last executing test programs: 3m27.482394128s ago: executing program 32 (id=398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008041}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0) 2m59.839939594s ago: executing program 33 (id=1472): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94010000100001000000000000000000fc0000000000000000000000000000000000000000000000000100000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000048000200656362286369"], 0x194}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269"], 0x118}, 0x1, 0x0, 0x0, 0x4040994}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 2m56.696115756s ago: executing program 34 (id=1561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m54.443560306s ago: executing program 35 (id=1585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) 2m53.144578251s ago: executing program 36 (id=1604): mkdir(&(0x7f0000000580)='./file0\x00', 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f0000000440)=@v3={0x3000000, [{0x8495, 0x4}, {0xd, 0xbc19}]}, 0x18, 0x2) 2m48.999439973s ago: executing program 37 (id=1691): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) 1m30.378609135s ago: executing program 8 (id=4387): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1m30.273127383s ago: executing program 8 (id=4391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1m30.216992118s ago: executing program 8 (id=4394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 1m30.18773033s ago: executing program 8 (id=4396): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) 1m30.156394693s ago: executing program 8 (id=4397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, 0x0, 0x0) 1m30.06493017s ago: executing program 8 (id=4402): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m30.012530484s ago: executing program 38 (id=4402): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m25.298070752s ago: executing program 6 (id=4588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) 1m25.297608482s ago: executing program 6 (id=4598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) 1m25.225796148s ago: executing program 6 (id=4600): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 1m25.207587329s ago: executing program 6 (id=4590): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 1m25.152201134s ago: executing program 6 (id=4591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x10cf, &(0x7f0000000540)={0x0, 0x7734, 0x800, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x543, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m25.122121736s ago: executing program 6 (id=4595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180)) 1m25.071985831s ago: executing program 39 (id=4595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180)) 1m11.399000086s ago: executing program 2 (id=5050): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 1m11.195355732s ago: executing program 2 (id=5053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) pipe(&(0x7f0000002740)) 1m11.165274585s ago: executing program 2 (id=5054): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x2, 0x4}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m11.012073247s ago: executing program 2 (id=5056): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) 1m10.938518943s ago: executing program 2 (id=5059): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000200)) 1m10.812274123s ago: executing program 2 (id=5060): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1m10.812141773s ago: executing program 40 (id=5060): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 58.074795035s ago: executing program 4 (id=5628): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 57.25069444s ago: executing program 4 (id=5662): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pipe2(0x0, 0x0) 57.123061541s ago: executing program 4 (id=5664): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0xffab, 0x1, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 57.060174646s ago: executing program 4 (id=5666): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 57.059973406s ago: executing program 4 (id=5667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) 56.908140388s ago: executing program 4 (id=5676): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) process_mrelease(0xffffffffffffffff, 0x0) 56.908025888s ago: executing program 41 (id=5676): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) process_mrelease(0xffffffffffffffff, 0x0) 17.287406244s ago: executing program 3 (id=7039): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 17.221529699s ago: executing program 3 (id=7042): r0 = syz_io_uring_setup(0x49b, &(0x7f0000000140)={0x0, 0x334c, 0x10, 0x3, 0x2de}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 17.152068645s ago: executing program 3 (id=7049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 17.044011433s ago: executing program 3 (id=7054): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 16.893478716s ago: executing program 3 (id=7061): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)) 16.193249701s ago: executing program 3 (id=7080): r0 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2ad76, 0x0, 0x7, 0x168}, &(0x7f0000000940)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x44, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3b3d, 0xf7b1, 0x40, 0x0, 0x31) 16.159779474s ago: executing program 42 (id=7080): r0 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2ad76, 0x0, 0x7, 0x168}, &(0x7f0000000940)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x44, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3b3d, 0xf7b1, 0x40, 0x0, 0x31) 1.201342563s ago: executing program 7 (id=7700): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x28d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x30, 0x40400d1}}], 0x1, 0x814) 1.019592458s ago: executing program 9 (id=7710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$caif_stream(0x25, 0x1, 0x5) writev(r2, &(0x7f0000000c40)=[{&(0x7f00000007c0)="14", 0x1}], 0x1) 977.504911ms ago: executing program 9 (id=7714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 925.380175ms ago: executing program 9 (id=7715): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 860.244471ms ago: executing program 9 (id=7717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 860.049951ms ago: executing program 1 (id=7718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 859.884181ms ago: executing program 9 (id=7719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 850.716441ms ago: executing program 1 (id=7721): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 826.385934ms ago: executing program 7 (id=7722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 790.933156ms ago: executing program 7 (id=7723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 762.004338ms ago: executing program 9 (id=7724): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001900)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xf1, 0x3, 0x2, 0x2, 0x6, 0xe, 0x3, {0x3, 0x1, 'f'}, 0x1, 0x56, 0x3, 0x8, 0x1, '/'}}, 0x13) 761.207159ms ago: executing program 1 (id=7735): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffeee, 0x10, &(0x7f00000000c0), 0xfffffd67}, 0x48) 701.355753ms ago: executing program 0 (id=7725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000280), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 701.225993ms ago: executing program 7 (id=7726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$inet(0x2, 0x80000, 0xc37) 670.065476ms ago: executing program 0 (id=7727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0xd7a012eb995cc188, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x8a) 622.14932ms ago: executing program 0 (id=7728): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 553.388795ms ago: executing program 1 (id=7729): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00') preadv(r1, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}], 0x1, 0x10001, 0x7) 513.484238ms ago: executing program 0 (id=7732): socket$kcm(0x29, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 469.734842ms ago: executing program 1 (id=7734): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 456.647403ms ago: executing program 7 (id=7737): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r2}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) 437.507344ms ago: executing program 0 (id=7738): setreuid(0x0, 0xee01) r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000781daa39ca1061b9c26c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000008000085000000", @ANYRES32], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 432.437575ms ago: executing program 1 (id=7739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 431.913125ms ago: executing program 7 (id=7740): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) creat(0x0, 0x0) 391.031938ms ago: executing program 5 (id=7741): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 390.606448ms ago: executing program 5 (id=7742): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 225.550911ms ago: executing program 5 (id=7743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 191.733404ms ago: executing program 5 (id=7744): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 177.838105ms ago: executing program 0 (id=7745): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 199.3µs ago: executing program 5 (id=7746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 0s ago: executing program 5 (id=7747): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 193.857668][T24143] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5309'. [ 194.067098][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5322'. [ 194.092887][T24188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5322'. [ 194.307778][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 194.307848][ T29] audit: type=1400 audit(201.006:6025): avc: denied { setopt } for pid=24234 comm="syz.4.5333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.376842][ T29] audit: type=1400 audit(201.069:6026): avc: denied { name_bind } for pid=24242 comm="syz.9.5337" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 194.398229][ T29] audit: type=1400 audit(201.069:6027): avc: denied { node_bind } for pid=24242 comm="syz.9.5337" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 194.543688][ T29] audit: type=1400 audit(201.258:6028): avc: denied { bind } for pid=24249 comm="syz.9.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.575585][ T29] audit: type=1400 audit(201.279:6029): avc: denied { write } for pid=24249 comm="syz.9.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.600970][ T29] audit: type=1400 audit(201.310:6030): avc: denied { name_bind } for pid=24253 comm="syz.9.5344" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 194.641439][ T29] audit: type=1400 audit(201.352:6031): avc: denied { cpu } for pid=24257 comm="syz.3.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 194.689536][ T29] audit: type=1400 audit(201.405:6032): avc: denied { read } for pid=24260 comm="syz.9.5346" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.713725][ T29] audit: type=1400 audit(201.405:6033): avc: denied { open } for pid=24260 comm="syz.9.5346" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.738414][ T29] audit: type=1400 audit(201.405:6034): avc: denied { ioctl } for pid=24260 comm="syz.9.5346" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.946450][T24280] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5355'. [ 195.975285][T24373] netlink: 'syz.3.5399': attribute type 21 has an invalid length. [ 195.985596][T24373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5399'. [ 195.994705][T24373] netlink: 'syz.3.5399': attribute type 1 has an invalid length. [ 196.005524][T24375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24375 comm=syz.9.5400 [ 196.554711][T24426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24426 comm=syz.3.5423 [ 196.992795][T24491] netlink: 'syz.1.5454': attribute type 13 has an invalid length. [ 197.031743][T24491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.069585][T24500] SELinux: failed to load policy [ 197.182750][T24522] netlink: 'syz.5.5468': attribute type 27 has an invalid length. [ 197.230663][T24522] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.237980][T24522] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.282379][T24522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.293091][T24522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.357448][T24522] ip6gre1: left allmulticast mode [ 197.402135][T24529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.411220][T24529] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.431099][T24529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.448602][T16281] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.458706][T24540] __nla_validate_parse: 1 callbacks suppressed [ 197.458766][T24540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5476'. [ 197.462182][T16281] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.487547][T16281] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.498594][T16281] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.747524][T24583] netlink: 32 bytes leftover after parsing attributes in process `GPL'. [ 197.788453][T24587] netlink: 'syz.3.5498': attribute type 1 has an invalid length. [ 197.854125][T24596] netlink: 'syz.3.5502': attribute type 29 has an invalid length. [ 197.866292][T24596] netlink: 'syz.3.5502': attribute type 29 has an invalid length. [ 197.875047][T24596] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5502'. [ 197.940026][T24599] SELinux: failed to load policy [ 198.212478][T24628] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=24628 comm=syz.5.5517 [ 198.290178][T24641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5524'. [ 198.304536][T24636] hub 2-0:1.0: USB hub found [ 198.309508][T24636] hub 2-0:1.0: 8 ports detected [ 198.334503][T24641] hsr_slave_1 (unregistering): left promiscuous mode [ 198.745406][T24700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24700 comm=syz.9.5552 [ 198.850828][T24711] sd 0:0:1:0: device reset [ 198.878714][T24713] rdma_op ffff888103774d80 conn xmit_rdma 0000000000000000 [ 199.059034][T24741] netlink: 'syz.9.5572': attribute type 27 has an invalid length. [ 199.147338][T24746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.182369][T24746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.414401][T24780] rdma_op ffff888103774180 conn xmit_rdma 0000000000000000 [ 199.471380][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 199.471396][ T29] audit: type=1326 audit(206.423:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.9.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 199.503926][ T29] audit: type=1400 audit(206.454:6316): avc: denied { connect } for pid=24794 comm="syz.4.5597" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.524211][ T29] audit: type=1326 audit(206.454:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.9.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 199.547492][ T29] audit: type=1326 audit(206.454:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.9.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 199.570620][ T29] audit: type=1326 audit(206.454:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.9.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 199.572668][T24791] smc: net device bond0 applied user defined pnetid SYZ0 [ 199.593821][ T29] audit: type=1326 audit(206.454:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.9.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 199.604722][T24791] smc: net device bond0 erased user defined pnetid SYZ0 [ 199.624586][ T29] audit: type=1326 audit(206.454:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.9.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 199.657619][ T29] audit: type=1326 audit(206.454:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.9.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 199.726392][ T29] audit: type=1326 audit(206.685:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 199.749778][ T29] audit: type=1326 audit(206.685:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 199.821188][T24820] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 199.832997][T24819] IPVS: stopping backup sync thread 24820 ... [ 200.015697][T24839] syz_tun: entered promiscuous mode [ 200.032840][T24839] batadv_slave_0: entered promiscuous mode [ 200.041429][T24839] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.052836][T24839] hsr1: entered allmulticast mode [ 200.057934][T24839] syz_tun: entered allmulticast mode [ 200.063457][T24839] batadv_slave_0: entered allmulticast mode [ 200.087632][T24847] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 200.095254][T24846] IPVS: stopping backup sync thread 24847 ... [ 200.157936][T24851] SELinux: ebitmap: truncated map [ 200.175369][T24851] SELinux: failed to load policy [ 200.196911][T24862] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 200.477645][T24899] rdma_op ffff8881022d5180 conn xmit_rdma 0000000000000000 [ 200.668381][T24921] netlink: 'syz.9.5656': attribute type 21 has an invalid length. [ 200.690929][T24921] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5656'. [ 200.700426][T24921] netlink: 'syz.9.5656': attribute type 1 has an invalid length. [ 200.802158][T24930] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5660'. [ 200.811329][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5660'. [ 200.841082][T24930] bridge0: port 4(macsec1) entered blocking state [ 200.847719][T24930] bridge0: port 4(macsec1) entered disabled state [ 200.876431][T24930] macsec1: entered allmulticast mode [ 200.889359][T24930] macsec1: left allmulticast mode [ 201.260645][T24002] syz_tun (unregistering): left promiscuous mode [ 201.426290][T24972] netlink: 'syz.3.5678': attribute type 3 has an invalid length. [ 201.509665][T19986] bridge_slave_1: left allmulticast mode [ 201.515242][T24982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5682'. [ 201.515449][T19986] bridge_slave_1: left promiscuous mode [ 201.530268][T19986] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.538475][T19986] bridge_slave_0: left allmulticast mode [ 201.544302][T19986] bridge_slave_0: left promiscuous mode [ 201.550255][T19986] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.578616][T19986] dvmrp0 (unregistering): left allmulticast mode [ 201.602252][T19986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.611967][T19986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.621192][T19986] bond0 (unregistering): Released all slaves [ 201.629577][T24982] netlink: 'syz.3.5682': attribute type 1 has an invalid length. [ 201.637462][T24982] netlink: 'syz.3.5682': attribute type 2 has an invalid length. [ 201.645488][T24982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5682'. [ 201.717000][T24964] chnl_net:caif_netlink_parms(): no params data found [ 201.744998][T19986] batadv_slave_0: left promiscuous mode [ 201.764339][T19986] hsr_slave_0: left promiscuous mode [ 201.774361][T19986] hsr_slave_1: left promiscuous mode [ 201.782285][T19986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.790246][T19986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.847966][T19986] team0 (unregistering): Port device team_slave_1 removed [ 201.868011][T19986] team0 (unregistering): Port device team_slave_0 removed [ 201.950425][T25014] random: crng reseeded on system resumption [ 201.971192][T24964] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.974070][T25014] Restarting kernel threads ... [ 201.978686][T24964] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.990562][T24964] bridge_slave_0: entered allmulticast mode [ 201.997387][T24964] bridge_slave_0: entered promiscuous mode [ 202.004246][T24964] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.011459][T24964] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.017094][T25014] Done restarting kernel threads. [ 202.018861][T24964] bridge_slave_1: entered allmulticast mode [ 202.031977][T24964] bridge_slave_1: entered promiscuous mode [ 202.059961][T24964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.072218][T24964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.108914][T24964] team0: Port device team_slave_0 added [ 202.124422][T24964] team0: Port device team_slave_1 added [ 202.162703][T24964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.169715][T24964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.195976][T24964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.220951][T24964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.228043][T24964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.254465][T24964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.314153][T24964] hsr_slave_0: entered promiscuous mode [ 202.322692][T24964] hsr_slave_1: entered promiscuous mode [ 202.334361][T24964] debugfs: 'hsr0' already exists in 'hsr' [ 202.340149][T24964] Cannot create hsr debugfs directory [ 202.349138][T25057] syz_tun: entered allmulticast mode [ 202.371472][T25056] syz_tun: left allmulticast mode [ 202.658177][T24964] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.669465][T24964] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.678405][T24964] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.687518][T24964] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.728369][T24964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.743901][T24964] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.755540][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.762668][T17279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.774429][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.781613][T17279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.865434][T24964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.018708][T24964] veth0_vlan: entered promiscuous mode [ 203.028370][T24964] veth1_vlan: entered promiscuous mode [ 203.047631][T24964] veth0_macvtap: entered promiscuous mode [ 203.055568][T24964] veth1_macvtap: entered promiscuous mode [ 203.069530][T24964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.082512][T24964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.094781][T16923] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.103877][T16923] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.123223][T16923] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.135159][T16923] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.293710][T25214] random: crng reseeded on system resumption [ 203.304418][T25214] Restarting kernel threads ... [ 203.309790][T25214] Done restarting kernel threads. [ 203.358889][T25221] random: crng reseeded on system resumption [ 203.366340][T25223] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25223 comm=syz.1.5720 [ 204.069935][T25266] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5742'. [ 204.261716][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 204.261736][ T29] audit: type=1326 audit(211.452:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.291507][T25298] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 204.299106][T25298] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 204.311157][ T29] audit: type=1326 audit(211.452:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.334272][ T29] audit: type=1326 audit(211.452:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.357732][ T29] audit: type=1326 audit(211.452:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.380663][ T29] audit: type=1326 audit(211.452:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.403882][ T29] audit: type=1326 audit(211.452:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.427151][ T29] audit: type=1326 audit(211.452:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.450108][ T29] audit: type=1326 audit(211.452:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.473065][ T29] audit: type=1326 audit(211.452:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.497007][ T29] audit: type=1326 audit(211.557:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25293 comm="syz.5.5755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942d82ebe9 code=0x7ffc0000 [ 204.891645][T25339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5772'. [ 205.016606][T25352] ref_ctr_offset mismatch. inode: 0x272 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 205.228323][T25377] netlink: 256 bytes leftover after parsing attributes in process `syz.9.5791'. [ 205.252474][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5801'. [ 205.286885][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5793'. [ 205.327660][T25388] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 206.076382][T25477] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 206.278740][T25496] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 206.345859][T25502] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5843'. [ 206.613779][T10984] kernel write not supported for file /5367/attr/exec (pid: 10984 comm: kworker/0:6) [ 206.668994][T25528] serio: Serial port ptm0 [ 206.899348][T25574] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5866'. [ 207.038507][T25598] netlink: '+}[@': attribute type 298 has an invalid length. [ 207.141741][T25618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5877'. [ 207.172469][T25618] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 207.183898][T25618] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 207.298060][T25638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5880'. [ 207.329845][T25645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5882'. [ 207.631636][T25707] vxcan3: entered promiscuous mode [ 207.636831][T25707] vxcan3: entered allmulticast mode [ 207.640149][T25710] rdma_op ffff888114d4ad80 conn xmit_rdma 0000000000000000 [ 208.886572][T25892] netlink: 'syz.3.5968': attribute type 2 has an invalid length. [ 208.894737][T25892] netlink: 'syz.3.5968': attribute type 1 has an invalid length. [ 209.056874][T25918] netlink: 'syz.3.5981': attribute type 3 has an invalid length. [ 209.119741][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 209.119759][ T29] audit: type=1400 audit(216.554:6532): avc: denied { ioctl } for pid=25924 comm="syz.3.5983" path="socket:[63487]" dev="sockfs" ino=63487 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.219584][ T29] audit: type=1326 audit(216.659:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.3.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 209.242618][ T29] audit: type=1326 audit(216.659:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.3.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 209.265746][ T29] audit: type=1326 audit(216.659:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.3.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 209.289050][ T29] audit: type=1326 audit(216.659:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.3.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 209.312373][ T29] audit: type=1326 audit(216.659:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.3.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 209.346416][ T29] audit: type=1326 audit(216.764:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.3.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 209.369537][ T29] audit: type=1326 audit(216.764:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.3.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 209.392773][ T29] audit: type=1326 audit(216.764:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25933 comm="syz.3.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 209.475864][T25941] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 209.508222][ T29] audit: type=1400 audit(216.963:6541): avc: denied { write } for pid=25948 comm="syz.5.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.594217][T25958] __nla_validate_parse: 2 callbacks suppressed [ 209.594233][T25958] netlink: 536 bytes leftover after parsing attributes in process `syz.7.5998'. [ 209.612910][T25958] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5998'. [ 210.004329][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6035'. [ 210.151180][ T3400] IPVS: starting estimator thread 0... [ 210.258681][T26055] IPVS: using max 1776 ests per chain, 88800 per kthread [ 210.352372][T17279] bridge_slave_1: left allmulticast mode [ 210.358221][T17279] bridge_slave_1: left promiscuous mode [ 210.364176][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.372340][T17279] bridge_slave_0: left allmulticast mode [ 210.378140][T17279] bridge_slave_0: left promiscuous mode [ 210.383940][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.438893][T26099] SELinux: Context system_u:object_r:init_var_run_t:s0 is not valid (left unmapped). [ 210.461831][T17279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.472208][T17279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.481894][T17279] bond0 (unregistering): Released all slaves [ 210.492418][T17279] bond1 (unregistering): Released all slaves [ 210.503153][T26097] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6058'. [ 210.512750][T26101] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 210.544199][T26103] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6061'. [ 210.692659][T17279] hsr_slave_0: left promiscuous mode [ 210.707640][T17279] hsr_slave_1: left promiscuous mode [ 210.729896][T26129] serio: Serial port ttyS3 [ 210.739876][T17279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.749330][T26133] sd 0:0:1:0: device reset [ 210.755644][T17279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.816524][T26138] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 210.858058][T17279] team0 (unregistering): Port device team_slave_1 removed [ 210.891042][T17279] team0 (unregistering): Port device team_slave_0 removed [ 211.123172][T26069] chnl_net:caif_netlink_parms(): no params data found [ 211.232946][T26069] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.240212][T26069] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.261740][T26069] bridge_slave_0: entered allmulticast mode [ 211.281318][T26069] bridge_slave_0: entered promiscuous mode [ 211.305134][T26069] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.312377][T26069] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.341018][T26069] bridge_slave_1: entered allmulticast mode [ 211.357463][T26069] bridge_slave_1: entered promiscuous mode [ 211.400018][T26069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.413118][T26069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.460560][T26069] team0: Port device team_slave_0 added [ 211.477591][T26069] team0: Port device team_slave_1 added [ 211.508971][T26069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.516268][T26069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.542513][T26069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.560050][T26069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.567096][T26069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.593172][T26069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.628932][T26250] SELinux: failed to load policy [ 211.643546][T26069] hsr_slave_0: entered promiscuous mode [ 211.657488][T26069] hsr_slave_1: entered promiscuous mode [ 211.666434][T26069] debugfs: 'hsr0' already exists in 'hsr' [ 211.672234][T26069] Cannot create hsr debugfs directory [ 211.701500][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6100'. [ 211.710579][T26262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6100'. [ 211.742711][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6100'. [ 211.751785][T26262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6100'. [ 211.765182][T16923] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.775934][T16923] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.805478][T16923] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.828835][T16923] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.891614][T26285] SELinux: Context system_u:object_r:getty_exec_t:s0 is not valid (left unmapped). [ 212.019133][T26301] hub 8-0:1.0: USB hub found [ 212.029940][T26301] hub 8-0:1.0: 8 ports detected [ 212.066297][T26069] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.081541][T26069] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.109148][T26069] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.120010][T26069] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.179101][T26069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.221017][T26069] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.235481][T16923] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.242641][T16923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.271410][T26069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.281899][T26069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.295460][T16923] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.302602][T16923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.360029][T26363] netlink: '+}[@': attribute type 298 has an invalid length. [ 212.427094][T26069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.651044][T26069] veth0_vlan: entered promiscuous mode [ 212.659306][T26069] veth1_vlan: entered promiscuous mode [ 212.681046][T26069] veth0_macvtap: entered promiscuous mode [ 212.698407][T26069] veth1_macvtap: entered promiscuous mode [ 212.719781][T26069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.733664][T26414] pim6reg: entered allmulticast mode [ 212.741246][T26069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.756292][T26414] pim6reg: left allmulticast mode [ 212.763396][T16923] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.776841][T16923] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.799537][T16923] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.810918][T16923] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.848202][T26417] netlink: 'syz.9.6136': attribute type 5 has an invalid length. [ 212.996010][T26440] block device autoloading is deprecated and will be removed. [ 213.022056][T26440] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.036800][T26445] 9pnet_fd: Insufficient options for proto=fd [ 213.058938][T26440] FAT-fs (loop7): unable to read boot sector [ 213.097946][T26451] rdma_op ffff888103fb4d80 conn xmit_rdma 0000000000000000 [ 213.355217][T26501] netlink: 'syz.1.6170': attribute type 5 has an invalid length. [ 214.110997][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 214.111048][ T29] audit: type=1400 audit(221.792:6886): avc: denied { mac_admin } for pid=26618 comm="syz.9.6181" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.166312][ T29] audit: type=1400 audit(221.845:6887): avc: denied { read } for pid=26623 comm="syz.5.6182" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.189662][ T29] audit: type=1400 audit(221.845:6888): avc: denied { open } for pid=26623 comm="syz.5.6182" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.213363][ T29] audit: type=1400 audit(221.845:6889): avc: denied { ioctl } for pid=26623 comm="syz.5.6182" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.266488][ T29] audit: type=1326 audit(221.939:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26626 comm="syz.9.6183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 214.289460][ T29] audit: type=1326 audit(221.939:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26626 comm="syz.9.6183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 214.312487][ T29] audit: type=1326 audit(221.939:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26626 comm="syz.9.6183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 214.335486][ T29] audit: type=1326 audit(221.939:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26626 comm="syz.9.6183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 214.358562][ T29] audit: type=1326 audit(221.939:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26626 comm="syz.9.6183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86965debe9 code=0x7ffc0000 [ 214.384134][T26635] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.430936][T26635] FAT-fs (loop19): unable to read boot sector [ 214.451629][ T29] audit: type=1400 audit(222.149:6895): avc: denied { allowed } for pid=26648 comm="syz.5.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 215.706588][T16523] batadv1: left allmulticast mode [ 215.711780][T16523] batadv1: left promiscuous mode [ 215.716843][T16523] bridge0: port 3(batadv1) entered disabled state [ 215.732389][T16523] bridge_slave_1: left allmulticast mode [ 215.738168][T16523] bridge_slave_1: left promiscuous mode [ 215.743828][T16523] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.752757][T16523] bridge_slave_0: left promiscuous mode [ 215.758603][T16523] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.823725][T16523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.833350][T16523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.842820][T16523] bond0 (unregistering): Released all slaves [ 215.978550][T16523] hsr_slave_0: left promiscuous mode [ 215.994528][T16523] hsr_slave_1: left promiscuous mode [ 216.000557][T16523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.009455][T16523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.145178][T26707] chnl_net:caif_netlink_parms(): no params data found [ 216.187259][T26707] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.194525][T26707] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.208718][T26730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6214'. [ 216.223145][T26707] bridge_slave_0: entered allmulticast mode [ 216.244387][T26707] bridge_slave_0: entered promiscuous mode [ 216.251579][T26707] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.258851][T26707] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.267906][T26707] bridge_slave_1: entered allmulticast mode [ 216.275010][T26707] bridge_slave_1: entered promiscuous mode [ 216.313758][T26707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.334645][T26707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.397448][T26707] team0: Port device team_slave_0 added [ 216.418255][T26707] team0: Port device team_slave_1 added [ 216.466454][T26707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.473528][T26707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.499727][T26707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.564176][T26707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.571261][T26707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.597404][T26707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.712606][T26707] hsr_slave_0: entered promiscuous mode [ 216.725607][T26707] hsr_slave_1: entered promiscuous mode [ 217.104476][T26707] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 217.139209][T26707] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 217.172709][T26707] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 217.232455][T26707] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 217.386537][T26707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.415995][T26707] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.445325][T19986] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.452590][T19986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.502419][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.509647][T16767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.584731][T26707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.731604][T26707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.936826][T26871] SELinux: policydb version 0 does not match my version range 15-35 [ 217.957828][T26871] SELinux: failed to load policy [ 218.044509][T26888] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6227'. [ 218.061424][T26888] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6227'. [ 218.104826][T26897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6230'. [ 218.115288][T26707] veth0_vlan: entered promiscuous mode [ 218.136646][T26707] veth1_vlan: entered promiscuous mode [ 218.152987][T26897] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 218.164501][T26897] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 218.194683][T26707] veth0_macvtap: entered promiscuous mode [ 218.200555][T26909] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 218.209964][T26707] veth1_macvtap: entered promiscuous mode [ 218.210619][T26909] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 218.232800][T26707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.253424][T26707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.281622][T17279] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.304781][T17279] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.332180][T17279] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.361521][T17279] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.722602][T26978] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 218.792817][T26986] team0 (unregistering): Port device team_slave_0 removed [ 218.803136][T26986] team0 (unregistering): Port device team_slave_1 removed [ 218.944478][T26993] ref_ctr_offset mismatch. inode: 0x630 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 219.074066][T26999] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6263'. [ 219.126460][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 219.126477][ T29] audit: type=1400 audit(227.052:6998): avc: denied { bind } for pid=27003 comm="syz.7.6267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.182383][T27011] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6270'. [ 219.215563][T27011] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 219.227387][T27011] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 219.275019][ T29] audit: type=1400 audit(227.220:6999): avc: denied { compute_member } for pid=27022 comm="syz.3.6274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 219.305942][ T29] audit: type=1400 audit(227.241:7000): avc: denied { shutdown } for pid=27028 comm="syz.3.6277" lport=38351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.329581][ T29] audit: type=1400 audit(227.272:7001): avc: denied { read } for pid=27028 comm="syz.3.6277" lport=38351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.381887][ T29] audit: type=1400 audit(227.324:7002): avc: denied { remount } for pid=27030 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.430633][ T29] audit: type=1326 audit(227.377:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27037 comm="syz.7.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878de4ebe9 code=0x7ffc0000 [ 219.453718][ T29] audit: type=1326 audit(227.377:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27037 comm="syz.7.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878de4ebe9 code=0x7ffc0000 [ 219.492382][ T29] audit: type=1326 audit(227.429:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27037 comm="syz.7.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f878de4ebe9 code=0x7ffc0000 [ 219.515541][ T29] audit: type=1326 audit(227.429:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27037 comm="syz.7.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878de4ebe9 code=0x7ffc0000 [ 219.538702][ T29] audit: type=1326 audit(227.429:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27037 comm="syz.7.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878de4ebe9 code=0x7ffc0000 [ 219.724795][T27069] team0 (unregistering): Port device team_slave_0 removed [ 219.738452][T27069] team0 (unregistering): Port device team_slave_1 removed [ 219.814398][T27081] loop7: detected capacity change from 0 to 128 [ 219.827802][T27077] hub 8-0:1.0: USB hub found [ 219.832758][T27077] hub 8-0:1.0: 8 ports detected [ 219.999303][T27107] team0 (unregistering): Port device team_slave_0 removed [ 220.008330][T27107] team0 (unregistering): Port device team_slave_1 removed [ 220.322998][T27128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6323'. [ 220.324616][T27124] hub 8-0:1.0: USB hub found [ 220.336730][T27124] hub 8-0:1.0: 8 ports detected [ 220.347284][T27128] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 220.358925][T27128] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 220.567368][T27147] team0 (unregistering): Port device team_slave_0 removed [ 220.578067][T27147] team0 (unregistering): Port device team_slave_1 removed [ 220.787602][T27161] vhci_hcd: invalid port number 96 [ 220.792888][T27161] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 221.067480][T17279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.140550][T17279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.178814][T17279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.216380][T17279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.270079][T17279] bridge_slave_1: left allmulticast mode [ 221.275984][T17279] bridge_slave_1: left promiscuous mode [ 221.281728][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.291133][T17279] bridge_slave_0: left allmulticast mode [ 221.296820][T17279] bridge_slave_0: left promiscuous mode [ 221.302600][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.358740][T27172] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6342'. [ 221.494053][T17279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.520411][T17279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.534348][T17279] bond0 (unregistering): Released all slaves [ 221.544191][T17279] bond1 (unregistering): Released all slaves [ 221.652338][T27196] vhci_hcd: invalid port number 96 [ 221.657580][T27196] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 221.673792][T17279] hsr_slave_0: left promiscuous mode [ 221.695367][T17279] hsr_slave_1: left promiscuous mode [ 221.713489][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.721084][T17279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.745487][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.753012][T17279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.767419][T27205] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 221.787186][T17279] veth1_macvtap: left promiscuous mode [ 221.792723][T17279] veth0_macvtap: left promiscuous mode [ 221.798751][T17279] veth1_vlan: left promiscuous mode [ 221.804291][T17279] veth0_vlan: left promiscuous mode [ 222.270876][T27230] loop7: detected capacity change from 0 to 512 [ 222.292704][T27230] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 222.330387][T27230] EXT4-fs (loop7): 1 truncate cleaned up [ 222.352795][T27230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.458070][T27180] chnl_net:caif_netlink_parms(): no params data found [ 222.460042][T24964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.522984][T27251] loop7: detected capacity change from 0 to 764 [ 222.539585][T27180] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.547028][T27180] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.555169][T27251] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 222.566156][T27180] bridge_slave_0: entered allmulticast mode [ 222.572870][T27180] bridge_slave_0: entered promiscuous mode [ 222.580089][T27180] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.587286][T27180] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.594520][T27180] bridge_slave_1: entered allmulticast mode [ 222.601182][T27180] bridge_slave_1: entered promiscuous mode [ 222.632161][T27180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.641668][T27260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6374'. [ 222.653431][T27180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.696857][T27180] team0: Port device team_slave_0 added [ 222.710655][T27180] team0: Port device team_slave_1 added [ 222.742397][T27180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.749466][T27180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.775750][T27180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.790435][T27180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.797531][T27180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.823765][T27180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.876496][T27180] hsr_slave_0: entered promiscuous mode [ 222.892455][T27180] hsr_slave_1: entered promiscuous mode [ 222.898430][T27272] serio: Serial port ptm0 [ 222.903548][T27180] debugfs: 'hsr0' already exists in 'hsr' [ 222.909370][T27180] Cannot create hsr debugfs directory [ 223.160352][T27290] loop7: detected capacity change from 0 to 1024 [ 223.170905][T27180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.181437][T27290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.195592][T27180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.208742][T27180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.224498][T27180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.228183][T27290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.282198][T27180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.294630][T27180] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.330338][T16923] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.337505][T16923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.346691][T24964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.360958][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.368103][T16281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.440103][T27180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.535881][T27180] veth0_vlan: entered promiscuous mode [ 223.546561][T27180] veth1_vlan: entered promiscuous mode [ 223.567084][T27180] veth0_macvtap: entered promiscuous mode [ 223.574733][T27180] veth1_macvtap: entered promiscuous mode [ 223.589441][T27180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.602865][T27180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.616228][T16923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.629182][T16923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.649474][T16923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.670806][T16923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.772861][T27320] netlink: 'syz.7.6388': attribute type 3 has an invalid length. [ 223.822752][T27327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6389'. [ 223.847760][T27327] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 223.859435][T27327] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 223.995876][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 223.995891][ T29] audit: type=1400 audit(232.175:7206): avc: denied { cpu } for pid=27338 comm="syz.3.6393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 224.062669][T27344] sd 0:0:1:0: device reset [ 224.067189][ T29] audit: type=1400 audit(232.248:7207): avc: denied { ioctl } for pid=27343 comm="" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 224.149353][ T29] audit: type=1400 audit(232.322:7208): avc: denied { allowed } for pid=27347 comm="syz.7.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 224.168442][ T29] audit: type=1400 audit(232.322:7209): avc: denied { create } for pid=27347 comm="syz.7.6403" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.189198][ T29] audit: type=1400 audit(232.322:7210): avc: denied { map } for pid=27347 comm="syz.7.6403" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.213262][ T29] audit: type=1400 audit(232.322:7211): avc: denied { read write } for pid=27347 comm="syz.7.6403" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.241431][ T29] audit: type=1400 audit(232.374:7212): avc: denied { write } for pid=27349 comm="syz.1.6404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.357859][ T29] audit: type=1400 audit(232.500:7213): avc: denied { create } for pid=27355 comm="syz.1.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.376958][ T29] audit: type=1400 audit(232.511:7214): avc: denied { connect } for pid=27355 comm="syz.1.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.396169][ T29] audit: type=1400 audit(232.542:7215): avc: denied { create } for pid=27361 comm="syz.7.6408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.500967][T27370] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6411'. [ 224.510031][T27370] netem: unknown loss type 13 [ 224.514775][T27370] netem: change failed [ 225.699503][T27412] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6430'. [ 225.708587][T27412] netem: unknown loss type 13 [ 225.713409][T27412] netem: change failed [ 226.727760][T27460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6451'. [ 226.737415][T27460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6451'. [ 226.832756][T27465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6452'. [ 226.932702][T27479] atomic_op ffff888125dad528 conn xmit_atomic 0000000000000000 [ 227.018503][T27486] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27486 comm=syz.3.6463 [ 227.031220][T27486] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27486 comm=syz.3.6463 [ 227.043991][T27488] netlink: 'syz.5.6464': attribute type 4 has an invalid length. [ 227.051744][T27488] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6464'. [ 227.089456][T27488] .`: renamed from bond0 (while UP) [ 227.271784][T27512] netlink: 'syz.7.6476': attribute type 4 has an invalid length. [ 227.288884][T27512] netlink: 'syz.7.6476': attribute type 4 has an invalid length. [ 227.476032][T27526] IPv6: Can't replace route, no match found [ 227.626599][T27544] bridge: RTM_NEWNEIGH with invalid ether address [ 227.719106][T27561] loop7: detected capacity change from 0 to 512 [ 227.751663][T27561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.790223][T27575] futex_wake_op: syz.3.6503 tries to shift op by -1; fix this program [ 227.824385][T24964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.844595][T27579] bridge: RTM_NEWNEIGH with invalid ether address [ 227.949073][T27605] futex_wake_op: syz.9.6516 tries to shift op by -1; fix this program [ 228.245665][T27631] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 228.273115][T27653] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 228.274114][T27631] SELinux: failed to load policy [ 228.425879][T27674] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.459880][T27681] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6543'. [ 228.494127][T27674] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.549249][T27674] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.575912][T27700] netlink: 'syz.7.6547': attribute type 10 has an invalid length. [ 228.584272][T27700] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6547'. [ 228.596811][T27674] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.664976][T17279] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.679141][T17279] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.697322][T17279] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.716421][T17279] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.777088][T27718] loop7: detected capacity change from 0 to 256 [ 228.789436][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 228.789455][ T29] audit: type=1400 audit(237.203:7367): avc: denied { setopt } for pid=27714 comm="syz.3.6549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.832320][ T29] audit: type=1400 audit(237.245:7368): avc: denied { mount } for pid=27717 comm="syz.7.6550" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 228.867327][ T29] audit: type=1400 audit(237.287:7369): avc: denied { unmount } for pid=24964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 229.330157][ T29] audit: type=1400 audit(237.760:7370): avc: denied { listen } for pid=27761 comm="syz.1.6557" lport=48295 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.353079][ T29] audit: type=1400 audit(237.760:7371): avc: denied { accept } for pid=27761 comm="syz.1.6557" lport=48295 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.376311][ T29] audit: type=1400 audit(237.760:7372): avc: denied { setopt } for pid=27761 comm="syz.1.6557" lport=48295 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 229.413058][T27765] vlan2: entered allmulticast mode [ 229.429956][ T29] audit: type=1400 audit(237.864:7373): avc: denied { read } for pid=27768 comm="syz.7.6562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.510518][ T29] audit: type=1400 audit(237.906:7374): avc: denied { ioctl } for pid=27772 comm="syz.1.6563" path="socket:[70235]" dev="sockfs" ino=70235 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.535356][ T29] audit: type=1400 audit(237.927:7375): avc: denied { write } for pid=27768 comm="syz.7.6562" path="socket:[70225]" dev="sockfs" ino=70225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.574268][ T29] audit: type=1326 audit(238.011:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27784 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3ea7ebe9 code=0x7ffc0000 [ 229.759570][T27815] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.766915][T27815] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.816319][T27815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.828513][T27815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.886006][T16767] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.902738][T16767] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.923107][T16767] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.949131][T16767] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.959550][T27847] netlink: 'syz.7.6579': attribute type 9 has an invalid length. [ 229.967380][T27847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6579'. [ 230.005092][T16767] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.005120][T27847] netlink: 'syz.7.6579': attribute type 9 has an invalid length. [ 230.005164][T27847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6579'. [ 230.042368][T17279] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.061831][T17279] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.088501][T27864] loop7: detected capacity change from 0 to 128 [ 230.113039][T17279] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.125275][T27864] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.318385][T24964] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.400898][T27910] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 230.445324][T27916] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.455922][T27916] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.523224][T27916] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.533653][T27916] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.611745][T27916] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.622589][T27916] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.675043][T27916] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.685545][T27916] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.718243][T16523] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.726493][T16523] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.738806][T16523] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.747157][T16523] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.759864][T16523] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.768142][T16523] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.803798][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.811196][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.852931][T27928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.863849][T27928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.898890][T17279] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.920733][T17279] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.943122][T17279] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.976698][T17279] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.992398][T27936] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 231.001627][T17279] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.010429][T17279] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.777727][T28017] netlink: 'syz.1.6650': attribute type 9 has an invalid length. [ 231.785540][T28017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6650'. [ 231.831448][T16799] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.841584][T28017] netlink: 'syz.1.6650': attribute type 9 has an invalid length. [ 231.849645][T28017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6650'. [ 231.861963][T28016] loop7: detected capacity change from 0 to 8192 [ 231.869203][T16799] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.879334][T16799] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.888608][T16799] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.901694][T28016] loop7: p1 p2 p3 p4 [ 231.907588][T28016] loop7: p2 start 151000334 is beyond EOD, truncated [ 231.914484][T28016] loop7: p3 start 331777 is beyond EOD, truncated [ 231.921138][T28016] loop7: p4 size 263168 extends beyond EOD, truncated [ 232.242506][T28056] netlink: 'syz.5.6665': attribute type 9 has an invalid length. [ 232.250377][T28056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6665'. [ 232.282721][T16055] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.283936][T28056] netlink: 'syz.5.6665': attribute type 9 has an invalid length. [ 232.299355][T28056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6665'. [ 232.301595][T16055] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.350902][T16055] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.367841][T28060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6668'. [ 232.370773][T16055] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.396390][T28060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6668'. [ 232.437580][T28066] loop7: detected capacity change from 0 to 2048 [ 232.473026][T28066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.510576][T28066] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 232.544995][T28066] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 232.557559][T28066] EXT4-fs (loop7): This should not happen!! Data will be lost [ 232.557559][T28066] [ 232.567568][T28066] EXT4-fs (loop7): Total free blocks count 0 [ 232.574599][T28066] EXT4-fs (loop7): Free/Dirty block details [ 232.580781][T28066] EXT4-fs (loop7): free_blocks=2415919104 [ 232.586742][T28066] EXT4-fs (loop7): dirty_blocks=48 [ 232.591997][T28066] EXT4-fs (loop7): Block reservation details [ 232.598170][T28066] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 232.618125][T24964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.121736][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 234.121753][ T29] audit: type=1400 audit(242.809:7649): avc: denied { bind } for pid=28172 comm="syz.1.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.160791][T28174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.171304][T28174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.195234][ T29] audit: type=1326 audit(242.830:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.3.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf5b055ba7 code=0x7ffc0000 [ 234.218440][ T29] audit: type=1326 audit(242.830:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.3.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf5affade9 code=0x7ffc0000 [ 234.241431][ T29] audit: type=1326 audit(242.830:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.3.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf5b055ba7 code=0x7ffc0000 [ 234.264320][ T29] audit: type=1326 audit(242.830:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.3.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf5affade9 code=0x7ffc0000 [ 234.287640][ T29] audit: type=1326 audit(242.830:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.3.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 234.310574][ T29] audit: type=1400 audit(242.830:7655): avc: denied { setopt } for pid=28172 comm="syz.1.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.330590][ T29] audit: type=1326 audit(242.830:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.3.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 234.353497][ T29] audit: type=1326 audit(242.830:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.3.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 234.376752][ T29] audit: type=1326 audit(242.830:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.3.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5b05ebe9 code=0x7ffc0000 [ 234.411533][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6721'. [ 234.468518][T28174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.479150][T28174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.573752][T28174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.584206][T28174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.632510][T28174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.642995][T28174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.692014][T15978] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.693492][T28222] netlink: 'syz.3.6737': attribute type 21 has an invalid length. [ 234.700353][T15978] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.720201][T28222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6737'. [ 234.737713][T15978] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.745969][T15978] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.764509][T15978] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.772918][T15978] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.782742][T15978] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.791065][T15978] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.109028][T28261] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6754'. [ 235.118248][T28261] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6754'. [ 235.144890][T28264] openvswitch: netlink: Message has 6 unknown bytes. [ 235.403431][T28307] block device autoloading is deprecated and will be removed. [ 235.412103][T28307] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.431946][T28307] FAT-fs (loop11): unable to read boot sector [ 235.447902][T28314] hub 9-0:1.0: USB hub found [ 235.452777][T28314] hub 9-0:1.0: 8 ports detected [ 235.491658][T28320] loop7: detected capacity change from 0 to 128 [ 235.526222][T28329] veth1_to_bridge: entered promiscuous mode [ 235.532445][T28329] veth1_to_bridge: left promiscuous mode [ 235.659109][T28353] netlink: 'syz.9.6793': attribute type 21 has an invalid length. [ 235.887475][T28388] block device autoloading is deprecated and will be removed. [ 235.897655][T28388] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.907395][T28388] FAT-fs (loop3): unable to read boot sector [ 235.978441][T28394] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 235.986450][T15981] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 236.298366][T28420] block device autoloading is deprecated and will be removed. [ 236.306599][T28420] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.316011][T28420] FAT-fs (loop15): unable to read boot sector [ 236.702341][T28429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.750821][T28429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.793156][T28438] veth1_to_bridge: entered promiscuous mode [ 236.799525][T28438] veth1_to_bridge: left promiscuous mode [ 236.808402][T28429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.835056][T28445] hub 9-0:1.0: USB hub found [ 236.839879][T28445] hub 9-0:1.0: 8 ports detected [ 236.875079][T28429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.916962][T28457] hub 9-0:1.0: USB hub found [ 236.922759][T28457] hub 9-0:1.0: 8 ports detected [ 236.942788][T17774] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.965806][T17774] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.985067][T17774] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.006655][T17774] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.179248][T28499] smc: net device bond0 applied user defined pnetid SYZ0 [ 237.191119][T28498] __nla_validate_parse: 27 callbacks suppressed [ 237.191208][T28498] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6858'. [ 237.200601][T28499] smc: net device bond0 erased user defined pnetid SYZ0 [ 237.291013][T28515] hub 9-0:1.0: USB hub found [ 237.297228][T28515] hub 9-0:1.0: 8 ports detected [ 237.432929][T28537] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6876'. [ 237.464393][T28541] smc: net device bond0 applied user defined pnetid SYZ0 [ 237.472133][T28541] smc: net device bond0 erased user defined pnetid SYZ0 [ 237.498873][T28543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6878'. [ 237.506774][T28545] netlink: 'syz.9.6890': attribute type 19 has an invalid length. [ 237.515888][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6890'. [ 237.529476][T15981] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.529502][T28545] netlink: 'syz.9.6890': attribute type 19 has an invalid length. [ 237.546337][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6890'. [ 237.551280][T15981] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.578402][T15981] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.597943][T15981] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.612901][T28551] smc: net device bond0 applied user defined pnetid SYZ0 [ 237.627452][T28551] smc: net device bond0 erased user defined pnetid SYZ0 [ 237.791979][T28581] smc: net device bond0 applied user defined pnetid SYZ0 [ 237.799675][T28581] smc: net device bond0 erased user defined pnetid SYZ0 [ 238.255450][T28611] smc: net device bond0 applied user defined pnetid SYZ0 [ 238.274737][T28611] smc: net device bond0 erased user defined pnetid SYZ0 [ 238.346036][T28619] syzkaller0: entered promiscuous mode [ 238.351735][T28619] syzkaller0: entered allmulticast mode [ 238.378296][T28623] loop3: detected capacity change from 0 to 512 [ 238.385848][T28623] journal_path: Non-blockdev passed as './bus' [ 238.392237][T28623] EXT4-fs: error: could not find journal device path [ 238.477362][T28633] loop7: detected capacity change from 0 to 764 [ 238.569171][T28646] smc: net device bond0 applied user defined pnetid SYZ0 [ 238.580621][T28646] smc: net device bond0 erased user defined pnetid SYZ0 [ 238.593634][T28650] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.603522][T28650] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.656354][T28650] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.666191][T28650] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.683718][T28660] netlink: 'syz.3.6936': attribute type 19 has an invalid length. [ 238.691654][T28660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6936'. [ 238.716620][T28650] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.726608][T28650] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.761224][T28668] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6941'. [ 238.770454][T28660] netlink: 'syz.3.6936': attribute type 19 has an invalid length. [ 238.778497][T28660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6936'. [ 238.809529][T28650] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.819479][T28650] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.882645][T28677] loop3: detected capacity change from 0 to 512 [ 238.911062][T19766] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.919526][T19766] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.954904][T19766] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.955684][T28677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.963369][T19766] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.963694][T19766] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.993392][T19766] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.001953][T19766] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.010306][T19766] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.049002][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 239.049019][ T29] audit: type=1400 audit(247.964:7948): avc: denied { create } for pid=28676 comm="syz.3.6946" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 239.058387][T28692] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 239.089790][T28677] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #12: comm syz.3.6946: corrupted xattr block 6: invalid header [ 239.121972][T28692] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 239.131507][T28677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 239.141139][ T29] audit: type=1400 audit(248.016:7949): avc: denied { remount } for pid=28676 comm="syz.3.6946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 239.144729][T28677] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #12: comm syz.3.6946: corrupted xattr block 6: invalid header [ 239.160496][ T29] audit: type=1326 audit(248.016:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28698 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3ea7ebe9 code=0x7ffc0000 [ 239.160534][ T29] audit: type=1400 audit(248.016:7952): avc: denied { add_name } for pid=28676 comm="syz.3.6946" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 239.216517][ T29] audit: type=1326 audit(248.016:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28698 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3ea7ebe9 code=0x7ffc0000 [ 239.239447][ T29] audit: type=1326 audit(248.016:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28698 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3ea7ebe9 code=0x7ffc0000 [ 239.263042][ T29] audit: type=1326 audit(248.016:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28698 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3ea7ebe9 code=0x7ffc0000 [ 239.264670][T28677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 239.286083][ T29] audit: type=1326 audit(248.016:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28698 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3ea7ebe9 code=0x7ffc0000 [ 239.286122][ T29] audit: type=1326 audit(248.016:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28698 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3ea7ebe9 code=0x7ffc0000 [ 239.296482][T28677] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #12: comm syz.3.6946: corrupted xattr block 6: invalid header [ 239.318090][ T29] audit: type=1326 audit(248.016:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28698 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3ea7ebe9 code=0x7ffc0000 [ 239.342973][T28677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 239.394416][T28708] netlink: 'syz.1.6959': attribute type 21 has an invalid length. [ 239.411814][T28710] smc: net device bond0 applied user defined pnetid SYZ0 [ 239.414330][T28677] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #12: comm syz.3.6946: corrupted xattr block 6: invalid header [ 239.420310][T28710] smc: net device bond0 erased user defined pnetid SYZ0 [ 239.446864][ T3400] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 239.454667][ T3400] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 239.462380][ T3400] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 239.485355][ T3400] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.496622][T28677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 239.565569][ T7597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.921612][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.384327][T28802] loop3: detected capacity change from 0 to 2048 [ 240.395470][T28802] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 240.444480][T28816] smc: net device bond0 applied user defined pnetid SYZ0 [ 240.456370][T28816] smc: net device bond0 erased user defined pnetid SYZ0 [ 240.520951][T28833] loop3: detected capacity change from 0 to 512 [ 240.527664][T28833] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.536763][T28833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.538763][T28831] loop7: detected capacity change from 0 to 512 [ 240.555758][T28833] EXT4-fs (loop3): 1 truncate cleaned up [ 240.570542][T28833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.593980][T28831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.614634][T28831] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #12: comm syz.7.7017: corrupted xattr block 6: invalid header [ 240.636060][ T7597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.645678][T28831] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 240.655198][T28831] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #12: comm syz.7.7017: corrupted xattr block 6: invalid header [ 240.670441][T28831] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 240.680028][T28831] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #12: comm syz.7.7017: corrupted xattr block 6: invalid header [ 240.699661][T28831] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 240.715381][T28831] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #12: comm syz.7.7017: corrupted xattr block 6: invalid header [ 240.734603][T28851] smc: net device bond0 applied user defined pnetid SYZ0 [ 240.760500][T28831] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 240.773681][T28851] smc: net device bond0 erased user defined pnetid SYZ0 [ 240.806630][T24964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.854541][T28864] loop7: detected capacity change from 0 to 128 [ 240.919962][T28864] syz.7.7030: attempt to access beyond end of device [ 240.919962][T28864] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 240.995153][T28884] netlink: 'syz.3.7039': attribute type 6 has an invalid length. [ 241.028734][T28887] random: crng reseeded on system resumption [ 241.036672][T28888] smc: net device bond0 applied user defined pnetid SYZ0 [ 241.049377][T28888] smc: net device bond0 erased user defined pnetid SYZ0 [ 241.148177][T28903] loop7: detected capacity change from 0 to 512 [ 241.158833][T28903] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 241.194787][T28903] EXT4-fs (loop7): 1 truncate cleaned up [ 241.202366][T28903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.239159][T28903] pimreg: entered allmulticast mode [ 241.243789][T28912] loop3: detected capacity change from 0 to 1024 [ 241.252868][T28912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.257575][T28903] pimreg: left allmulticast mode [ 241.284970][T28912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.322334][T24964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.417410][ T7597] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 241.476691][T28939] loop7: detected capacity change from 0 to 512 [ 241.509393][T28939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.535872][ T7597] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 241.596577][T28942] sg_write: data in/out 56/14 bytes for SCSI command 0x2-- guessing data in; [ 241.596577][T28942] program syz.1.7066 not setting count and/or reply_len properly [ 241.628861][T24964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.952380][T28959] random: crng reseeded on system resumption [ 241.976922][T28959] vhci_hcd: invalid port number 23 [ 242.056196][T28921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.175433][T28977] __nla_validate_parse: 12 callbacks suppressed [ 242.175471][T28977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7086'. [ 242.244373][T28974] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 242.255865][T28974] SELinux: failed to load policy [ 242.303076][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7088'. [ 242.312282][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7088'. [ 242.434104][T29006] loop7: detected capacity change from 0 to 2048 [ 242.494649][T29006] loop7: p1 < > p4 [ 242.509588][T29006] loop7: p4 size 8388608 extends beyond EOD, truncated [ 242.555472][T28976] chnl_net:caif_netlink_parms(): no params data found [ 242.649321][T28976] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.656552][T28976] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.663991][T28976] bridge_slave_0: entered allmulticast mode [ 242.670998][T28976] bridge_slave_0: entered promiscuous mode [ 242.677799][T28976] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.684947][T28976] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.692597][T28976] bridge_slave_1: entered allmulticast mode [ 242.709004][T28976] bridge_slave_1: entered promiscuous mode [ 242.754970][T28976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.770765][T28976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.811792][T28976] team0: Port device team_slave_0 added [ 242.821624][T28976] team0: Port device team_slave_1 added [ 242.846284][T28976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.853439][T28976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.879694][T28976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.891487][T28976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.898564][T28976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.924692][T28976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.972875][T28976] hsr_slave_0: entered promiscuous mode [ 242.980938][T28976] hsr_slave_1: entered promiscuous mode [ 242.986902][T29065] random: crng reseeded on system resumption [ 242.986977][T28976] debugfs: 'hsr0' already exists in 'hsr' [ 242.999028][T28976] Cannot create hsr debugfs directory [ 243.002314][T29065] vhci_hcd: invalid port number 23 [ 243.009963][T29067] loop7: detected capacity change from 0 to 128 [ 243.019162][T29067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 243.031472][T29067] System zones: 1-3, 19-19, 35-36 [ 243.039207][T29067] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.066416][T24964] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.325139][T15978] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.334991][T15978] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.386140][T28976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.399374][T15978] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.409256][T15978] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.431543][T28976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.456638][T28976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.470694][T28976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.487105][T29086] pimreg: entered allmulticast mode [ 243.505609][T15978] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.515462][T15978] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.529629][T29086] pimreg: left allmulticast mode [ 243.562255][T15978] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.572179][T15978] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.615752][T28976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.655685][T28976] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.687451][T19766] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.694581][T19766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.705765][T19766] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.712982][T19766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.735376][T28976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.745842][T28976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.807507][T15978] bridge_slave_1: left allmulticast mode [ 243.813463][T15978] bridge_slave_1: left promiscuous mode [ 243.819403][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.835662][T15978] bridge_slave_0: left allmulticast mode [ 243.841626][T15978] bridge_slave_0: left promiscuous mode [ 243.847458][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.880386][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 243.880405][ T29] audit: type=1400 audit(253.024:8197): avc: denied { connect } for pid=29120 comm="syz.5.7138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.973721][T15978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.986444][T15978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.996415][T15978] bond0 (unregistering): Released all slaves [ 244.011394][T15978] bond1 (unregistering): Released all slaves [ 244.027883][T15978] bond2 (unregistering): Released all slaves [ 244.047029][T15978] bond3 (unregistering): Released all slaves [ 244.072407][T15978] bond4 (unregistering): Released all slaves [ 244.155379][T28976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.198951][T29080] chnl_net:caif_netlink_parms(): no params data found [ 244.259422][T15978] hsr_slave_0: left promiscuous mode [ 244.275494][T15978] hsr_slave_1: left promiscuous mode [ 244.287839][T15978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.288524][ T29] audit: type=1400 audit(253.475:8198): avc: denied { read write } for pid=29141 comm="syz.5.7145" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.295390][T15978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.319087][ T29] audit: type=1400 audit(253.475:8199): avc: denied { open } for pid=29141 comm="syz.5.7145" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.381230][T15978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.388681][T15978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.441265][T15978] veth1_macvtap: left promiscuous mode [ 244.455729][T15978] veth0_macvtap: left promiscuous mode [ 244.462127][T15978] veth1_vlan: left promiscuous mode [ 244.478831][T15978] veth0_vlan: left promiscuous mode [ 244.494216][ T29] audit: type=1400 audit(253.685:8200): avc: denied { ioctl } for pid=29152 comm="syz.9.7151" path="socket:[76201]" dev="sockfs" ino=76201 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.723918][T29080] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.731366][T29080] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.739739][T29080] bridge_slave_0: entered allmulticast mode [ 244.746752][T29080] bridge_slave_0: entered promiscuous mode [ 244.753799][T29080] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.761001][T29080] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.766361][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7157'. [ 244.768259][T29080] bridge_slave_1: entered allmulticast mode [ 244.777189][T29178] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7157'. [ 244.783881][T29080] bridge_slave_1: entered promiscuous mode [ 244.829131][T29080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.842221][T28976] veth0_vlan: entered promiscuous mode [ 244.849974][T29080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.860841][T28976] veth1_vlan: entered promiscuous mode [ 244.887398][T28976] veth0_macvtap: entered promiscuous mode [ 244.912276][T29080] team0: Port device team_slave_0 added [ 244.918676][T28976] veth1_macvtap: entered promiscuous mode [ 244.939548][T28976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.950814][T29080] team0: Port device team_slave_1 added [ 244.985090][T29080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.992113][T29080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.018216][T29080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.049412][T28976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.073398][T19766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.082614][T29080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.089663][T29080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.115813][T29080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.156760][T19766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.170939][T19766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.199628][T19766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.211319][T29080] hsr_slave_0: entered promiscuous mode [ 245.219842][T29080] hsr_slave_1: entered promiscuous mode [ 245.231150][T29080] debugfs: 'hsr0' already exists in 'hsr' [ 245.236959][T29080] Cannot create hsr debugfs directory [ 245.251397][ T29] audit: type=1400 audit(254.483:8201): avc: denied { mounton } for pid=28976 comm="syz-executor" path="/root/syzkaller.jM3zMm/syz-tmp" dev="sda1" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 245.289484][ T29] audit: type=1400 audit(254.514:8202): avc: denied { mounton } for pid=28976 comm="syz-executor" path="/root/syzkaller.jM3zMm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 245.316015][ T29] audit: type=1400 audit(254.525:8203): avc: denied { mounton } for pid=28976 comm="syz-executor" path="/root/syzkaller.jM3zMm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=76348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 245.386031][ T29] audit: type=1400 audit(254.588:8204): avc: denied { mounton } for pid=28976 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 245.408470][ T29] audit: type=1400 audit(254.588:8205): avc: denied { mount } for pid=28976 comm="syz-executor" name="/" dev="gadgetfs" ino=3891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 245.458195][ T29] audit: type=1400 audit(254.693:8206): avc: denied { create } for pid=29197 comm="syz.0.7165" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 245.494896][T29198] loop0: detected capacity change from 0 to 1024 [ 245.501872][T29198] EXT4-fs: Ignoring removed orlov option [ 245.507695][T29198] ext4: Unknown parameter 'nouser_xattr' [ 245.522861][T15978] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.610243][T15978] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.657746][T15978] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.753787][T15978] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.910148][T15978] bridge_slave_1: left allmulticast mode [ 245.915984][T15978] bridge_slave_1: left promiscuous mode [ 245.921724][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.931907][T15978] bridge_slave_0: left allmulticast mode [ 245.937841][T15978] bridge_slave_0: left promiscuous mode [ 245.943733][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.013580][T15978] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.029316][T15978] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.045017][T15978] .` (unregistering): Released all slaves [ 246.060278][T29202] chnl_net:caif_netlink_parms(): no params data found [ 246.085350][T29080] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 246.100697][T29080] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 246.150791][T29080] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 246.173058][T29080] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 246.192537][T15978] hsr_slave_0: left promiscuous mode [ 246.201886][T15978] hsr_slave_1: left promiscuous mode [ 246.209719][T15978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.219005][T15978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.310518][T29202] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.317861][T29202] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.325331][T29202] bridge_slave_0: entered allmulticast mode [ 246.331871][T29202] bridge_slave_0: entered promiscuous mode [ 246.338792][T29202] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.345915][T29202] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.353206][T29202] bridge_slave_1: entered allmulticast mode [ 246.360863][T29202] bridge_slave_1: entered promiscuous mode [ 246.387353][T29202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.411141][T29202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.463398][T29202] team0: Port device team_slave_0 added [ 246.475266][T29202] team0: Port device team_slave_1 added [ 246.506145][T29202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.513142][T29202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.539625][T29202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.571864][T29080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.579356][T29202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.586510][T29202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.612552][T29202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.647354][T29080] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.660193][T16923] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.667393][T16923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.712802][T17774] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.719933][T17774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.734038][T29202] hsr_slave_0: entered promiscuous mode [ 246.740338][T29202] hsr_slave_1: entered promiscuous mode [ 246.746758][T29202] debugfs: 'hsr0' already exists in 'hsr' [ 246.750780][T29313] hub 8-0:1.0: USB hub found [ 246.752610][T29202] Cannot create hsr debugfs directory [ 246.763975][T29313] hub 8-0:1.0: 8 ports detected [ 246.849741][T29080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.960434][T29080] veth0_vlan: entered promiscuous mode [ 246.968449][T29080] veth1_vlan: entered promiscuous mode [ 246.984429][T29080] veth0_macvtap: entered promiscuous mode [ 246.993786][T29080] veth1_macvtap: entered promiscuous mode [ 247.004947][T29080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.016772][T29080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.027391][T17774] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.040322][T17774] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.049418][T17774] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.058520][T17774] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.092477][T29202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.103664][T29202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.118180][T29202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.130858][T29202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.183171][T29202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.196423][T29202] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.206551][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.213882][T15981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.232333][T16923] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.239679][T16923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.327532][T29355] loop0: detected capacity change from 0 to 512 [ 247.370113][T29355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.397624][T29202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.453786][T28976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.673559][T29202] veth0_vlan: entered promiscuous mode [ 247.689712][T29202] veth1_vlan: entered promiscuous mode [ 247.726202][T29392] SELinux: failed to load policy [ 247.754763][T29202] veth0_macvtap: entered promiscuous mode [ 247.763550][T29202] veth1_macvtap: entered promiscuous mode [ 247.780594][T29202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.797629][T29202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.817757][T29409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7229'. [ 247.835948][T19725] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.878879][T19725] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.901558][T19725] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.913899][T19725] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.101165][T29453] netlink: 332 bytes leftover after parsing attributes in process `syz.5.7249'. [ 248.147944][T29455] SELinux: failed to load policy [ 248.304015][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.608143][T29486] netlink: 'syz.9.7263': attribute type 1 has an invalid length. [ 248.706263][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 248.706282][ T29] audit: type=1326 audit(258.115:8337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.751605][ T29] audit: type=1326 audit(258.115:8338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.774703][ T29] audit: type=1326 audit(258.115:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.797693][ T29] audit: type=1326 audit(258.115:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.820829][ T29] audit: type=1326 audit(258.115:8341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.844147][ T29] audit: type=1326 audit(258.115:8342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.867127][ T29] audit: type=1326 audit(258.115:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.890197][ T29] audit: type=1326 audit(258.115:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.913825][ T29] audit: type=1326 audit(258.115:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.937190][ T29] audit: type=1326 audit(258.115:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29505 comm="syz.0.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe053c5ebe9 code=0x7ffc0000 [ 248.964960][T29513] sd 0:0:1:0: device reset [ 249.021426][T29521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7280'. [ 249.093588][T29532] macvtap0: refused to change device tx_queue_len [ 249.188557][T29546] netlink: 'syz.5.7294': attribute type 1 has an invalid length. [ 249.196371][T29546] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7294'. [ 249.292429][T29565] binfmt_misc: register: failed to install interpreter file ./file0 [ 249.553099][T29608] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 249.553099][T29608] Q&|xXX p4 [ 250.093106][T29678] netlink: 268 bytes leftover after parsing attributes in process `syz.5.7346'. [ 250.095695][T29670] loop7: p4 size 8388608 extends beyond EOD, truncated [ 250.167163][T29688] netlink: 'syz.9.7351': attribute type 4 has an invalid length. [ 250.168842][T29690] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 250.389831][T29721] loop7: detected capacity change from 0 to 512 [ 250.440102][T29721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.462413][T29721] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 250.503638][T29080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.842923][T29760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7382'. [ 250.865126][T29760] bridge_slave_1: left allmulticast mode [ 250.870862][T29760] bridge_slave_1: left promiscuous mode [ 250.876680][T29760] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.889458][T29760] bridge_slave_0: left allmulticast mode [ 250.895514][T29760] bridge_slave_0: left promiscuous mode [ 250.901198][T29760] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.956108][T29771] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7388'. [ 251.070691][T29799] 9pnet_fd: Insufficient options for proto=fd [ 251.089805][T29801] serio: Serial port ttyS3 [ 251.795556][T29879] netlink: 'syz.9.7436': attribute type 1 has an invalid length. [ 251.834100][T29883] bridge0: port 3(batadv1) entered blocking state [ 251.840647][T29883] bridge0: port 3(batadv1) entered disabled state [ 251.900959][T29883] batadv1: entered allmulticast mode [ 251.928773][T29883] batadv1: entered promiscuous mode [ 252.075951][T29912] loop7: detected capacity change from 0 to 1024 [ 252.091121][T29912] EXT4-fs: inline encryption not supported [ 252.103270][T29912] EXT4-fs: Ignoring removed bh option [ 252.143520][T29912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.181238][T29912] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 252.210049][T29912] EXT4-fs (loop7): Remounting filesystem read-only [ 252.253291][T29080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.318114][T15981] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 252.327473][T15981] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 252.348359][T29952] random: crng reseeded on system resumption [ 252.414476][ T9854] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 252.422493][ T9854] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 252.434986][ T9854] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 252.450192][ T9854] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 252.747845][T30006] __nla_validate_parse: 4 callbacks suppressed [ 252.747864][T30006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7494'. [ 252.811394][T30015] netdevsim netdevsim7: Direct firmware load for .. failed with error -2 [ 252.855840][T30023] pim6reg: entered allmulticast mode [ 252.882781][T30023] pim6reg: left allmulticast mode [ 252.923217][T30029] loop0: detected capacity change from 0 to 512 [ 252.939941][T30029] EXT4-fs: Ignoring removed oldalloc option [ 252.974618][T30029] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.7506: Parent and EA inode have the same ino 15 [ 252.992129][T30029] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.7506: Parent and EA inode have the same ino 15 [ 253.009973][T30029] EXT4-fs (loop0): 1 orphan inode deleted [ 253.031976][T30029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.080568][T28976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.112648][T30056] netlink: 'syz.1.7519': attribute type 1 has an invalid length. [ 253.120736][T30056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7519'. [ 253.142618][T30035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.156016][T30064] sctp: [Deprecated]: syz.7.7522 (pid 30064) Use of int in max_burst socket option. [ 253.156016][T30064] Use struct sctp_assoc_value instead [ 253.170779][T30035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.192487][T30066] loop7: detected capacity change from 0 to 1024 [ 253.231331][T30071] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7526'. [ 253.242696][T30071] 0{X: renamed from gretap0 (while UP) [ 253.253669][T30071] 0{X: entered allmulticast mode [ 253.262936][T30071] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 253.402379][T30092] netlink: 'syz.7.7534': attribute type 3 has an invalid length. [ 253.410529][T30092] netlink: 'syz.7.7534': attribute type 3 has an invalid length. [ 253.487141][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 253.487163][ T29] audit: type=1400 audit(263.133:8606): avc: denied { watch watch_reads } for pid=30105 comm="syz.1.7541" path="/247" dev="tmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 253.518168][ T29] audit: type=1400 audit(263.133:8607): avc: denied { setopt } for pid=30093 comm="syz.0.7535" lport=57139 faddr=::ffff:100.1.1.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.551391][ T29] audit: type=1400 audit(263.196:8608): avc: denied { read write } for pid=30110 comm="syz.1.7552" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.574271][ T29] audit: type=1400 audit(263.196:8609): avc: denied { open } for pid=30110 comm="syz.1.7552" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.597571][ T29] audit: type=1400 audit(263.196:8610): avc: denied { ioctl } for pid=30110 comm="syz.1.7552" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.796656][ T29] audit: type=1400 audit(263.459:8611): avc: denied { create } for pid=30120 comm="syz.1.7546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.818261][ T29] audit: type=1400 audit(263.480:8612): avc: denied { ioctl } for pid=30120 comm="syz.1.7546" path="socket:[80959]" dev="sockfs" ino=80959 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.845220][ T29] audit: type=1400 audit(263.511:8613): avc: denied { bind } for pid=30120 comm="syz.1.7546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.881504][ T29] audit: type=1400 audit(263.543:8614): avc: denied { execute } for pid=30122 comm="syz.9.7547" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=80967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 253.959290][T30132] sctp: [Deprecated]: syz.1.7553 (pid 30132) Use of int in max_burst socket option. [ 253.959290][T30132] Use struct sctp_assoc_value instead [ 254.085391][ T29] audit: type=1400 audit(263.753:8615): avc: denied { append } for pid=30150 comm="syz.7.7563" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 254.190431][T30159] sctp: [Deprecated]: syz.5.7567 (pid 30159) Use of int in max_burst socket option. [ 254.190431][T30159] Use struct sctp_assoc_value instead [ 254.210542][T30160] pim6reg: entered allmulticast mode [ 254.218605][T30160] pim6reg: left allmulticast mode [ 254.304898][T30173] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7573'. [ 254.318893][T30171] loop7: detected capacity change from 0 to 512 [ 254.326875][T30171] EXT4-fs: Ignoring removed oldalloc option [ 254.341362][T30171] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7572: Parent and EA inode have the same ino 15 [ 254.368013][T30177] 9pnet_fd: Insufficient options for proto=fd [ 254.391649][T30171] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7572: Parent and EA inode have the same ino 15 [ 254.423475][T30171] EXT4-fs (loop7): 1 orphan inode deleted [ 254.432126][T30171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.496301][T30189] bond0: entered promiscuous mode [ 254.501477][T30189] bond_slave_0: entered promiscuous mode [ 254.507456][T30189] bond_slave_1: entered promiscuous mode [ 254.520441][T29080] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.535682][T30191] serio: Serial port ptm1 [ 254.621383][T30202] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7586'. [ 254.686043][T30210] 9pnet_fd: Insufficient options for proto=fd [ 255.006431][T30253] netlink: 'syz.7.7608': attribute type 1 has an invalid length. [ 255.236075][T16923] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 255.364658][T30304] macvtap0: refused to change device tx_queue_len [ 255.393421][T30306] sd 0:0:1:0: device reset [ 255.625826][T30323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7638'. [ 255.634881][T30323] netlink: 'syz.5.7638': attribute type 18 has an invalid length. [ 255.645499][T30323] vxlan0: entered promiscuous mode [ 255.652438][T19725] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.661400][T19766] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.670200][T19766] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.679059][T19766] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.235768][T30357] loop0: detected capacity change from 0 to 512 [ 256.270725][T30357] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 256.297659][T30357] EXT4-fs (loop0): 1 truncate cleaned up [ 256.303780][T30357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.382116][T28976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.412721][T30379] 9pnet_fd: Insufficient options for proto=fd [ 256.463144][T30388] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 256.463144][T30388] Q&|xXX p4 [ 257.375467][T30509] loop0: p4 size 8388608 extends beyond EOD, truncated [ 257.584994][T30541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7726'. [ 257.605616][T30541] bridge_slave_1: left allmulticast mode [ 257.611358][T30541] bridge_slave_1: left promiscuous mode [ 257.617186][T30541] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.654431][T30541] bridge_slave_0: left allmulticast mode [ 257.660253][T30541] bridge_slave_0: left promiscuous mode [ 257.665952][T30549] loop0: detected capacity change from 0 to 512 [ 257.666044][T30541] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.672699][T30549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.686249][T30549] EXT4-fs: Ignoring removed i_version option [ 257.699285][T30549] EXT4-fs (loop0): 1 orphan inode deleted [ 257.706089][T30549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.730452][T30549] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.7728: Directory hole found for htree leaf block 0 [ 257.762127][T28976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.895882][T30574] serio: Serial port ttyS3 [ 258.102307][T30584] wireguard0: entered promiscuous mode [ 258.107929][T30584] wireguard0: entered allmulticast mode [ 258.139015][T30587] loop0: detected capacity change from 0 to 8192 [ 258.259376][T19725] ================================================================== [ 258.267506][T19725] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 258.275779][T19725] [ 258.278119][T19725] write to 0xffff88813c168422 of 2 bytes by task 30588 on cpu 1: [ 258.285865][T19725] fat16_ent_put+0x28/0x60 [ 258.290338][T19725] fat_alloc_clusters+0x4ce/0xa80 [ 258.295471][T19725] fat_get_block+0x258/0x5e0 [ 258.300156][T19725] __block_write_begin_int+0x3fd/0xf90 [ 258.305643][T19725] cont_write_begin+0x5fc/0x970 [ 258.310510][T19725] fat_write_begin+0x4f/0xe0 [ 258.315124][T19725] generic_perform_write+0x184/0x490 [ 258.320534][T19725] __generic_file_write_iter+0x9e/0x120 [ 258.326096][T19725] generic_file_write_iter+0x8d/0x2f0 [ 258.331743][T19725] do_iter_readv_writev+0x499/0x540 [ 258.336964][T19725] vfs_writev+0x2df/0x8b0 [ 258.341327][T19725] __se_sys_pwritev2+0xfc/0x1c0 [ 258.346194][T19725] __x64_sys_pwritev2+0x67/0x80 [ 258.351086][T19725] x64_sys_call+0x2c55/0x2ff0 [ 258.355772][T19725] do_syscall_64+0xd2/0x200 [ 258.360302][T19725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.366207][T19725] [ 258.368606][T19725] read to 0xffff88813c168400 of 512 bytes by task 19725 on cpu 0: [ 258.376409][T19725] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 258.382326][T19725] generic_perform_write+0x2c2/0x490 [ 258.387656][T19725] shmem_file_write_iter+0xc5/0xf0 [ 258.392780][T19725] lo_rw_aio+0x69d/0x760 [ 258.397073][T19725] loop_process_work+0x52d/0xa60 [ 258.402029][T19725] loop_workfn+0x31/0x40 [ 258.406287][T19725] process_scheduled_works+0x4ce/0x9d0 [ 258.411767][T19725] worker_thread+0x582/0x770 [ 258.416380][T19725] kthread+0x486/0x510 [ 258.420544][T19725] ret_from_fork+0xda/0x150 [ 258.425074][T19725] ret_from_fork_asm+0x1a/0x30 [ 258.429852][T19725] [ 258.432175][T19725] Reported by Kernel Concurrency Sanitizer on: [ 258.438340][T19725] CPU: 0 UID: 0 PID: 19725 Comm: kworker/u8:260 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 258.450066][T19725] Tainted: [W]=WARN [ 258.453870][T19725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.463931][T19725] Workqueue: loop0 loop_workfn [ 258.468718][T19725] ================================================================== [ 258.508194][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 258.508213][ T29] audit: type=1400 audit(268.403:8858): avc: denied { write } for pid=30591 comm="syz.5.7747" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.946914][ T29] audit: type=1400 audit(268.865:8859): avc: denied { unmount } for pid=28976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 265.374403][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!