T18115] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 390.581871][T18115] syz.1.14293: attempt to access beyond end of device [ 390.581871][T18115] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.638697][T18124] netlink: 'syz.1.14296': attribute type 298 has an invalid length. [ 390.772113][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14302'. [ 391.681041][ T8845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.728728][ T8845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.794494][ T8845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.860840][ T8845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.174201][ T8845] team0: Port device bond0 removed [ 392.180182][ T8845] bond0 (unregistering): Released all slaves [ 392.189106][ T8845] bond1 (unregistering): Released all slaves [ 392.238355][ T8845] tipc: Left network mode [ 392.256870][ T8845] hsr_slave_0: left promiscuous mode [ 392.262890][ T8845] hsr_slave_1: left promiscuous mode [ 392.272028][ T8845] veth1_macvtap: left promiscuous mode [ 392.277564][ T8845] veth0_macvtap: left promiscuous mode [ 392.283125][ T8845] veth1_vlan: left promiscuous mode [ 392.288432][ T8845] veth0_vlan: left promiscuous mode [ 393.289723][T18240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18240 comm=syz.1.14334 [ 393.958468][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 393.958482][ T29] audit: type=1400 audit(1751691203.649:26280): avc: denied { prog_load } for pid=18243 comm="syz.9.14335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 393.989535][ T29] audit: type=1400 audit(1751691203.649:26281): avc: denied { map_create } for pid=18243 comm="syz.9.14335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.008993][ T29] audit: type=1400 audit(1751691203.649:26282): avc: denied { prog_load } for pid=18243 comm="syz.9.14335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.028375][ T29] audit: type=1400 audit(1751691203.649:26283): avc: denied { prog_load } for pid=18243 comm="syz.9.14335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.047746][ T29] audit: type=1400 audit(1751691203.649:26284): avc: denied { create } for pid=18243 comm="syz.9.14335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 394.068682][ T29] audit: type=1400 audit(1751691203.681:26285): avc: denied { execmem } for pid=18242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 394.088386][ T29] audit: type=1400 audit(1751691203.681:26286): avc: denied { open } for pid=18245 comm="syz.2.14336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 394.107948][ T29] audit: type=1400 audit(1751691203.702:26287): avc: denied { read write } for pid=18249 comm="syz.1.14338" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 394.132418][ T29] audit: type=1400 audit(1751691203.712:26288): avc: denied { read write } for pid=14088 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.157341][ T29] audit: type=1400 audit(1751691203.733:26289): avc: denied { map_create } for pid=18247 comm="syz.3.14337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 395.581215][ T8845] dummy0: left promiscuous mode [ 397.756895][T18302] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.764094][ T1036] IPVS: starting estimator thread 0... [ 397.847139][T18329] IPVS: using max 2544 ests per chain, 127200 per kthread [ 398.825632][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 398.825649][ T29] audit: type=1400 audit(1751691208.764:26353): avc: denied { execmem } for pid=18331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 398.857364][ T29] audit: type=1400 audit(1751691208.796:26354): avc: denied { create } for pid=18333 comm="syz.9.14355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 398.888809][ T29] audit: type=1400 audit(1751691208.806:26355): avc: denied { read write } for pid=14088 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 398.914490][ T29] audit: type=1400 audit(1751691208.817:26356): avc: denied { name_bind } for pid=18333 comm="syz.9.14355" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 400.102042][ T29] audit: type=1400 audit(1751691210.108:26357): avc: denied { append } for pid=18344 comm="syz.2.14360" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 400.111553][T18346] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14359'. [ 400.127375][ T29] audit: type=1400 audit(1751691210.108:26358): avc: denied { prog_load } for pid=18344 comm="syz.2.14360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 400.155430][T18346] netem: change failed [ 400.160739][ T29] audit: type=1400 audit(1751691210.108:26359): avc: denied { execmem } for pid=18342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 400.181577][ T29] audit: type=1400 audit(1751691210.108:26360): avc: denied { map_create } for pid=18343 comm="syz.9.14359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 400.201212][ T29] audit: type=1400 audit(1751691210.108:26361): avc: denied { prog_load } for pid=18343 comm="syz.9.14359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 400.221896][ T29] audit: type=1400 audit(1751691210.203:26362): avc: denied { read write } for pid=14088 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 402.895247][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14367'. [ 404.438346][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 404.438361][ T29] audit: type=1400 audit(1751691214.656:26401): avc: denied { execmem } for pid=18384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 404.441143][T18389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14373'. [ 404.448544][ T29] audit: type=1400 audit(1751691214.667:26402): avc: denied { map_create } for pid=18388 comm="syz.1.14374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.492997][ T29] audit: type=1400 audit(1751691214.688:26403): avc: denied { prog_load } for pid=18386 comm="syz.2.14372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.512335][ T29] audit: type=1400 audit(1751691214.709:26404): avc: denied { prog_load } for pid=18388 comm="syz.1.14374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.524398][T18405] netlink: 'syz.9.14371': attribute type 4 has an invalid length. [ 404.532329][ T29] audit: type=1400 audit(1751691214.751:26405): avc: denied { prog_load } for pid=18385 comm="syz.9.14371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.560602][T18390] netlink: 'syz.1.14374': attribute type 12 has an invalid length. [ 404.568728][ T29] audit: type=1400 audit(1751691214.782:26406): avc: denied { create } for pid=18388 comm="syz.1.14374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 404.605051][ T29] audit: type=1400 audit(1751691214.835:26407): avc: denied { read write } for pid=14088 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 406.071536][ T29] audit: type=1400 audit(1751691216.368:26408): avc: denied { map_create } for pid=18410 comm="syz.3.14377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.092236][ T29] audit: type=1400 audit(1751691216.368:26409): avc: denied { prog_load } for pid=18410 comm="syz.3.14377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.111591][ T29] audit: type=1400 audit(1751691216.368:26410): avc: denied { prog_load } for pid=18410 comm="syz.3.14377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.150636][T18427] netlink: 'syz.1.14380': attribute type 17 has an invalid length. [ 406.158707][T18427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14380'. [ 406.168354][T18427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.026393][ T8791] ================================================================== [ 408.034510][ T8791] BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios [ 408.042331][ T8791] [ 408.044637][ T8791] write to 0xffff8881192f8908 of 44 bytes by task 18442 on cpu 0: [ 408.052421][ T8791] tty_set_termios+0xc0/0x8c0 [ 408.057084][ T8791] set_termios+0x496/0x4e0 [ 408.061506][ T8791] tty_mode_ioctl+0x379/0x5c0 [ 408.066174][ T8791] ppp_asynctty_ioctl+0x13f/0x2d0 [ 408.071185][ T8791] tty_ioctl+0x845/0xb80 [ 408.075430][ T8791] __se_sys_ioctl+0xce/0x140 [ 408.080006][ T8791] __x64_sys_ioctl+0x43/0x50 [ 408.084592][ T8791] x64_sys_call+0x19a8/0x2fb0 [ 408.089279][ T8791] do_syscall_64+0xd2/0x200 [ 408.093773][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.099653][ T8791] [ 408.101963][ T8791] read to 0xffff8881192f8922 of 1 bytes by task 8791 on cpu 1: [ 408.109485][ T8791] ppp_asynctty_receive+0x884/0xd40 [ 408.114677][ T8791] tty_ldisc_receive_buf+0xbf/0xf0 [ 408.119783][ T8791] tty_port_default_receive_buf+0x59/0x90 [ 408.125489][ T8791] flush_to_ldisc+0x141/0x360 [ 408.130159][ T8791] process_scheduled_works+0x4cb/0x9d0 [ 408.135627][ T8791] worker_thread+0x582/0x770 [ 408.140208][ T8791] kthread+0x489/0x510 [ 408.144258][ T8791] ret_from_fork+0xda/0x150 [ 408.148743][ T8791] ret_from_fork_asm+0x1a/0x30 [ 408.153490][ T8791] [ 408.155793][ T8791] value changed: 0x13 -> 0x31 [ 408.160452][ T8791] [ 408.162758][ T8791] Reported by Kernel Concurrency Sanitizer on: [ 408.168897][ T8791] CPU: 1 UID: 0 PID: 8791 Comm: kworker/u8:16 Tainted: G W 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 408.183116][ T8791] Tainted: [W]=WARN [ 408.186904][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.196942][ T8791] Workqueue: events_unbound flush_to_ldisc [ 408.202831][ T8791] ================================================================== [ 409.732179][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 409.732194][ T29] audit: type=1400 audit(1751691220.223:26426): avc: denied { write } for pid=3294 comm="syz-executor" path="pipe:[1837]" dev="pipefs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 409.765436][ T29] audit: type=1400 audit(1751691220.223:26427): avc: denied { execmem } for pid=18443 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 409.785057][ T29] audit: type=1400 audit(1751691220.223:26428): avc: denied { write } for pid=3294 comm="syz-executor" path="pipe:[1837]" dev="pipefs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 409.809533][ T29] audit: type=1400 audit(1751691220.223:26429): avc: denied { write } for pid=3294 comm="syz-executor" path="pipe:[1837]" dev="pipefs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 409.836509][ T29] audit: type=1400 audit(1751691220.307:26430): avc: denied { prog_load } for pid=18444 comm="syz.9.14385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.857154][ T29] audit: type=1400 audit(1751691220.328:26431): avc: denied { map_create } for pid=18444 comm="syz.9.14385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.876593][ T29] audit: type=1400 audit(1751691220.328:26432): avc: denied { prog_load } for pid=18444 comm="syz.9.14385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.897210][ T29] audit: type=1400 audit(1751691220.328:26433): avc: denied { prog_load } for pid=18444 comm="syz.9.14385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 415.675475][ T8791] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.731084][ T8791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.778526][ T8791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.844359][ T8791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.996046][ T8791] team0: Port device bond0 removed [ 416.002064][ T8791] bond0 (unregistering): Released all slaves [ 416.011387][ T8791] bond1 (unregistering): Released all slaves [ 416.052613][ T8791] tipc: Left network mode [ 416.072076][ T8791] hsr_slave_0: left promiscuous mode [ 416.077680][ T8791] hsr_slave_1: left promiscuous mode [ 416.085967][ T8791] veth1_macvtap: left promiscuous mode [ 416.092700][ T8791] veth0_macvtap: left promiscuous mode [ 416.098220][ T8791] veth1_vlan: left promiscuous mode [ 416.103484][ T8791] veth0_vlan: left promiscuous mode [ 416.444453][ T8791] IPVS: stop unused estimator thread 0...