last executing test programs: 2m25.557260187s ago: executing program 32 (id=770): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x0, 0x0, 0x173}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2m24.890683247s ago: executing program 33 (id=782): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xa2980, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x1}, 0x18) close(0x3) 2m23.000240946s ago: executing program 2 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x3, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4008000) 2m22.833703179s ago: executing program 2 (id=820): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2m22.699162131s ago: executing program 2 (id=823): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 2m22.551597453s ago: executing program 2 (id=825): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m22.550975184s ago: executing program 2 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 2m22.333478797s ago: executing program 2 (id=827): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m22.326668637s ago: executing program 34 (id=827): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m0.789183893s ago: executing program 7 (id=1521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m0.653181625s ago: executing program 7 (id=1526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 2m0.604871236s ago: executing program 7 (id=1528): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1m59.460988174s ago: executing program 7 (id=1554): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 1m59.229698168s ago: executing program 7 (id=1564): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5, 0x4820af2e253c76f9, 0x75}, &(0x7f00000000c0)=0x18) 1m58.894131073s ago: executing program 7 (id=1569): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'pids'}]}, 0x6) 1m58.858699643s ago: executing program 35 (id=1569): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'pids'}]}, 0x6) 1m52.69439519s ago: executing program 5 (id=1717): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 1m52.65265852s ago: executing program 5 (id=1721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) 1m52.420741164s ago: executing program 5 (id=1738): r0 = socket(0xa, 0x1, 0x0) setresuid(0x0, 0xee01, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe64, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2d}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0xe64, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40000002}, 0x1c) 1m52.398486724s ago: executing program 5 (id=1739): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x80100000400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47d8780820335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff000000e8f20000000200", "b73267f0fffffffff2ff00", [0x10000000000004]}) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1m52.02308929s ago: executing program 5 (id=1747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00014e", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB='Q'], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 1m51.509063568s ago: executing program 5 (id=1765): r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0!|!') 1m51.489461939s ago: executing program 36 (id=1765): r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0!|!') 1m13.182234467s ago: executing program 6 (id=3146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) 1m13.133490438s ago: executing program 6 (id=3148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1m12.875094072s ago: executing program 6 (id=3156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) 1m12.618819246s ago: executing program 6 (id=3164): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1m12.460916208s ago: executing program 6 (id=3169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r2) 1m12.180529843s ago: executing program 6 (id=3178): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$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") rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) tkill(r0, 0x1) tkill(r1, 0x14) 1m12.137740433s ago: executing program 37 (id=3178): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$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") rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) tkill(r0, 0x1) tkill(r1, 0x14) 5.75816186s ago: executing program 8 (id=5635): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 5.705995431s ago: executing program 8 (id=5636): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x4008000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) shutdown(r0, 0x2) 5.580171533s ago: executing program 8 (id=5638): r0 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 5.361383096s ago: executing program 8 (id=5644): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ec) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5.297504267s ago: executing program 8 (id=5645): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x1, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0xa, 0x7ffffefc, 0x3, 0x1, 0x0, 0x4, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x400000000005, 0xffffffffffffffff, 0x3) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) 5.149434789s ago: executing program 8 (id=5649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 5.038395621s ago: executing program 38 (id=5649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 2.255151334s ago: executing program 1 (id=5729): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.852599041s ago: executing program 3 (id=5747): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.711916533s ago: executing program 3 (id=5753): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.572346005s ago: executing program 9 (id=5761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000880)='kmem_cache_free\x00', r1, 0x0, 0x20000}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2], 0x1}, 0x58) 1.536266466s ago: executing program 9 (id=5762): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 1.522547506s ago: executing program 9 (id=5763): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r2, 0x0, 0xc19) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.445619717s ago: executing program 1 (id=5764): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.385561638s ago: executing program 1 (id=5765): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xfff3}}]}}]}, 0x40}}, 0x20040054) 1.384841398s ago: executing program 1 (id=5766): r0 = socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) unshare(0x22020600) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 903.546265ms ago: executing program 3 (id=5774): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 702.215989ms ago: executing program 9 (id=5780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, 0x0, 0x0) 680.502929ms ago: executing program 0 (id=5781): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 650.8595ms ago: executing program 0 (id=5782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0) 645.93498ms ago: executing program 9 (id=5783): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 565.586141ms ago: executing program 9 (id=5785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) syz_open_dev$usbfs(0x0, 0xf1, 0x0) 565.334131ms ago: executing program 0 (id=5786): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 535.124521ms ago: executing program 4 (id=5788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x1, 0x0) getdents64(r1, &(0x7f0000003440)=""/92, 0x5c) 504.386462ms ago: executing program 3 (id=5789): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 504.024652ms ago: executing program 4 (id=5799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) 449.110283ms ago: executing program 3 (id=5790): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) 363.240564ms ago: executing program 3 (id=5791): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r2, 0x0, 0xc19) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 362.682104ms ago: executing program 4 (id=5802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r2, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) 184.859377ms ago: executing program 1 (id=5792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 184.292867ms ago: executing program 0 (id=5804): r0 = syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 162.047997ms ago: executing program 1 (id=5793): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 148.479098ms ago: executing program 0 (id=5794): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900a90101"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 61.530029ms ago: executing program 4 (id=5795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.673709ms ago: executing program 0 (id=5796): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) 18.264349ms ago: executing program 4 (id=5797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) 0s ago: executing program 4 (id=5798): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$l2tp(r0, &(0x7f0000000040)=""/70, 0x46, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): _t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.852757][ T29] audit: type=1400 audit(1752920345.817:3502): avc: denied { map_read map_write } for pid=11778 comm="syz.3.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.852800][ T29] audit: type=1400 audit(1752920345.817:3503): avc: denied { prog_load } for pid=11778 comm="syz.3.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.891221][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3374'. [ 128.893014][ T29] audit: type=1400 audit(1752920345.817:3504): avc: denied { bpf } for pid=11778 comm="syz.3.3373" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.931104][T11786] netlink: 'syz.8.3375': attribute type 5 has an invalid length. [ 128.969340][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3375'. [ 129.025588][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3379'. [ 129.750239][T11859] rdma_op ffff8881065f9180 conn xmit_rdma 0000000000000000 [ 130.206197][T11884] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.267785][T11884] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.323722][T11884] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.382761][T11884] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.482601][T11884] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.504640][T11884] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.520574][T11884] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.534013][T11913] macvlan2: entered promiscuous mode [ 130.539429][T11913] bond0: entered promiscuous mode [ 130.544562][T11913] bond_slave_0: entered promiscuous mode [ 130.550498][T11913] bond_slave_1: entered promiscuous mode [ 130.556332][T11913] team0: entered promiscuous mode [ 130.567854][T11913] team_slave_0: entered promiscuous mode [ 130.573646][T11913] team_slave_1: entered promiscuous mode [ 130.579397][T11913] hsr_slave_0: entered promiscuous mode [ 130.585220][T11913] macvlan2: entered allmulticast mode [ 130.590648][T11913] bond0: entered allmulticast mode [ 130.595759][T11913] bond_slave_0: entered allmulticast mode [ 130.601529][T11913] bond_slave_1: entered allmulticast mode [ 130.607251][T11913] team0: entered allmulticast mode [ 130.612914][T11913] team_slave_0: entered allmulticast mode [ 130.618656][T11913] team_slave_1: entered allmulticast mode [ 130.624476][T11913] hsr_slave_0: entered allmulticast mode [ 130.630668][T11913] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.650117][T11913] bond0: left allmulticast mode [ 130.655035][T11913] bond_slave_0: left allmulticast mode [ 130.660521][T11913] bond_slave_1: left allmulticast mode [ 130.665979][T11913] team0: left allmulticast mode [ 130.689607][T11913] team_slave_0: left allmulticast mode [ 130.695162][T11913] team_slave_1: left allmulticast mode [ 130.700646][T11913] hsr_slave_0: left allmulticast mode [ 130.706049][T11913] bond0: left promiscuous mode [ 130.710841][T11913] bond_slave_0: left promiscuous mode [ 130.716337][T11913] bond_slave_1: left promiscuous mode [ 130.721872][T11913] team0: left promiscuous mode [ 130.732442][T11913] team_slave_0: left promiscuous mode [ 130.738000][T11913] team_slave_1: left promiscuous mode [ 130.743536][T11913] hsr_slave_0: left promiscuous mode [ 130.767966][T11884] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.905006][T11922] SELinux: policydb version 0 does not match my version range 15-34 [ 130.960444][T11922] SELinux: failed to load policy [ 131.292931][T11955] netlink: 'syz.8.3448': attribute type 1 has an invalid length. [ 131.462999][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 131.474602][T11961] IPVS: Error joining to the multicast group [ 131.523607][T11963] netlink: 332 bytes leftover after parsing attributes in process `syz.8.3452'. [ 131.618742][T11976] ref_ctr_offset mismatch. inode: 0xd03 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 131.712649][T11983] serio: Serial port ptm0 [ 131.794363][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3464'. [ 131.803415][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3464'. [ 131.812414][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3464'. [ 131.897902][T12002] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 131.906246][T12002] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 131.914549][T12002] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 131.922867][T12002] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 131.933471][T12002] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 132.004393][T12019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.013138][T12019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.497698][T12048] ip6gre1: entered promiscuous mode [ 132.503032][T12048] ip6gre1: entered allmulticast mode [ 132.611682][T12057] netlink: 'syz.8.3493': attribute type 2 has an invalid length. [ 132.801624][T12072] SELinux: failed to load policy [ 133.192580][T12113] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.201052][T12113] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.209321][T12113] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.217833][T12113] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.231384][T12113] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 133.430631][T12142] atomic_op ffff88811916a528 conn xmit_atomic 0000000000000000 [ 133.757472][T12168] __nla_validate_parse: 13 callbacks suppressed [ 133.757489][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3545'. [ 133.772924][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3545'. [ 133.784851][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3544'. [ 133.867184][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 133.867201][ T29] audit: type=1400 audit(1752920350.867:3666): avc: denied { bind } for pid=12175 comm="syz.4.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.892908][ T29] audit: type=1400 audit(1752920350.867:3667): avc: denied { name_bind } for pid=12175 comm="syz.4.3548" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 133.914072][ T29] audit: type=1400 audit(1752920350.867:3668): avc: denied { node_bind } for pid=12175 comm="syz.4.3548" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 133.941934][ T29] audit: type=1400 audit(1752920350.937:3669): avc: denied { setopt } for pid=12175 comm="syz.4.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.961753][ T29] audit: type=1400 audit(1752920350.937:3670): avc: denied { connect } for pid=12175 comm="syz.4.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.981650][ T29] audit: type=1400 audit(1752920350.937:3671): avc: denied { write } for pid=12175 comm="syz.4.3548" laddr=::1 lport=58732 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.078062][ T29] audit: type=1400 audit(1752920351.027:3672): avc: denied { sys_module } for pid=12178 comm="syz.3.3549" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 134.099247][ T29] audit: type=1400 audit(1752920351.027:3673): avc: denied { create } for pid=12183 comm="syz.0.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 134.135456][T12199] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3559'. [ 134.273030][ T29] audit: type=1400 audit(1752920351.167:3674): avc: denied { mounton } for pid=12197 comm="syz.0.3558" path="/663/file0" dev="tmpfs" ino=3420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 134.295877][ T29] audit: type=1400 audit(1752920351.167:3675): avc: denied { write } for pid=12200 comm="syz.3.3560" path="socket:[36152]" dev="sockfs" ino=36152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.343526][T12216] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.418467][T12227] netlink: 332 bytes leftover after parsing attributes in process `syz.9.3574'. [ 134.429164][T12229] netlink: 'syz.8.3572': attribute type 1 has an invalid length. [ 134.478257][T12236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12236 comm=syz.8.3577 [ 134.491022][T12236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12236 comm=syz.8.3577 [ 134.516065][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3578'. [ 134.550834][T12244] netlink: 'syz.8.3581': attribute type 1 has an invalid length. [ 134.587244][T12244] bond1: (slave gretap1): making interface the new active one [ 134.596261][T12244] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.661477][ T6850] IPVS: starting estimator thread 0... [ 134.689000][T12258] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 134.748157][T12266] SELinux: failed to load policy [ 134.755096][T12256] IPVS: using max 2544 ests per chain, 127200 per kthread [ 134.801357][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3596'. [ 134.810382][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3596'. [ 134.932258][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3605'. [ 134.995211][T12302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.043045][T12302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.092424][T12302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.173216][T12302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.207441][T12302] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.218149][T12302] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.228996][T12302] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.239852][T12302] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.286197][T12340] vhci_hcd: invalid port number 96 [ 135.291382][T12340] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 135.369254][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 135.383725][T12353] bridge0: port 3(macvlan2) entered blocking state [ 135.390358][T12353] bridge0: port 3(macvlan2) entered disabled state [ 135.396951][T12353] macvlan2: entered allmulticast mode [ 135.402523][T12353] bridge0: entered allmulticast mode [ 135.408292][T12353] macvlan2: left allmulticast mode [ 135.413471][T12353] bridge0: left allmulticast mode [ 136.865758][T12406] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.933234][T12406] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.006089][T12406] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.040991][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.048800][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.056595][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.064393][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.072268][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.080042][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.087781][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.095683][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.103470][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.111289][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.119030][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.126813][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.134669][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.142440][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.150225][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.158061][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.165901][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.173804][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.181568][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.189318][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.197193][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.204966][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.212776][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.220532][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.228270][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.236116][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.243870][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.251730][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.259466][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.267223][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.275277][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.283092][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.290877][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.298643][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.306533][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.314264][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.322008][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.329749][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.337513][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.345323][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.353115][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.360834][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.368889][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 137.378607][ T6839] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.379634][T12434] netlink: 'syz.3.3661': attribute type 1 has an invalid length. [ 137.433680][T12406] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.531254][T12453] sg_write: data in/out 393180/140 bytes for SCSI command 0x0-- guessing data in; [ 137.531254][T12453] program syz.3.3670 not setting count and/or reply_len properly [ 137.575644][T12406] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.587464][T12406] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.600873][T12406] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.661867][T12406] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.867850][T12492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=12492 comm=syz.4.3681 [ 138.082322][T12522] infiniband syz2: set down [ 138.086926][T12522] infiniband syz2: added syzkaller0 [ 138.110917][T12522] RDS/IB: syz2: added [ 138.122567][T12522] smc: adding ib device syz2 with port count 1 [ 138.134797][T12522] smc: ib device syz2 port 1 has pnetid [ 138.386011][ T7094] smc: removing ib device syz2 [ 138.794928][T12556] netlink: 'syz.9.3715': attribute type 1 has an invalid length. [ 138.802808][T12556] __nla_validate_parse: 1 callbacks suppressed [ 138.802824][T12556] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.3715'. [ 138.924765][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3717'. [ 138.954059][T12560] bridge0: port 1(macvlan2) entered blocking state [ 138.960660][T12560] bridge0: port 1(macvlan2) entered disabled state [ 138.968055][T12560] macvlan2: entered allmulticast mode [ 138.973501][T12560] bridge0: entered allmulticast mode [ 138.988816][T12560] macvlan2: left allmulticast mode [ 138.994002][T12560] bridge0: left allmulticast mode [ 139.106124][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 139.106143][ T29] audit: type=1400 audit(1752920356.107:3778): avc: denied { map_create } for pid=12565 comm="syz.9.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.131866][ T29] audit: type=1400 audit(1752920356.107:3779): avc: denied { bpf } for pid=12565 comm="syz.9.3720" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.178658][ T29] audit: type=1400 audit(1752920356.137:3780): avc: denied { perfmon } for pid=12567 comm="syz.4.3721" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.200231][ T29] audit: type=1400 audit(1752920356.137:3781): avc: denied { map_read map_write } for pid=12567 comm="syz.4.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.220459][ T29] audit: type=1400 audit(1752920356.137:3782): avc: denied { prog_load } for pid=12567 comm="syz.4.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.239637][ T29] audit: type=1400 audit(1752920356.137:3783): avc: denied { prog_run } for pid=12567 comm="syz.4.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.258936][ T29] audit: type=1400 audit(1752920356.167:3784): avc: denied { create } for pid=12565 comm="syz.9.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.279782][ T29] audit: type=1400 audit(1752920356.167:3785): avc: denied { write } for pid=12565 comm="syz.9.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.300249][ T29] audit: type=1400 audit(1752920356.167:3786): avc: denied { read } for pid=12565 comm="syz.9.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.323124][ T29] audit: type=1400 audit(1752920356.247:3787): avc: denied { mount } for pid=12569 comm="syz.9.3722" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.392679][T12585] netlink: 14593 bytes leftover after parsing attributes in process `syz.8.3729'. [ 139.417842][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3725'. [ 139.917834][T12636] rdma_op ffff88810b671d80 conn xmit_rdma 0000000000000000 [ 140.018372][T12640] serio: Serial port ptm0 [ 140.363306][T12673] netlink: 'syz.4.3769': attribute type 10 has an invalid length. [ 140.371304][T12673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3769'. [ 140.394301][T12673] batman_adv: batadv0: Adding interface: macvlan0 [ 140.400865][T12673] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.428417][T12673] batman_adv: batadv0: Interface activated: macvlan0 [ 140.522172][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.530200][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.538079][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.545857][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.553677][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.561527][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.569281][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.577129][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.584928][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.592789][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.600540][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.608276][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.616055][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.623814][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.631656][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.639427][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.647203][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.654965][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.662795][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.670609][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.678401][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.686205][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.694029][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.695663][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3780'. [ 140.701820][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.710816][T12697] netlink: 'syz.0.3780': attribute type 14 has an invalid length. [ 140.718489][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.718514][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.718536][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.749623][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.757430][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.765191][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.771215][T12697] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.772966][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.772990][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.781221][T12697] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.788895][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.796636][T12697] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.804785][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.812502][T12697] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.836755][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.844615][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.845211][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3780'. [ 140.852396][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.852423][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.861409][T12697] netlink: 'syz.0.3780': attribute type 14 has an invalid length. [ 140.869101][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.892453][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.900237][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.907998][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.915826][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 140.931070][T12701] macvtap0: entered promiscuous mode [ 140.937034][T12701] macvtap0: left promiscuous mode [ 140.952707][ T10] hid-generic 0000:007F:FFFFFFFE.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.984767][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3783'. [ 141.041936][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3787'. [ 141.102244][T12722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3790'. [ 141.133505][T12726] netem: change failed [ 141.372475][T12766] program syz.9.3809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.405447][T12766] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 141.715812][T12803] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 141.725379][T12803] 0ªî{X¹¦: entered allmulticast mode [ 141.740014][T12803] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 143.685834][T12897] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 143.696351][ T6842] kernel read not supported for file /vga_arbiter (pid: 6842 comm: kworker/1:9) [ 143.886773][T12915] netlink: 'syz.8.3873': attribute type 8 has an invalid length. [ 144.040867][T12929] only policy match revision 0 supported [ 144.040882][T12929] unable to load match [ 144.227566][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 144.227579][ T29] audit: type=1400 audit(1752920361.227:3976): avc: denied { create } for pid=12942 comm="syz.9.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.277564][ T29] audit: type=1400 audit(1752920361.257:3977): avc: denied { bind } for pid=12942 comm="syz.9.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.296983][ T29] audit: type=1400 audit(1752920361.257:3978): avc: denied { create } for pid=12942 comm="syz.9.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.316841][ T29] audit: type=1400 audit(1752920361.267:3979): avc: denied { ioctl } for pid=12942 comm="syz.9.3885" path="socket:[38421]" dev="sockfs" ino=38421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.341875][ T29] audit: type=1400 audit(1752920361.267:3980): avc: denied { write } for pid=12942 comm="syz.9.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.361354][ T29] audit: type=1326 audit(1752920361.277:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf22beab89 code=0x7fc00000 [ 144.384787][ T29] audit: type=1326 audit(1752920361.277:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdf22beac4f code=0x7fc00000 [ 144.408227][ T29] audit: type=1326 audit(1752920361.277:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdf22c4e9a9 code=0x7fc00000 [ 144.448860][ T29] audit: type=1400 audit(1752920361.447:3984): avc: denied { write } for pid=12947 comm="syz.4.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 144.491974][ T29] audit: type=1400 audit(1752920361.497:3985): avc: denied { create } for pid=12949 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.540607][T12954] __nla_validate_parse: 5 callbacks suppressed [ 144.540621][T12954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3890'. [ 144.755410][T12988] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3903'. [ 144.785791][T12988] batadv1: entered promiscuous mode [ 144.791272][T12988] batadv1: entered allmulticast mode [ 144.877752][T12997] 9pnet_fd: Insufficient options for proto=fd [ 145.191302][ T6839] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.200414][ T6839] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.636741][T13045] team0: Port device team_slave_0 removed [ 145.890182][T13069] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.931972][T13069] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 145.974395][T13077] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 146.230938][T13116] netlink: 'syz.3.3960': attribute type 3 has an invalid length. [ 146.993291][T13175] netlink: 'syz.9.3985': attribute type 10 has an invalid length. [ 147.003528][T13175] team0: Port device hsr_slave_0 added [ 147.546098][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119cb8600: rx timeout, send abort [ 147.932558][T13242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4016'. [ 147.975333][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4018'. [ 148.054483][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119cb8600: abort rx timeout. Force session deactivation [ 148.247627][T13266] vhci_hcd: invalid port number 96 [ 148.253023][T13266] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 148.421020][T13279] lo speed is unknown, defaulting to 1000 [ 148.426869][T13279] lo speed is unknown, defaulting to 1000 [ 148.449912][T13279] lo speed is unknown, defaulting to 1000 [ 148.456112][T13279] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.482811][T13279] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 148.497161][T13279] lo speed is unknown, defaulting to 1000 [ 148.505368][T13279] lo speed is unknown, defaulting to 1000 [ 148.511467][T13279] lo speed is unknown, defaulting to 1000 [ 148.517538][T13279] lo speed is unknown, defaulting to 1000 [ 148.524223][T13279] lo speed is unknown, defaulting to 1000 [ 148.530299][T13279] lo speed is unknown, defaulting to 1000 [ 148.685205][T13305] hub 9-0:1.0: USB hub found [ 148.691442][T13305] hub 9-0:1.0: 8 ports detected [ 148.751883][T13315] can0: slcan on ttyS3. [ 148.789940][T13315] can0 (unregistered): slcan off ttyS3. [ 148.799696][T13315] Falling back ldisc for ttyS3. [ 148.920867][T13346] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 149.093447][ T7360] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 149.101034][ T7360] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 149.108428][ T7360] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 149.119800][ T7360] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 149.138379][T13368] lo speed is unknown, defaulting to 1000 [ 149.256377][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 149.256393][ T29] audit: type=1400 audit(1752920366.257:4135): avc: denied { remount } for pid=13367 comm="syz.3.4071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.308580][ T29] audit: type=1326 audit(1752920366.307:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13282 comm="syz.0.4034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7fc00000 [ 149.343281][T13383] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 149.394457][ T29] audit: type=1400 audit(1752920366.397:4137): avc: denied { create } for pid=13390 comm="syz.9.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.415109][ T29] audit: type=1400 audit(1752920366.397:4138): avc: denied { setopt } for pid=13390 comm="syz.9.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.435583][ T29] audit: type=1400 audit(1752920366.397:4139): avc: denied { connect } for pid=13390 comm="syz.9.4083" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.543654][ T29] audit: type=1326 audit(1752920366.547:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13410 comm="syz.9.4091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb955be9a9 code=0x0 [ 149.689454][ T29] audit: type=1400 audit(1752920366.687:4141): avc: denied { load_policy } for pid=13424 comm="syz.8.4098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.710070][T13425] SELinux: ebitmap: truncated map [ 149.715578][T13425] SELinux: failed to load policy [ 149.737371][T13428] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4099'. [ 149.926403][ T29] audit: type=1326 audit(1752920366.927:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.3.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 149.949992][ T29] audit: type=1326 audit(1752920366.927:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.3.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 149.973428][ T29] audit: type=1326 audit(1752920366.927:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.3.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 151.090588][T13474] vhci_hcd: invalid port number 96 [ 151.095792][T13474] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 151.141660][T13483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4125'. [ 151.363264][T13496] lo speed is unknown, defaulting to 1000 [ 151.575907][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4134'. [ 151.620335][T13512] netlink: 'syz.8.4135': attribute type 10 has an invalid length. [ 151.628218][T13512] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4135'. [ 151.795992][T13534] netlink: 'syz.0.4146': attribute type 1 has an invalid length. [ 151.803815][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4146'. [ 151.816280][T13536] netlink: 3529 bytes leftover after parsing attributes in process `syz.8.4147'. [ 151.850534][T13540] random: crng reseeded on system resumption [ 152.224643][T13586] ipip1: entered promiscuous mode [ 152.283581][T13594] hsr0: entered promiscuous mode [ 152.289409][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4172'. [ 152.299727][T13594] hsr_slave_0: left promiscuous mode [ 152.305651][T13594] hsr_slave_1: left promiscuous mode [ 152.314256][T13594] hsr0 (unregistering): left promiscuous mode [ 152.451286][T13612] team0: Port device team_slave_0 removed [ 152.537176][T13624] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4186'. [ 152.831043][T13655] team0: Port device team_slave_0 removed [ 152.843044][T13657] syz_tun: entered allmulticast mode [ 152.849242][T13657] syz_tun: left allmulticast mode [ 152.980998][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4208'. [ 153.112860][T13693] lo speed is unknown, defaulting to 1000 [ 153.227768][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 153.373660][T13716] IPVS: Error connecting to the multicast addr [ 153.465848][T13724] SELinux: syz.0.4229 (13724) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 153.611443][T13739] Falling back ldisc for ttyS3. [ 153.861515][T13774] syzkaller1: entered promiscuous mode [ 153.867044][T13774] syzkaller1: entered allmulticast mode [ 154.295111][T13823] 0ªî{X¹¦: left allmulticast mode [ 154.311405][T13823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.374664][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 154.374679][ T29] audit: type=1400 audit(1752920371.377:4255): avc: denied { bind } for pid=13829 comm="syz.9.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.423538][ T29] audit: type=1400 audit(1752920371.417:4256): avc: denied { bind } for pid=13828 comm="syz.8.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.483254][T13844] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4286'. [ 154.529171][ T29] audit: type=1400 audit(1752920371.527:4257): avc: denied { create } for pid=13849 comm="syz.8.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.561369][ T29] audit: type=1400 audit(1752920371.537:4258): avc: denied { write } for pid=13849 comm="syz.8.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.620443][ T29] audit: type=1326 audit(1752920371.627:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13865 comm="syz.0.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 154.671552][T13870] policy can only be matched on NF_INET_PRE_ROUTING [ 154.671568][T13870] unable to load match [ 154.683410][ T29] audit: type=1326 audit(1752920371.647:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13865 comm="syz.0.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 154.707097][ T29] audit: type=1326 audit(1752920371.647:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13865 comm="syz.0.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 154.766165][ T29] audit: type=1400 audit(1752920371.707:4262): avc: denied { write } for pid=13872 comm="syz.8.4298" name="sockstat" dev="proc" ino=4026532640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 154.805738][ T29] audit: type=1326 audit(1752920371.807:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13881 comm="syz.8.4301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1d4e7e9a9 code=0x0 [ 154.848484][ T29] audit: type=1400 audit(1752920371.847:4264): avc: denied { write } for pid=13883 comm="syz.4.4302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 154.890932][T13892] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 155.697278][T13960] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.860773][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4338'. [ 155.883574][T13970] netlink: 664 bytes leftover after parsing attributes in process `syz.0.4340'. [ 155.893480][T13960] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.942778][T13960] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.954274][T13980] Cannot find del_set index 4 as target [ 155.968736][T13982] lo speed is unknown, defaulting to 1000 [ 155.981331][T13985] serio: Serial port ptm0 [ 155.987219][T13960] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.074565][T13960] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.112917][T13960] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.134316][T13960] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.150699][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 156.172146][T13960] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.209000][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4353'. [ 156.290764][T14006] loop0: detected capacity change from 0 to 512 [ 156.315680][T14006] EXT4-fs: Ignoring removed nobh option [ 156.425505][T14006] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.4356: corrupted inode contents [ 156.440525][T14006] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.4356: mark_inode_dirty error [ 156.453495][T14006] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.4356: corrupted inode contents [ 156.483021][T14006] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.4356: mark_inode_dirty error [ 156.495828][T14006] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4356: Failed to acquire dquot type 0 [ 156.519231][T14006] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.4356: corrupted inode contents [ 156.545040][T14006] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.4356: mark_inode_dirty error [ 156.558622][T14006] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.4356: corrupted inode contents [ 156.585648][T14006] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.4356: mark_inode_dirty error [ 156.616144][T14006] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.4356: corrupted inode contents [ 156.637258][T14006] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 156.649918][T14006] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.4356: corrupted inode contents [ 156.673701][T14006] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.4356: mark_inode_dirty error [ 156.691836][T14032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.700599][T14037] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4369'. [ 156.717940][T14006] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 156.718330][T14037] 0ªX¹¦D: renamed from gretap0 (while UP) [ 156.737739][T14037] 0ªX¹¦D: entered allmulticast mode [ 156.740462][T14006] EXT4-fs (loop0): 1 truncate cleaned up [ 156.748856][T14037] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 156.749172][T14006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.778844][T14006] ext4 filesystem being mounted at /814/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.831904][T14045] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4373'. [ 156.842031][T14045] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4373'. [ 156.950446][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4382'. [ 156.960536][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.002793][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4386'. [ 157.992620][T14152] loop0: detected capacity change from 0 to 1024 [ 158.008483][T14152] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 158.019463][T14152] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 158.034561][T14152] JBD2: no valid journal superblock found [ 158.040376][T14152] EXT4-fs (loop0): Could not load journal inode [ 158.064128][T14152] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14152 comm=syz.0.4420 [ 158.076742][T14152] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14152 comm=syz.0.4420 [ 158.238186][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4430'. [ 158.366621][T14191] netlink: 'syz.8.4438': attribute type 10 has an invalid length. [ 158.379636][T14191] dummy0: entered promiscuous mode [ 158.386086][T14191] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 158.506297][T14217] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.721294][T14248] ref_ctr_offset mismatch. inode: 0x4ae offset: 0x0 ref_ctr_offset(old): 0x200000000100 ref_ctr_offset(new): 0x0 [ 158.984358][T14268] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.027116][T14268] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.088135][T14268] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.141465][T14268] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.175940][T14288] Â: renamed from pim6reg1 [ 159.209485][T14268] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.221161][T14292] SELinux: failed to load policy [ 159.221837][T14268] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.240114][T14268] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.253041][T14268] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.305084][T14298] netlink: 'syz.8.4481': attribute type 13 has an invalid length. [ 159.597991][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 159.598006][ T29] audit: type=1400 audit(1752920376.597:4340): avc: denied { ioctl } for pid=14342 comm="syz.0.4502" path="socket:[41893]" dev="sockfs" ino=41893 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.718775][T14367] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.734091][T14367] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 159.941898][T14388] loop0: detected capacity change from 0 to 1024 [ 159.951105][T14388] netlink: 'syz.0.4519': attribute type 1 has an invalid length. [ 160.082294][ T29] audit: type=1326 audit(1752920377.087:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.107575][ T29] audit: type=1326 audit(1752920377.087:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.131159][ T29] audit: type=1326 audit(1752920377.087:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.154732][ T29] audit: type=1326 audit(1752920377.087:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.178486][ T29] audit: type=1326 audit(1752920377.087:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.202068][ T29] audit: type=1326 audit(1752920377.087:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.225676][ T29] audit: type=1326 audit(1752920377.087:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.249166][ T29] audit: type=1326 audit(1752920377.117:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.272976][ T29] audit: type=1326 audit(1752920377.117:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.0.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 160.486276][T14437] lo speed is unknown, defaulting to 1000 [ 160.555294][T14446] loop0: detected capacity change from 0 to 128 [ 160.563693][T14446] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.577312][T14446] ext4 filesystem being mounted at /846/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.592913][T14446] EXT4-fs (loop0): shut down requested (0) [ 160.612978][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.804733][ T7329] kernel write not supported for file /1375/attr/exec (pid: 7329 comm: kworker/0:14) [ 161.380969][T14515] __nla_validate_parse: 5 callbacks suppressed [ 161.380985][T14515] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4575'. [ 161.837215][T14553] sd 0:0:1:0: device reset [ 161.992225][T14574] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.002054][T14574] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.060689][T14574] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.070632][T14574] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.111343][T14574] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.121183][T14574] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.132031][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4603'. [ 162.180573][T14574] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.190410][T14574] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.274288][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 162.291246][T14602] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 162.291969][T14574] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.309112][T14574] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.328554][T14604] netlink: 'syz.9.4617': attribute type 4 has an invalid length. [ 162.336180][T14574] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.336392][T14604] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4617'. [ 162.344494][T14574] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.359945][T14574] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.370175][T14574] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.386472][T14574] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.394973][T14574] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.409283][T14604] : renamed from bond0 (while UP) [ 162.417668][T14608] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 162.625673][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'. [ 162.704487][T14646] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.747483][T14646] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.792554][T14646] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.851087][T14646] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.987303][T14646] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.016449][T14646] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.030948][T14646] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.043827][T14646] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.111370][T14684] SELinux: ebitmap: truncated map [ 163.119763][T14684] SELinux: failed to load policy [ 163.134691][T14686] ip6tnl1: entered promiscuous mode [ 163.561632][T14728] sd 0:0:1:0: device reset [ 163.612093][T14733] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4677'. [ 163.621231][T14733] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4677'. [ 163.630336][T14733] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4677'. [ 163.677133][T14733] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4677'. [ 163.686263][T14733] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4677'. [ 163.760171][T14751] tipc: Started in network mode [ 163.765101][T14751] tipc: Node identity ac14140f, cluster identity 4711 [ 163.782059][T14751] tipc: New replicast peer: 255.255.255.255 [ 163.788133][T14751] tipc: Enabled bearer , priority 10 [ 164.332005][T14797] team0: Port device hsr_slave_0 removed [ 164.620015][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 164.620032][ T29] audit: type=1400 audit(1752920637.627:4526): avc: denied { read } for pid=14811 comm="syz.4.4712" path="socket:[44555]" dev="sockfs" ino=44555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.789641][ T10] tipc: Node number set to 2886997007 [ 164.937655][ T29] audit: type=1326 audit(1752920637.937:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 164.961295][ T29] audit: type=1326 audit(1752920637.937:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 164.985134][ T29] audit: type=1326 audit(1752920637.967:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 165.008718][ T29] audit: type=1326 audit(1752920637.967:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 165.032441][ T29] audit: type=1326 audit(1752920637.967:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 165.056039][ T29] audit: type=1326 audit(1752920637.967:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 165.079659][ T29] audit: type=1326 audit(1752920637.967:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 165.103281][ T29] audit: type=1326 audit(1752920637.967:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 165.127339][ T29] audit: type=1326 audit(1752920638.137:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.4.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 165.288120][T14861] loop0: detected capacity change from 0 to 512 [ 165.421127][T14879] lo speed is unknown, defaulting to 1000 [ 165.562521][T14891] loop0: detected capacity change from 0 to 8192 [ 165.574625][T14891] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.786908][T14924] pim6reg: entered allmulticast mode [ 165.794480][T14924] pim6reg: left allmulticast mode [ 166.016265][T14944] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.024538][T14944] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.032811][T14944] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.041056][T14944] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.187244][T14962] lo speed is unknown, defaulting to 1000 [ 166.387628][T14971] macvlan1: entered promiscuous mode [ 166.397820][T14971] ipvlan0: entered promiscuous mode [ 166.410291][T14971] ipvlan0: left promiscuous mode [ 166.417274][T14971] macvlan1: left promiscuous mode [ 167.095750][T15014] netlink: 'syz.0.4801': attribute type 6 has an invalid length. [ 167.103602][T15014] __nla_validate_parse: 14 callbacks suppressed [ 167.103616][T15014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4801'. [ 167.601016][T15055] ref_ctr_offset mismatch. inode: 0x13f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1004000 [ 167.705776][T15069] 9pnet_fd: Insufficient options for proto=fd [ 167.761337][T15075] raw_sendmsg: syz.9.4826 forgot to set AF_INET. Fix it! [ 167.884052][T15092] lo speed is unknown, defaulting to 1000 [ 168.045700][T15106] can0: slcan on ttyS3. [ 168.089703][T15106] can0 (unregistered): slcan off ttyS3. [ 168.099673][T15106] Falling back ldisc for ttyS3. [ 168.353026][T15130] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 168.471345][T15141] netlink: 'syz.8.4856': attribute type 3 has an invalid length. [ 168.475124][T15139] lo speed is unknown, defaulting to 1000 [ 168.506181][T15143] netlink: 'syz.8.4857': attribute type 10 has an invalid length. [ 168.515152][T15143] veth0_macvtap: left promiscuous mode [ 168.522632][T15143] veth0_macvtap: entered promiscuous mode [ 168.529444][T15143] team0: Device macvtap0 failed to register rx_handler [ 168.536573][T15143] veth0_macvtap: left promiscuous mode [ 168.562729][T15148] macvlan1: entered promiscuous mode [ 168.571007][T15148] ipvlan0: entered promiscuous mode [ 168.577071][T15148] ipvlan0: left promiscuous mode [ 168.582307][T15148] macvlan1: left promiscuous mode [ 168.885567][T15185] macvlan1: entered promiscuous mode [ 168.896980][T15185] ipvlan0: entered promiscuous mode [ 168.911325][T15185] ipvlan0: left promiscuous mode [ 168.923027][T15185] macvlan1: left promiscuous mode [ 169.008539][T15204] @: renamed from vlan0 (while UP) [ 169.025264][T15207] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4885'. [ 169.060359][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4888'. [ 169.084332][T15216] lo speed is unknown, defaulting to 1000 [ 169.290998][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4900'. [ 169.314550][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4900'. [ 169.437034][T15252] loop0: detected capacity change from 0 to 2048 [ 169.454769][T15252] EXT4-fs: Ignoring removed bh option [ 169.481770][T15252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.536259][T15252] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.559635][T15252] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 169.572158][T15252] EXT4-fs (loop0): This should not happen!! Data will be lost [ 169.572158][T15252] [ 169.581813][T15252] EXT4-fs (loop0): Total free blocks count 0 [ 169.587831][T15252] EXT4-fs (loop0): Free/Dirty block details [ 169.593766][T15252] EXT4-fs (loop0): free_blocks=2415919104 [ 169.599493][T15252] EXT4-fs (loop0): dirty_blocks=656 [ 169.604829][T15252] EXT4-fs (loop0): Block reservation details [ 169.610901][T15252] EXT4-fs (loop0): i_reserved_data_blocks=41 [ 169.736040][T15273] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 169.745183][ T7090] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.783004][T15278] syzkaller1: entered promiscuous mode [ 169.788632][T15278] syzkaller1: entered allmulticast mode [ 169.805498][T15280] hub 9-0:1.0: USB hub found [ 169.810948][T15280] hub 9-0:1.0: 8 ports detected [ 169.845952][T15285] loop0: detected capacity change from 0 to 164 [ 169.858890][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 169.858907][ T29] audit: type=1400 audit(169.849:4698): avc: denied { mount } for pid=15283 comm="syz.0.4919" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 169.862795][T15285] bio_check_eod: 10 callbacks suppressed [ 169.862809][T15285] syz.0.4919: attempt to access beyond end of device [ 169.862809][T15285] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 169.907192][T15285] syz.0.4919: attempt to access beyond end of device [ 169.907192][T15285] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 169.947283][ T29] audit: type=1400 audit(169.939:4699): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 170.002512][T15299] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 170.004742][T15306] loop0: detected capacity change from 0 to 512 [ 170.061522][T15299] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 170.142611][T15299] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 170.172542][ T29] audit: type=1326 audit(170.169:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.0.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 170.196695][ T29] audit: type=1326 audit(170.169:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.0.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 170.219660][ T29] audit: type=1326 audit(170.169:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.0.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 170.242562][ T29] audit: type=1326 audit(170.169:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.0.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 170.261233][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4940'. [ 170.265524][ T29] audit: type=1326 audit(170.189:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.0.4939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 170.298611][T15299] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 170.365718][T15299] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.378462][T15299] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.393083][T15299] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.405087][T15341] bridge0: port 3(batadv1) entered blocking state [ 170.411646][T15341] bridge0: port 3(batadv1) entered disabled state [ 170.418349][T15341] batadv1: entered allmulticast mode [ 170.424993][T15341] batadv1: entered promiscuous mode [ 170.434749][T15299] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.449132][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.456621][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.466305][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.473772][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.481384][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.488868][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.496496][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.503909][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.511357][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.518719][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.526144][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.533571][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.543227][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.550988][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.558475][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.565907][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.573361][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.580845][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.588336][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.595783][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.603213][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.610669][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.618063][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.625477][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.632904][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.640309][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.647716][ T10] hid-generic FFFE:0000:0000.0008: unknown main item tag 0x0 [ 170.657711][ T10] hid-generic FFFE:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 170.718150][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4953'. [ 170.751095][T15363] netlink: 'syz.9.4955': attribute type 10 has an invalid length. [ 170.759192][T15365] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4954'. [ 170.776259][T15363] veth0_macvtap: left promiscuous mode [ 170.797967][T15363] veth0_macvtap: entered promiscuous mode [ 170.803835][ T29] audit: type=1326 audit(170.789:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.0.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 170.808199][T15363] team0: Device macvtap0 failed to register rx_handler [ 170.826824][ T29] audit: type=1326 audit(170.789:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.0.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 170.856648][ T29] audit: type=1326 audit(170.789:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.0.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 170.894204][T15363] veth0_macvtap: left promiscuous mode [ 170.903153][T15371] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4959'. [ 170.919627][ T7090] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 170.928924][ T7090] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 171.004217][T15390] block device autoloading is deprecated and will be removed. [ 171.156083][T15407] netlink: 'syz.3.4976': attribute type 10 has an invalid length. [ 171.170199][T15407] team0: Device macvtap0 failed to register rx_handler [ 171.395981][T15440] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.405872][T15440] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.440834][T15444] syzkaller0: entered promiscuous mode [ 171.446460][T15444] syzkaller0: entered allmulticast mode [ 171.466723][T15440] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.476670][T15440] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.521339][T15440] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.531166][T15440] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.581061][T15440] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.590940][T15440] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.619393][T15455] netlink: 'syz.9.4996': attribute type 21 has an invalid length. [ 171.627317][T15455] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4996'. [ 171.657891][T15440] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.666174][T15440] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.680372][T15461] hsr_slave_0 (unregistering): left promiscuous mode [ 171.692203][T15440] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.700545][T15440] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.715233][T15440] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.723566][T15440] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.735473][T15440] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.743902][T15440] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.831311][T15472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.852254][T15472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.881982][T15472] bond0 (unregistering): Released all slaves [ 172.010624][T15486] lo speed is unknown, defaulting to 1000 [ 172.242185][T15502] unsupported nla_type 52263 [ 172.301182][T15511] loop0: detected capacity change from 0 to 164 [ 172.313839][T15511] syz.0.5021: attempt to access beyond end of device [ 172.313839][T15511] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 172.329846][T15511] syz.0.5021: attempt to access beyond end of device [ 172.329846][T15511] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 172.834256][T15531] netlink: 'syz.8.5029': attribute type 1 has an invalid length. [ 172.842105][T15531] __nla_validate_parse: 2 callbacks suppressed [ 172.842117][T15531] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5029'. [ 173.024899][T15544] sch_fq: defrate 4294967295 ignored. [ 173.325664][T15592] loop0: detected capacity change from 0 to 128 [ 173.338360][T15592] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 173.346413][T15592] FAT-fs (loop0): Filesystem has been set read-only [ 173.354826][T15592] syz.0.5056: attempt to access beyond end of device [ 173.354826][T15592] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 173.368955][T15592] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 173.376853][T15592] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 173.409788][T15592] syz.0.5056: attempt to access beyond end of device [ 173.409788][T15592] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 173.466250][T15604] hub 6-0:1.0: USB hub found [ 173.472618][T15604] hub 6-0:1.0: 8 ports detected [ 175.023516][T15701] netlink: 268 bytes leftover after parsing attributes in process `syz.9.5103'. [ 175.241365][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 175.241379][ T29] audit: type=1326 audit(175.239:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.3.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 175.283223][ T29] audit: type=1326 audit(175.269:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.3.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 175.306150][ T29] audit: type=1326 audit(175.269:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.3.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 175.329130][ T29] audit: type=1326 audit(175.279:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.3.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 175.352321][ T29] audit: type=1326 audit(175.279:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.3.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 175.375529][ T29] audit: type=1326 audit(175.279:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.3.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 175.455084][T15731] program syz.0.5115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.491613][T15731] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 175.552222][T15745] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2445022839/2445022841 [ 175.588545][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5125'. [ 175.721335][T15755] SELinux: ebitmap: truncated map [ 175.737854][T15755] SELinux: failed to load policy [ 175.881854][T15765] lo speed is unknown, defaulting to 1000 [ 176.144225][ T29] audit: type=1326 audit(176.139:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.4.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 176.167276][ T29] audit: type=1326 audit(176.139:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.4.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf22c4d60a code=0x7ffc0000 [ 176.190149][ T29] audit: type=1326 audit(176.139:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.4.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf22c81265 code=0x7ffc0000 [ 176.251892][ T29] audit: type=1326 audit(176.239:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.4.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fdf22c81265 code=0x7ffc0000 [ 176.298360][T15795] loop9: detected capacity change from 0 to 512 [ 176.326779][T15795] EXT4-fs (loop9): orphan cleanup on readonly fs [ 176.336165][T15801] xt_hashlimit: size too large, truncated to 1048576 [ 176.343423][T15795] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.5146: Failed to acquire dquot type 1 [ 176.428279][T15807] lo speed is unknown, defaulting to 1000 [ 176.436480][T15795] EXT4-fs (loop9): 1 truncate cleaned up [ 176.445146][T15795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.501853][T15795] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 176.551661][T15795] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 8 [ 176.597919][ T8010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.825751][T15827] lo speed is unknown, defaulting to 1000 [ 177.192615][T15862] SELinux: ebitmap: truncated map [ 177.198582][T15862] SELinux: failed to load policy [ 177.252387][T15871] program syz.8.5178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.478140][T15900] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.532313][T15900] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.584763][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5193'. [ 177.595197][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5193'. [ 177.605273][T15900] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.661293][T15900] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 177.676571][T15907] SELinux: ebitmap: truncated map [ 177.683950][T15907] SELinux: failed to load policy [ 177.717994][T15900] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.731801][T15900] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.743835][T15900] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.758361][T15900] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.902796][T15946] netlink: 'syz.9.5213': attribute type 4 has an invalid length. [ 177.910598][T15946] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.5213'. [ 178.070762][T15956] SELinux: syz.4.5218 (15956) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 178.288594][T15968] loop0: detected capacity change from 0 to 128 [ 178.308229][T15968] EXT4-fs: Ignoring removed nobh option [ 178.316571][T15968] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.355414][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.612338][T16024] loop0: detected capacity change from 0 to 128 [ 179.616714][T16023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5245'. [ 179.619441][T16024] EXT4-fs: Ignoring removed nobh option [ 179.634960][T16024] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.686905][T16034] netlink: 'syz.9.5247': attribute type 6 has an invalid length. [ 179.774763][T16043] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.851309][T16043] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.863627][T16048] loop9: detected capacity change from 0 to 512 [ 179.884213][T16048] EXT4-fs (loop9): too many log groups per flexible block group [ 179.891990][T16048] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 179.909280][T16048] EXT4-fs (loop9): mount failed [ 179.915293][T16043] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.927624][T16048] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 179.961443][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.962015][T16043] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.983238][T16052] netlink: 'syz.0.5254': attribute type 1 has an invalid length. [ 180.011480][T16052] bond2: entered promiscuous mode [ 180.022550][T16052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.057673][T16043] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.083940][T16058] bond2: (slave dummy0): making interface the new active one [ 180.093389][T16058] dummy0: entered promiscuous mode [ 180.101617][T16058] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 180.114845][T16043] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.134989][T16062] sit0: entered promiscuous mode [ 180.144581][T16062] netlink: 'syz.9.5258': attribute type 1 has an invalid length. [ 180.152733][T16062] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5258'. [ 180.168652][T16043] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.192221][T16043] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.277229][T16072] xt_CT: No such helper "pptp" [ 180.375827][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 180.375842][ T29] audit: type=1326 audit(180.369:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.476417][ T29] audit: type=1326 audit(180.399:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.499483][ T29] audit: type=1326 audit(180.399:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.522426][T16089] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.522496][ T29] audit: type=1326 audit(180.399:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.522527][ T29] audit: type=1326 audit(180.399:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.575446][ T29] audit: type=1326 audit(180.399:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.598516][ T29] audit: type=1326 audit(180.399:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.621403][ T29] audit: type=1326 audit(180.409:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.644436][ T29] audit: type=1326 audit(180.409:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.667325][ T29] audit: type=1326 audit(180.409:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.8.5268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d4e7e9a9 code=0x7ffc0000 [ 180.703242][ T7361] IPVS: starting estimator thread 0... [ 180.746268][T16081] loop0: detected capacity change from 0 to 512 [ 180.760191][T16081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.783132][T16081] EXT4-fs (loop0): 1 truncate cleaned up [ 180.789082][T16081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.801707][T16093] IPVS: using max 2640 ests per chain, 132000 per kthread [ 180.888344][T16099] lo speed is unknown, defaulting to 1000 [ 181.006873][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.269070][T16041] syz.3.5249 (16041) used greatest stack depth: 5904 bytes left [ 181.384355][T16159] vhci_hcd: invalid port number 96 [ 181.389582][T16159] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 181.495700][T16172] loop0: detected capacity change from 0 to 8192 [ 181.503190][T16172] FAT-fs (loop0): bogus sectors per cluster 0 [ 181.509289][T16172] FAT-fs (loop0): Can't find a valid FAT filesystem [ 181.536135][T16172] SELinux: syz.0.5300 (16172) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 181.580752][T16185] loop0: detected capacity change from 0 to 1024 [ 181.587716][T16185] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.602307][T16185] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.5307: lblock 1 mapped to illegal pblock 1 (length 1) [ 181.616652][T16185] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5307: Failed to acquire dquot type 0 [ 181.628336][T16185] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.5307: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.642047][T16185] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.5307: Invalid inode bitmap blk 0 in block_group 0 [ 181.655011][T16185] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 181.663832][ T7037] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 181.678474][ T7037] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 181.678794][T16185] EXT4-fs (loop0): 1 orphan inode deleted [ 181.696311][T16185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.727028][T16185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.762329][T16188] loop9: detected capacity change from 0 to 512 [ 181.783596][T16188] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.075309][ T8010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.133366][T16211] loop9: detected capacity change from 0 to 128 [ 182.161536][T16213] netlink: 372 bytes leftover after parsing attributes in process `syz.8.5319'. [ 182.417956][T16232] loop9: detected capacity change from 0 to 2048 [ 182.443925][T16232] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.499784][ T8010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.131170][T16258] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5338'. [ 183.207528][T16269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16269 comm=syz.3.5343 [ 183.450081][T16281] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 183.461011][T16284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16284 comm=syz.9.5351 [ 183.473664][T16284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16284 comm=syz.9.5351 [ 183.546923][T16289] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.556755][T16289] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.611666][T16289] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.621575][T16289] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.672238][T16302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5358'. [ 183.739726][T16289] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.749787][T16289] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.801426][T16289] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.811331][T16289] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.977635][T16289] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.986014][T16321] loop9: detected capacity change from 0 to 512 [ 183.993009][T16289] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.009032][T16289] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.017911][T16289] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.022567][T16321] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 184.029960][T16289] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.044977][T16289] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.057448][T16289] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.062910][T16321] EXT4-fs (loop9): failed to initialize system zone (-117) [ 184.065737][T16289] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.093003][T16321] EXT4-fs (loop9): mount failed [ 184.144007][T16335] netlink: 'syz.0.5371': attribute type 4 has an invalid length. [ 184.151921][T16335] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5371'. [ 184.213621][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5376'. [ 184.286620][T16355] 9pnet: p9_errstr2errno: server reported unknown error [ 184.390624][T16374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16374 comm=syz.8.5390 [ 184.403876][T16374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16374 comm=syz.8.5390 [ 184.602503][T16406] loop0: detected capacity change from 0 to 1024 [ 184.613547][T16406] EXT4-fs: Ignoring removed nobh option [ 184.626425][T16406] EXT4-fs: Ignoring removed bh option [ 184.652132][T16406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.689833][T16417] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 184.711668][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.776058][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5411'. [ 184.790568][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5411'. [ 184.914340][T16438] lo speed is unknown, defaulting to 1000 [ 184.935751][T16443] netlink: 'syz.9.5422': attribute type 4 has an invalid length. [ 184.943711][T16443] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.5422'. [ 184.978535][T16447] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.986850][T16447] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.995090][T16447] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.004030][T16447] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.016090][T16447] geneve3: entered promiscuous mode [ 185.024431][T16449] 9pnet: p9_errstr2errno: server reported unknown error [ 185.392990][T16466] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5431'. [ 185.407388][T16466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.417580][T16466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.427676][T16466] bond0 (unregistering): Released all slaves [ 185.751997][T16478] gtp0: entered promiscuous mode [ 185.887422][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'. [ 185.897029][T16488] netlink: 'syz.4.5440': attribute type 5 has an invalid length. [ 186.063917][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 186.063935][ T29] audit: type=1400 audit(186.059:4935): avc: denied { cpu } for pid=16498 comm="syz.9.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 186.065694][T16499] loop9: detected capacity change from 0 to 164 [ 186.086158][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5443'. [ 186.144031][T16499] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.162647][ T29] audit: type=1326 audit(186.159:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.171062][T16499] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.214877][T16513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.223943][ T29] audit: type=1326 audit(186.179:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.246942][ T29] audit: type=1326 audit(186.179:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.249115][T16499] Symlink component flag not implemented [ 186.269936][ T29] audit: type=1326 audit(186.179:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.269971][ T29] audit: type=1326 audit(186.179:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.270000][ T29] audit: type=1326 audit(186.179:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.270124][ T29] audit: type=1326 audit(186.179:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.270153][ T29] audit: type=1326 audit(186.179:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.270219][ T29] audit: type=1326 audit(186.179:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.0.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95885ee9a9 code=0x7ffc0000 [ 186.414794][T16499] Symlink component flag not implemented [ 186.427850][T16499] Symlink component flag not implemented (7) [ 186.433952][T16499] Symlink component flag not implemented (116) [ 186.450707][T16520] serio: Serial port ptm0 [ 186.469227][T16513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.483228][T16513] bond0 (unregistering): (slave team0): Releasing backup interface [ 186.503171][T16513] bond0 (unregistering): Released all slaves [ 186.596159][T16544] loop9: detected capacity change from 0 to 512 [ 186.604491][T16544] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.611144][T16544] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.618020][T16544] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 186.629088][T16544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 186.646373][T16549] loop0: detected capacity change from 0 to 512 [ 186.652816][T16544] System zones: 1-12 [ 186.658357][T16544] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.5463: corrupted in-inode xattr: e_value size too large [ 186.679788][T16544] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.5463: couldn't read orphan inode 15 (err -117) [ 186.698115][T16544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.699998][T16549] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.729957][T16549] EXT4-fs (loop0): mount failed [ 186.922533][ T8010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.970586][T16581] loop9: detected capacity change from 0 to 1764 [ 186.973869][T16585] loop0: detected capacity change from 0 to 1024 [ 186.992056][T16585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.041518][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.127793][T16607] rdma_op ffff88811a391580 conn xmit_rdma 0000000000000000 [ 187.232257][T16624] syz_tun: entered allmulticast mode [ 187.238478][T16623] syz_tun: left allmulticast mode [ 187.469132][T16659] smc: net device bond0 applied user defined pnetid SYZ0 [ 187.489755][T16659] smc: net device bond0 erased user defined pnetid SYZ0 [ 187.496897][T16667] loop9: detected capacity change from 0 to 2048 [ 187.541301][T16667] loop9: p1 < > p4 [ 187.545691][T16667] loop9: p4 size 8388608 extends beyond EOD, truncated [ 187.657419][T16686] lo speed is unknown, defaulting to 1000 [ 187.762482][T16694] rdma_op ffff88811a393180 conn xmit_rdma 0000000000000000 [ 187.790210][T16698] block device autoloading is deprecated and will be removed. [ 187.876995][T16708] lo speed is unknown, defaulting to 1000 [ 187.911990][T16713] $Hÿ: (slave team0): Releasing backup interface [ 187.926930][T16713] team0: left promiscuous mode [ 187.934885][T16713] team_slave_0: left promiscuous mode [ 187.940544][T16713] team_slave_1: left promiscuous mode [ 187.950894][T16713] bond2: (slave dummy0): Releasing active interface [ 187.970666][T16713] dummy0: left promiscuous mode [ 187.991361][T16713] bridge_slave_0: left allmulticast mode [ 187.997054][T16713] bridge_slave_0: left promiscuous mode [ 188.002802][T16713] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.040710][T16713] bridge_slave_1: left allmulticast mode [ 188.046512][T16713] bridge_slave_1: left promiscuous mode [ 188.052345][T16713] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.081184][T16713] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 188.098874][T16713] bond_slave_0: left promiscuous mode [ 188.119483][T16713] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 188.139247][T16713] bond_slave_1: left promiscuous mode [ 188.145646][T16713] team0: Port device team_slave_0 removed [ 188.160410][T16713] team0: Port device team_slave_1 removed [ 188.167924][T16713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.175717][T16713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.186534][T16713] bond1: (slave gretap1): Releasing active interface [ 188.202280][T16713] bond0: (slave geneve2): Releasing backup interface [ 188.229472][T16713] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 188.238027][T16713] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 188.246714][T16713] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 188.255228][T16713] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 188.322544][T16722] netlink: 'syz.8.5539': attribute type 10 has an invalid length. [ 188.340837][T16722] __nla_validate_parse: 5 callbacks suppressed [ 188.340854][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5539'. [ 188.374457][T16726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5541'. [ 188.851747][T16775] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5565'. [ 188.886074][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5568'. [ 188.898058][T16781] bridge0: port 4(macvlan2) entered blocking state [ 188.904711][T16781] bridge0: port 4(macvlan2) entered disabled state [ 188.921449][T16781] macvlan2: entered allmulticast mode [ 188.926981][T16781] bridge0: entered allmulticast mode [ 188.933511][T16781] macvlan2: left allmulticast mode [ 188.938719][T16781] bridge0: left allmulticast mode [ 189.056255][T16795] lo speed is unknown, defaulting to 1000 [ 189.075613][T16800] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5577'. [ 189.117964][T16803] : (slave bond_slave_0): Releasing backup interface [ 189.142734][T16803] : (slave bond_slave_1): Releasing backup interface [ 189.178241][T16803] team0: Port device team_slave_1 removed [ 189.202760][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.210275][T16803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.221792][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.229331][T16803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.266269][T16803] bond1: (slave bridge1): Releasing active interface [ 189.417165][T16809] lo speed is unknown, defaulting to 1000 [ 189.428381][T16825] loop9: detected capacity change from 0 to 8192 [ 189.507352][T16809] chnl_net:caif_netlink_parms(): no params data found [ 189.582009][T16809] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.589147][T16809] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.612588][T16809] bridge_slave_0: entered allmulticast mode [ 189.619327][T16809] bridge_slave_0: entered promiscuous mode [ 189.627687][T16809] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.635531][T16809] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.643327][T16809] bridge_slave_1: entered allmulticast mode [ 189.651816][T16809] bridge_slave_1: entered promiscuous mode [ 189.687335][T16809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.701516][T16809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.752014][T16809] team0: Port device team_slave_0 added [ 189.758967][T16809] team0: Port device team_slave_1 added [ 189.799211][T16809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.806260][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.832921][T16809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.850078][T16809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.857056][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.883715][T16809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.904438][T16873] netlink: 'syz.3.5605': attribute type 10 has an invalid length. [ 189.916467][T16874] loop9: detected capacity change from 0 to 512 [ 189.923051][T16874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.929862][T16873] ipvlan0: entered allmulticast mode [ 189.935170][T16873] veth0_vlan: entered allmulticast mode [ 189.942096][T16873] team0: Device ipvlan0 failed to register rx_handler [ 189.949213][T16874] EXT4-fs: inline encryption not supported [ 189.955085][T16874] EXT4-fs: Ignoring removed bh option [ 189.960722][T16874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.973346][T16874] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.984562][T16809] hsr_slave_0: entered promiscuous mode [ 189.992077][T16874] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 190.005758][T16809] hsr_slave_1: entered promiscuous mode [ 190.159122][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5613'. [ 190.170110][T16809] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.179929][T16809] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 190.246774][T16809] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.256732][T16809] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 190.270992][T16904] sd 0:0:1:0: device reset [ 190.305538][T16911] xt_NFQUEUE: number of total queues is 0 [ 190.320697][T16809] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.330535][T16809] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 190.356170][T16909] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.383550][T16809] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.394058][T16809] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 190.440470][T16909] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.497377][T16809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.528013][T16909] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.580920][T16809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.595827][T16809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.622971][T16909] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.636344][T16809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.680473][T16909] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.695996][T16909] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.712306][T16909] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.759246][T16909] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.811018][T16809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.839198][T16809] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.855440][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.862676][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.896060][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.903227][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.928192][T16809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.939282][T16809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.038174][T16809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.128285][T16809] veth0_vlan: entered promiscuous mode [ 191.153606][T16809] veth1_vlan: entered promiscuous mode [ 191.178827][T16809] veth0_macvtap: entered promiscuous mode [ 191.197029][T16809] veth1_macvtap: entered promiscuous mode [ 191.220438][ T7073] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.250709][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 191.250724][ T29] audit: type=1326 audit(959.319:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 191.282840][ T29] audit: type=1326 audit(959.341:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.3.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f591e85e9a9 code=0x7ffc0000 [ 191.305862][ T29] audit: type=1326 audit(959.351:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17036 comm="syz.3.5651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f591e85e9a9 code=0x0 [ 191.333884][T16809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.346809][T16809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.357241][T16809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.366062][T16809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.374971][T16809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.383851][T16809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.421074][ T7073] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.451442][ T29] audit: type=1400 audit(959.520:5055): avc: denied { mounton } for pid=16809 comm="syz-executor" path="/root/syzkaller.MKuddy/syz-tmp" dev="sda1" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 191.475382][ T29] audit: type=1400 audit(959.520:5056): avc: denied { mounton } for pid=16809 comm="syz-executor" path="/root/syzkaller.MKuddy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 191.501775][ T29] audit: type=1400 audit(959.520:5057): avc: denied { mounton } for pid=16809 comm="syz-executor" path="/root/syzkaller.MKuddy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=52058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 191.530833][ T7073] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.541797][ T29] audit: type=1400 audit(959.594:5058): avc: denied { mounton } for pid=16809 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 191.564211][ T29] audit: type=1400 audit(959.594:5059): avc: denied { mount } for pid=16809 comm="syz-executor" name="/" dev="gadgetfs" ino=4433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 191.603609][ T7073] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.668957][T17060] loop9: detected capacity change from 0 to 512 [ 191.689702][T17060] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.718057][ T8010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.728169][ T7073] bond1 (unregistering): (slave gretap1): Releasing active interface [ 191.778099][ T29] audit: type=1400 audit(959.869:5060): avc: denied { listen } for pid=17072 comm="syz.0.5661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.800053][ T29] audit: type=1400 audit(959.869:5061): avc: denied { setopt } for pid=17072 comm="syz.0.5661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.824732][T17075] serio: Serial port ptm0 [ 191.840163][ T7073] bond1 (unregistering): Released all slaves [ 191.858003][T17043] lo speed is unknown, defaulting to 1000 [ 191.898356][ T7073] tipc: Disabling bearer [ 191.903621][ T7073] tipc: Left network mode [ 191.927173][ T7073] hsr_slave_1: left promiscuous mode [ 191.933148][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.940679][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.958274][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.965762][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.978860][ T7073] veth1_macvtap: left promiscuous mode [ 191.984774][ T7073] veth1_vlan: left promiscuous mode [ 191.992909][T17088] loop0: detected capacity change from 0 to 512 [ 191.999587][ T7073] veth0_vlan: left promiscuous mode [ 192.059563][T17088] EXT4-fs (loop0): orphan cleanup on readonly fs [ 192.094011][T17088] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.5667: bad orphan inode 13 [ 192.116343][T17088] ext4_test_bit(bit=12, block=18) = 1 [ 192.121792][T17088] is_bad_inode(inode)=0 [ 192.125960][T17088] NEXT_ORPHAN(inode)=2130706432 [ 192.130919][T17088] max_ino=32 [ 192.134223][T17088] i_nlink=1 [ 192.139548][T17088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.167403][T17088] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 192.192215][T17105] rdma_op ffff888118a17180 conn xmit_rdma 0000000000000000 [ 192.217480][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 192.219066][T17088] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5667: bg 0: block 248: padding at end of block bitmap is not set [ 192.243644][ T7073] team0 (unregistering): Port device team_slave_0 removed [ 192.243743][T17088] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5667: Failed to acquire dquot type 1 [ 192.273945][T17088] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.335852][T16809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.356352][T17043] chnl_net:caif_netlink_parms(): no params data found [ 192.413366][T17125] loop0: detected capacity change from 0 to 512 [ 192.424822][T17125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.431970][T17125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.443207][T17043] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.451244][T17043] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.458975][T17043] bridge_slave_0: entered allmulticast mode [ 192.465707][T17043] bridge_slave_0: entered promiscuous mode [ 192.466344][T17125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.474810][T17043] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.491310][T17043] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.498705][T17043] bridge_slave_1: entered allmulticast mode [ 192.506381][T17043] bridge_slave_1: entered promiscuous mode [ 192.508623][T17125] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 192.537722][T17043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.548873][T16809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.551528][T17043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.584900][T17043] team0: Port device team_slave_0 added [ 192.596917][T17043] team0: Port device team_slave_1 added [ 192.625890][T17043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.632980][T17043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.659146][T17043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.673653][T17043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.680639][T17043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.706685][T17043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.735525][T17043] hsr_slave_0: entered promiscuous mode [ 192.742955][T17043] hsr_slave_1: entered promiscuous mode [ 192.745048][T17143] loop0: detected capacity change from 0 to 512 [ 192.749330][T17043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.756499][T17143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.763837][T17043] Cannot create hsr debugfs directory [ 192.789472][T17143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082] [ 192.812245][T17143] EXT4-fs (loop0): 1 truncate cleaned up [ 192.827479][T17143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.868254][T17150] netlink: 532 bytes leftover after parsing attributes in process `syz.9.5690'. [ 192.894798][T17150] lo speed is unknown, defaulting to 1000 [ 193.028688][T16809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.041255][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5698'. [ 193.075914][T17043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.102306][T17043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.119722][T17043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.144476][T17043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.230654][T17191] netlink: 'syz.9.5704': attribute type 1 has an invalid length. [ 193.236009][T17043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.239186][T17191] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5704'. [ 193.249672][T17043] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.292117][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.299228][ T7090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.324400][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.331544][ T7090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.413531][T17043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.554479][T17043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.628826][T17238] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5714'. [ 193.705289][T17250] loop0: detected capacity change from 0 to 512 [ 193.728075][T17250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.741423][T17043] veth0_vlan: entered promiscuous mode [ 193.762060][T17043] veth1_vlan: entered promiscuous mode [ 193.778910][T16809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.786182][T17043] veth0_macvtap: entered promiscuous mode [ 193.818071][T17043] veth1_macvtap: entered promiscuous mode [ 193.839578][T17043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.858348][T17043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.872095][T17043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.880918][T17043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.889814][T17043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.898699][T17043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.917755][T17273] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 194.047253][T17299] smc: net device bond0 applied user defined pnetid SYZ0 [ 194.058561][T17299] smc: net device bond0 erased user defined pnetid SYZ0 [ 194.101680][T17309] Falling back ldisc for ttyS3. [ 194.175712][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5729'. [ 194.184703][T17338] netlink: 'syz.1.5729': attribute type 15 has an invalid length. [ 194.217289][T17323] hub 6-0:1.0: USB hub found [ 194.226367][T17338] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.235266][T17338] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.244034][T17338] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.252839][T17338] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.269409][T17323] hub 6-0:1.0: 8 ports detected [ 194.281723][T17338] vxlan0: entered promiscuous mode [ 194.394227][T17360] lo speed is unknown, defaulting to 1000 [ 194.444552][T17371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17371 comm=syz.9.5743 [ 194.459673][T17371] netlink: 'syz.9.5743': attribute type 1 has an invalid length. [ 194.494338][T17371] bond0: (slave bridge2): making interface the new active one [ 194.504277][T17371] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 194.568438][T17385] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5749'. [ 194.579214][T17385] netlink: 'syz.9.5749': attribute type 1 has an invalid length. [ 194.811088][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5758'. [ 194.983757][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5766'. [ 194.992888][T17423] bridge_slave_1: left allmulticast mode [ 194.999236][T17423] bridge_slave_1: left promiscuous mode [ 195.004978][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.012793][T17423] bridge_slave_0: left allmulticast mode [ 195.018479][T17423] bridge_slave_0: left promiscuous mode [ 195.024231][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.161754][T17425] loop0: detected capacity change from 0 to 1024 [ 195.168879][T17425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.178839][T17425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.205283][T16809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.606563][T17452] syzkaller0: entered promiscuous mode [ 195.612164][T17452] syzkaller0: entered allmulticast mode [ 195.742511][T17466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5784'. [ 195.751524][T17466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5784'. [ 195.760875][T17466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5784'. [ 195.773434][T17466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5784'. [ 195.782818][T17466] netlink: 'syz.4.5784': attribute type 6 has an invalid length. [ 195.879380][T17477] netlink: 'syz.4.5799': attribute type 1 has an invalid length. [ 195.923367][T17477] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 195.933627][T17477] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 195.945098][T17477] bond0: (slave vcan1): making interface the new active one [ 195.953228][T17477] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 196.012513][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 196.012528][ T29] audit: type=1326 audit(964.352:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 196.041821][ T29] audit: type=1326 audit(964.352:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 196.064808][ T29] audit: type=1326 audit(964.352:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 196.087944][ T29] audit: type=1326 audit(964.352:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 196.110849][ T29] audit: type=1326 audit(964.352:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 196.134382][ T29] audit: type=1326 audit(964.415:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 196.157281][ T29] audit: type=1326 audit(964.415:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf22c4e9a9 code=0x7ffc0000 [ 196.209385][T17496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.218340][T17496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.226279][ T29] audit: type=1326 audit(964.574:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17497 comm="syz.0.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793933e9a9 code=0x7ffc0000 [ 196.249342][ T29] audit: type=1326 audit(964.574:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17497 comm="syz.0.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793933e9a9 code=0x7ffc0000 [ 196.272448][ T29] audit: type=1326 audit(964.574:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17497 comm="syz.0.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f793933e9a9 code=0x7ffc0000 [ 196.356256][T17496] ================================================================== [ 196.364393][T17496] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 196.371815][T17496] [ 196.374147][T17496] read-write to 0xffff8881031e7b80 of 8 bytes by interrupt on cpu 1: [ 196.382219][T17496] rtc_pie_update_irq+0x93/0xf0 [ 196.387095][T17496] __hrtimer_run_queues+0x20c/0x5a0 [ 196.392307][T17496] hrtimer_interrupt+0x21a/0x460 [ 196.397235][T17496] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 196.403140][T17496] sysvec_apic_timer_interrupt+0x6f/0x80 [ 196.408774][T17496] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.414768][T17496] __tsan_read8+0xbe/0x190 [ 196.419205][T17496] unmap_page_range+0x13de/0x2740 [ 196.424245][T17496] unmap_vmas+0x23d/0x3a0 [ 196.428585][T17496] exit_mmap+0x1b0/0x6c0 [ 196.432825][T17496] __mmput+0x28/0x1c0 [ 196.436813][T17496] mmput+0x40/0x50 [ 196.440534][T17496] exit_mm+0xe4/0x190 [ 196.444523][T17496] do_exit+0x417/0x1590 [ 196.448683][T17496] do_group_exit+0x139/0x140 [ 196.453281][T17496] __x64_sys_exit_group+0x1f/0x20 [ 196.458315][T17496] x64_sys_call+0x2fa4/0x2fb0 [ 196.462995][T17496] do_syscall_64+0xd2/0x200 [ 196.467494][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.473391][T17496] [ 196.475708][T17496] read to 0xffff8881031e7b80 of 8 bytes by task 17496 on cpu 0: [ 196.483335][T17496] rtc_dev_poll+0x78/0xb0 [ 196.487676][T17496] __io_arm_poll_handler+0x1ee/0xb70 [ 196.492976][T17496] io_arm_poll_handler+0x427/0x590 [ 196.498097][T17496] io_queue_async+0x60/0x3a0 [ 196.502702][T17496] io_req_task_submit+0xbb/0xc0 [ 196.507559][T17496] io_handle_tw_list+0x190/0x1c0 [ 196.512499][T17496] tctx_task_work_run+0x6d/0x1a0 [ 196.517442][T17496] tctx_task_work+0x3f/0x80 [ 196.521954][T17496] task_work_run+0x131/0x1a0 [ 196.526548][T17496] get_signal+0xe13/0xf70 [ 196.530890][T17496] arch_do_signal_or_restart+0x96/0x480 [ 196.536440][T17496] exit_to_user_mode_loop+0x7a/0x100 [ 196.541733][T17496] do_syscall_64+0x1d6/0x200 [ 196.546319][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.552217][T17496] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 196.554531][T17496] value changed: 0x0000000000003bc0 -> 0x0000000000003cc0 [ 196.561630][T17496] [ 196.563950][T17496] Reported by Kernel Concurrency Sanitizer on: [ 196.570109][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.1.5793 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 196.582610][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.592764][T17496] ================================================================== [ 196.868760][ T7073] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.930391][ T7073] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.976551][ T7073] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.053005][ T7073] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.148315][ T7073] erspan0 (unregistering): left allmulticast mode [ 197.251039][ T7073] bond0 (unregistering): (slave bridge2): Releasing active interface [ 197.317099][ T7073]  (unregistering): Released all slaves [ 197.324669][ T7073] bond1 (unregistering): Released all slaves [ 197.332720][ T7073] bond0 (unregistering): Released all slaves [ 197.379000][ T7073] veth1_macvtap: left promiscuous mode [ 197.384988][ T7073] veth1_vlan: left promiscuous mode [ 197.390174][ T7073] veth0_vlan: left promiscuous mode [ 197.681320][ T7073] IPVS: stop unused estimator thread 0... [ 197.735459][ T7073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.746199][ T7073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.801532][ T7073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.811827][ T7073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.839116][ T7073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.849433][ T7073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.885913][ T7073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.896274][ T7073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.954570][ T7073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.000172][ T7073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.046882][ T7073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.104131][ T7073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.152205][ T7073] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.162094][ T7073] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.196983][ T7073] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.206847][ T7073] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.254325][ T7073] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.264166][ T7073] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.301471][ T7073] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.311379][ T7073] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.360322][ T7073] bridge_slave_1: left allmulticast mode [ 198.366021][ T7073] bridge_slave_1: left promiscuous mode [ 198.371791][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.379469][ T7073] bridge_slave_0: left allmulticast mode [ 198.385362][ T7073] bridge_slave_0: left promiscuous mode [ 198.391039][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.399381][ T7073] batadv1: left allmulticast mode [ 198.404487][ T7073] batadv1: left promiscuous mode [ 198.409500][ T7073] bridge0: port 3(batadv1) entered disabled state [ 198.416288][ T7073] bridge_slave_1: left allmulticast mode [ 198.421913][ T7073] bridge_slave_1: left promiscuous mode [ 198.428320][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.436098][ T7073] bridge_slave_0: left allmulticast mode [ 198.441783][ T7073] bridge_slave_0: left promiscuous mode [ 198.447433][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.528134][ T7073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.539313][ T7073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.549482][ T7073] bond0 (unregistering): Released all slaves [ 198.615420][ T7073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.624982][ T7073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.634356][ T7073] bond0 (unregistering): Released all slaves [ 198.671828][ T7073] bond0 (unregistering): (slave vcan1): Releasing backup interface [ 198.680335][ T7073] bond0 (unregistering): Released all slaves [ 198.722854][ T7073] hsr_slave_0: left promiscuous mode [ 198.729283][ T7073] hsr_slave_1: left promiscuous mode [ 198.734898][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.742315][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.750370][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.757770][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.767163][ T7073] hsr_slave_0: left promiscuous mode [ 198.772753][ T7073] hsr_slave_1: left promiscuous mode [ 198.778403][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.785956][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.793540][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.800903][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.810058][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.818172][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.825799][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.833257][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.841302][ T7073] batman_adv: batadv0: Interface deactivated: macvlan0 [ 198.848182][ T7073] batman_adv: batadv0: Removing interface: macvlan0 [ 198.861728][ T7073] veth1_macvtap: left promiscuous mode [ 198.867193][ T7073] veth0_macvtap: left promiscuous mode [ 198.873068][ T7073] veth1_vlan: left promiscuous mode [ 198.878325][ T7073] veth0_vlan: left promiscuous mode [ 198.883902][ T7073] veth1_macvtap: left promiscuous mode [ 198.889734][ T7073] veth0_macvtap: left promiscuous mode [ 198.895279][ T7073] veth1_vlan: left promiscuous mode [ 198.900907][ T7073] veth0_vlan: left promiscuous mode [ 198.906669][ T7073] veth1_macvtap: left promiscuous mode [ 198.912117][ T7073] veth0_macvtap: left promiscuous mode [ 198.917762][ T7073] veth1_vlan: left promiscuous mode [ 198.923033][ T7073] veth0_vlan: left promiscuous mode [ 199.039276][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 199.048617][ T7073] team0 (unregistering): Port device team_slave_0 removed [ 199.095730][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 199.106344][ T7073] team0 (unregistering): Port device team_slave_0 removed [ 199.153158][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 199.791097][ T7073] IPVS: stop unused estimator thread 0...