last executing test programs: 4m49.532719086s ago: executing program 32 (id=505): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001280)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "7a1012", 0x10, 0x21, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x43}, {[], {{0x4e22, 0x4e23, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x4, "3a968c", 0x7, "63d163"}}}}}}}, 0x0) 4m44.152219695s ago: executing program 33 (id=723): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x41}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x800) 4m37.959630159s ago: executing program 34 (id=988): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0x1, 0x0) 4m26.021075818s ago: executing program 35 (id=1462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m9.564373779s ago: executing program 36 (id=1983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r0, 0x0, 0x2144}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 4m7.608569652s ago: executing program 37 (id=2029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r2}, 0x18) socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) 3m42.354639458s ago: executing program 38 (id=2341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 3m4.076492049s ago: executing program 9 (id=3794): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028005000900040000001400030000000000000000000000ffffac"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3m4.029757381s ago: executing program 9 (id=3798): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 3m4.001161572s ago: executing program 9 (id=3800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3m3.956256594s ago: executing program 9 (id=3804): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m3.932881895s ago: executing program 9 (id=3806): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='.\x00', 0x4000423) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000000dc0)=""/4106, 0x100a) 3m3.674644176s ago: executing program 9 (id=3819): ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) 3m3.674419726s ago: executing program 39 (id=3819): ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) 3m1.554685086s ago: executing program 3 (id=3843): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x37}, 0x90) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x3000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r2, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 3m1.518958137s ago: executing program 3 (id=3836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 3m1.44718229s ago: executing program 3 (id=3838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 3m1.267175848s ago: executing program 3 (id=3839): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m1.266482858s ago: executing program 3 (id=3840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 3m1.071402006s ago: executing program 3 (id=3844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000010000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m1.071202247s ago: executing program 40 (id=3844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000010000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1m58.487546163s ago: executing program 1 (id=6472): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000280)='rxrpc_call\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m58.429151275s ago: executing program 1 (id=6475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m58.32506282s ago: executing program 1 (id=6479): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="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", 0x5c5}], 0x1, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x44000840) r1 = dup(r0) recvmmsg$unix(r1, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000062, 0x0) 1m58.3123401s ago: executing program 1 (id=6482): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000080)={0x0, 0x356e, 0x101, 0x1, 0x37a}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x20, 0xe, 0x0, 0x0) 1m58.030393122s ago: executing program 1 (id=6499): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r2, r2, 0x0, 0x2) 1m57.775953663s ago: executing program 1 (id=6516): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 1m57.756269664s ago: executing program 41 (id=6516): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 56.719490544s ago: executing program 5 (id=9288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 56.700601335s ago: executing program 5 (id=9289): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x8000000009}}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nombcache}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}]}, 0x1, 0x576, &(0x7f0000000e80)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xff2e) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f00000003c0)) 55.88708654s ago: executing program 5 (id=9348): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e03, @empty}}]}, 0x110) 55.855911251s ago: executing program 5 (id=9351): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x2, 0x4, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 55.796124264s ago: executing program 5 (id=9355): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 55.791741954s ago: executing program 5 (id=9356): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x404c) 41.461552574s ago: executing program 42 (id=9356): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x404c) 28.928630748s ago: executing program 0 (id=10316): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffa) 28.911774879s ago: executing program 0 (id=10320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_gettime(0x0, &(0x7f0000000000)) 28.865272691s ago: executing program 0 (id=10322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) 28.835157552s ago: executing program 0 (id=10324): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) 28.702016488s ago: executing program 0 (id=10329): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2000}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 28.584447063s ago: executing program 0 (id=10333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) setns(0xffffffffffffffff, 0x80) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 28.584319723s ago: executing program 43 (id=10333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) setns(0xffffffffffffffff, 0x80) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 1.400708511s ago: executing program 2 (id=11436): r0 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 1.372184842s ago: executing program 2 (id=11437): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r2) 1.309449525s ago: executing program 2 (id=11439): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) close_range(r0, r2, 0x0) 1.1974607s ago: executing program 2 (id=11444): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 596.578945ms ago: executing program 4 (id=11472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000500)=ANY=[@ANYBLOB="060002"], 0x8) 540.028927ms ago: executing program 4 (id=11474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 487.29192ms ago: executing program 4 (id=11476): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x801) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 449.225031ms ago: executing program 8 (id=11487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 425.869382ms ago: executing program 4 (id=11480): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setfsuid(0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 411.493313ms ago: executing program 6 (id=11481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 373.754394ms ago: executing program 2 (id=11482): unshare(0x2a020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) unshare(0x22020600) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 372.796634ms ago: executing program 4 (id=11484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 349.917055ms ago: executing program 6 (id=11485): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) read(r1, &(0x7f0000000040)=""/150, 0x96) 342.390286ms ago: executing program 8 (id=11486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000001c659500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x6f52, &(0x7f0000000240)={0x0, 0xbd60, 0x400, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x6000, 0x1}) io_uring_enter(r1, 0x1c39, 0x106a, 0x22, 0x0, 0x0) 324.575737ms ago: executing program 2 (id=11488): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r1, r0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 305.564247ms ago: executing program 6 (id=11490): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x9, 0x1000000000, 0x9}, {}, {0x8000000}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) 302.329998ms ago: executing program 4 (id=11491): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 270.046879ms ago: executing program 8 (id=11492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 205.385352ms ago: executing program 8 (id=11493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 204.233712ms ago: executing program 7 (id=11503): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) readahead(r1, 0x2, 0x7) 159.993224ms ago: executing program 7 (id=11494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 159.390574ms ago: executing program 6 (id=11495): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x801) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 154.861444ms ago: executing program 7 (id=11496): pipe(0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 132.417655ms ago: executing program 7 (id=11497): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 106.952616ms ago: executing program 8 (id=11498): mkdir(&(0x7f0000001a80)='./file0\x00', 0xd2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 105.659906ms ago: executing program 6 (id=11499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 86.613276ms ago: executing program 7 (id=11500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 44.446979ms ago: executing program 8 (id=11501): r0 = socket$inet6(0xa, 0x3, 0x3c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x3}, 0x18) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="00020201"], 0x18) 31.916469ms ago: executing program 7 (id=11502): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 0s ago: executing program 6 (id=11504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) kernel console output (not intermixed with test programs): compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 255.346882][T23364] loop6: detected capacity change from 0 to 512 [ 255.355528][T23364] EXT4-fs (loop6): orphan cleanup on readonly fs [ 255.369764][T23364] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.8296: bad orphan inode 13 [ 255.380633][T23364] ext4_test_bit(bit=12, block=18) = 1 [ 255.386069][T23364] is_bad_inode(inode)=0 [ 255.390251][T23364] NEXT_ORPHAN(inode)=2130706432 [ 255.395148][T23364] max_ino=32 [ 255.398349][T23364] i_nlink=1 [ 255.402602][T23364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.417359][T23364] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.8296: deleted inode referenced: 12 [ 255.429319][T23364] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 255.461589][T23364] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 255.480740][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.629239][T23385] netem: change failed [ 256.579166][T23519] loop6: detected capacity change from 0 to 512 [ 256.618201][T23527] __nla_validate_parse: 10 callbacks suppressed [ 256.618220][T23527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8366'. [ 256.634221][T23527] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8366'. [ 256.644052][T23527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8366'. [ 256.655382][T23527] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8366'. [ 256.664490][T23527] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8366'. [ 256.688870][T23529] loop6: detected capacity change from 0 to 512 [ 256.699781][T23529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.717870][T23529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 256.767219][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 257.005629][T23577] SELinux: unknown common  [ 257.010855][T23577] SELinux: failed to load policy [ 257.072908][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8396'. [ 257.152371][T23608] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8404'. [ 257.230175][T23620] rdma_op ffff888114cecd80 conn xmit_rdma 0000000000000000 [ 257.374112][T23643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8420'. [ 257.850810][T23721] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 258.295056][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8474'. [ 258.572790][T23795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8489'. [ 258.602168][T23797] xt_l2tp: wrong L2TP version: 1 [ 258.632560][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 258.632572][ T29] audit: type=1326 audit(262.747:9933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.8491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 258.679915][ T29] audit: type=1326 audit(262.779:9934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.8491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 258.702943][ T29] audit: type=1326 audit(262.779:9935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.8491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 258.725860][ T29] audit: type=1400 audit(262.779:9936): avc: denied { kexec_image_load } for pid=23798 comm="syz.0.8491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 258.745288][ T29] audit: type=1326 audit(262.789:9937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.8491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 258.768258][ T29] audit: type=1326 audit(262.789:9938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.8491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 258.791269][ T29] audit: type=1326 audit(262.789:9939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.8491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 258.814049][ T29] audit: type=1326 audit(262.789:9940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.8491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 258.836931][ T29] audit: type=1326 audit(262.789:9941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23798 comm="syz.0.8491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 258.860086][ T29] audit: type=1326 audit(262.978:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23800 comm="syz.4.8493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 258.989102][T23824] veth0_to_team: entered promiscuous mode [ 259.008181][T23815] loop6: detected capacity change from 0 to 8192 [ 259.031195][T23815] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.269284][T23862] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 259.493196][T23906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23906 comm=syz.5.8540 [ 259.675510][T23933] 9pnet_fd: Insufficient options for proto=fd [ 259.767441][T23950] netlink: 'syz.5.8559': attribute type 1 has an invalid length. [ 260.134679][T23968] syz.0.8567(23968): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 260.259598][T23983] netlink: 'syz.7.8574': attribute type 3 has an invalid length. [ 260.963846][T24092] vhci_hcd: invalid port number 96 [ 260.969024][T24092] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 261.112460][T24121] loop6: detected capacity change from 0 to 512 [ 261.140253][T24124] netlink: zone id is out of range [ 261.145458][T24124] netlink: zone id is out of range [ 261.151079][T24124] netlink: zone id is out of range [ 261.153612][T24121] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.8640: inode has both inline data and extents flags [ 261.156336][T24124] netlink: zone id is out of range [ 261.182460][T24121] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8640: couldn't read orphan inode 15 (err -117) [ 261.207003][T24124] netlink: zone id is out of range [ 261.212327][T24124] netlink: zone id is out of range [ 261.218088][T24121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.268752][T24124] netlink: zone id is out of range [ 261.276186][T24124] netlink: zone id is out of range [ 261.281336][T24124] netlink: zone id is out of range [ 261.317115][T24124] netlink: zone id is out of range [ 261.499836][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.888605][T24179] $Hÿ: renamed from bond0 (while UP) [ 261.916553][T24179] $Hÿ: entered promiscuous mode [ 261.921651][T24179] bond_slave_0: entered promiscuous mode [ 261.927515][T24179] bond_slave_1: entered promiscuous mode [ 262.259137][T24216] __nla_validate_parse: 9 callbacks suppressed [ 262.259153][T24216] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 262.535777][T24243] Falling back ldisc for ttyS3. [ 262.577484][T24250] pimreg: entered allmulticast mode [ 262.611455][T24250] pimreg: left allmulticast mode [ 262.825504][T24290] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 262.959813][ T3388] hid_parser_main: 11 callbacks suppressed [ 262.959830][ T3388] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 262.983113][ T3388] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.231281][T24319] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8725'. [ 263.409856][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 263.409871][ T29] audit: type=1400 audit(267.755:10223): avc: denied { relabelto } for pid=24333 comm="syz.4.8733" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 263.422223][T24336] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.8732'. [ 263.442463][ T29] audit: type=1400 audit(267.755:10224): avc: denied { associate } for pid=24333 comm="syz.4.8733" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 263.503599][ T29] audit: type=1400 audit(267.849:10225): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 263.559542][ T29] audit: type=1326 audit(267.881:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24342 comm="syz.6.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 263.583454][ T29] audit: type=1326 audit(267.881:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24342 comm="syz.6.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 263.606802][ T29] audit: type=1326 audit(267.881:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24342 comm="syz.6.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 263.630837][ T29] audit: type=1326 audit(267.881:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24342 comm="syz.6.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 263.654001][ T29] audit: type=1326 audit(267.881:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24342 comm="syz.6.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 263.677171][ T29] audit: type=1326 audit(267.881:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24342 comm="syz.6.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 263.700909][ T29] audit: type=1326 audit(267.881:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24342 comm="syz.6.8737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 263.810560][T24375] SELinux: policydb version 0 does not match my version range 15-35 [ 263.819189][T24375] SELinux: failed to load policy [ 263.953740][T24394] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8758'. [ 264.133909][T24404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8764'. [ 264.215258][T24411] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 24411 comm: syz.7.8767) [ 264.323269][T24425] random: crng reseeded on system resumption [ 264.334605][T24425] Restarting kernel threads ... [ 264.340879][T24425] Done restarting kernel threads. [ 264.593061][T24445] loop6: detected capacity change from 0 to 2048 [ 264.615211][T24445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.667684][T24463] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8788'. [ 264.678872][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.806455][T24485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8800'. [ 264.815687][T24485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8800'. [ 264.880427][T24495] loop6: detected capacity change from 0 to 1024 [ 264.909353][T24495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.929356][T24495] EXT4-fs error (device loop6): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.6.8806: path /915/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 264.974284][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.030630][T24515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24515 comm=syz.5.8814 [ 265.143574][T24535] SELinux: policydb version 0 does not match my version range 15-35 [ 265.162697][T24535] SELinux: failed to load policy [ 265.265882][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8831'. [ 265.319998][T24558] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8834'. [ 266.496223][T24718] net_ratelimit: 9 callbacks suppressed [ 266.496236][T24718] netlink: zone id is out of range [ 266.507658][T24718] netlink: zone id is out of range [ 266.624083][T24718] netlink: zone id is out of range [ 266.632313][T24718] netlink: zone id is out of range [ 266.647043][T24718] netlink: set zone limit has 8 unknown bytes [ 266.763359][T24745] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.013335][T24777] netlink: 'syz.0.8932': attribute type 15 has an invalid length. [ 267.241739][T24814] netlink: 'syz.0.8949': attribute type 1 has an invalid length. [ 267.267439][T24814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.311493][T24822] __nla_validate_parse: 13 callbacks suppressed [ 267.311507][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8953'. [ 267.390470][T24814] bond1: (slave geneve2): making interface the new active one [ 267.439482][T24814] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 267.448875][ T8612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.461421][ T8612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.491102][ T8612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.516971][ T8612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.532798][T24845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8962'. [ 267.687365][T24860] netlink: 'gtp': attribute type 10 has an invalid length. [ 267.765284][T24872] openvswitch: netlink: Missing key (keys=40, expected=80) [ 267.821843][T24880] netlink: 'syz.5.8978': attribute type 14 has an invalid length. [ 267.829839][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8978'. [ 267.855632][T24884] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.8979'. [ 267.867896][T24880] netlink: 'syz.5.8978': attribute type 14 has an invalid length. [ 267.875785][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8978'. [ 267.876929][T24884] netlink: zone id is out of range [ 267.889922][T24884] netlink: zone id is out of range [ 267.909228][T24884] netlink: zone id is out of range [ 267.914571][T24884] netlink: zone id is out of range [ 268.101332][T24920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24920 comm=syz.5.8997 [ 268.175633][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 268.175651][ T29] audit: type=1400 audit(272.762:10490): avc: denied { mount } for pid=24924 comm="syz.7.8999" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 268.236999][ T29] audit: type=1400 audit(272.825:10491): avc: denied { execute } for pid=24935 comm="syz.5.9004" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=76096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 268.283829][ T29] audit: type=1400 audit(272.878:10492): avc: denied { read } for pid=24941 comm="syz.4.9007" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 268.307748][ T29] audit: type=1400 audit(272.878:10493): avc: denied { open } for pid=24941 comm="syz.4.9007" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 268.348079][ T29] audit: type=1400 audit(272.920:10494): avc: denied { ioctl } for pid=24941 comm="syz.4.9007" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 268.374037][ T29] audit: type=1326 audit(272.941:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24949 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e6cf749 code=0x7ffc0000 [ 268.386181][T24954] netlink: 128 bytes leftover after parsing attributes in process `syz.7.9013'. [ 268.397152][ T29] audit: type=1326 audit(272.941:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24949 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e6cf749 code=0x7ffc0000 [ 268.429071][ T29] audit: type=1326 audit(272.941:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24949 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e6cf749 code=0x7ffc0000 [ 268.452156][ T29] audit: type=1326 audit(272.941:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24949 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e6cf749 code=0x7ffc0000 [ 268.475118][ T29] audit: type=1326 audit(272.941:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24949 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb66e6cf749 code=0x7ffc0000 [ 268.536005][T24964] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9018'. [ 268.548768][T24968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24968 comm=syz.6.9019 [ 268.637749][T24981] netlink: 'syz.7.9025': attribute type 3 has an invalid length. [ 268.664162][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9027'. [ 268.773826][T25005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25005 comm=syz.0.9037 [ 268.843013][T25016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9042'. [ 268.853315][T25016] IPVS: Error connecting to the multicast addr [ 269.152856][T25049] netlink: 'syz.7.9056': attribute type 13 has an invalid length. [ 269.172543][T25049] gretap0: refused to change device tx_queue_len [ 269.192792][T25054] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 269.383002][T25076] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 269.492324][T25086] SELinux: failed to load policy [ 269.980304][T25134] loop6: detected capacity change from 0 to 1024 [ 269.998901][T25134] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.009920][T25134] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.022015][T25134] JBD2: no valid journal superblock found [ 270.027834][T25134] EXT4-fs (loop6): Could not load journal inode [ 270.051877][T25134] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 270.064664][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x1 [ 270.072139][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.079630][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.087140][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.094576][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.102145][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.111645][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.119136][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.126564][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x2 [ 270.133976][ T4625] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 270.142191][ T4625] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz0] on syz0 [ 270.174572][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.346667][T25152] loop6: detected capacity change from 0 to 8192 [ 270.486232][T25178] 9pnet_fd: Insufficient options for proto=fd [ 270.742723][T25202] netlink: 'syz.0.9125': attribute type 3 has an invalid length. [ 270.750625][T25202] netlink: 'syz.0.9125': attribute type 1 has an invalid length. [ 270.758390][T25202] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9125'. [ 271.048680][T25247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25247 comm=syz.7.9146 [ 271.490519][T25295] netlink: 'syz.4.9167': attribute type 29 has an invalid length. [ 271.571066][T25307] net_ratelimit: 3 callbacks suppressed [ 271.571084][T25307] bond_slave_1: mtu less than device minimum [ 271.859835][T25342] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 272.080706][T25371] xt_connbytes: Forcing CT accounting to be enabled [ 272.087852][T25371] set match dimension is over the limit! [ 272.148911][T25378] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 272.271849][T25392] __nla_validate_parse: 5 callbacks suppressed [ 272.271863][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9210'. [ 272.383778][T25406] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.399946][T25408] validate_nla: 1 callbacks suppressed [ 272.399957][T25408] netlink: 'syz.5.9218': attribute type 29 has an invalid length. [ 272.415308][T25408] netlink: 'syz.5.9218': attribute type 29 has an invalid length. [ 272.425260][T25408] netlink: 500 bytes leftover after parsing attributes in process `syz.5.9218'. [ 272.483416][T25406] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.538317][T25406] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.586734][T25406] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.611136][T25428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9227'. [ 272.620631][T25428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9227'. [ 272.647778][ T8610] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.659594][ T8610] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.670882][ T8610] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.682506][ T8610] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.897135][T25448] No such timeout policy "syz0" [ 273.029200][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 273.029217][ T29] audit: type=1400 audit(277.854:10789): avc: denied { create } for pid=25461 comm="syz.7.9242" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 273.080850][ T29] audit: type=1400 audit(277.854:10790): avc: denied { write } for pid=25461 comm="syz.7.9242" name="file0" dev="tmpfs" ino=5662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 273.102955][ T29] audit: type=1400 audit(277.854:10791): avc: denied { open } for pid=25461 comm="syz.7.9242" path="/1098/file0" dev="tmpfs" ino=5662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 273.126308][ T29] audit: type=1400 audit(277.854:10792): avc: denied { ioctl } for pid=25461 comm="syz.7.9242" path="/1098/file0" dev="tmpfs" ino=5662 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 273.154110][ T29] audit: type=1400 audit(277.990:10793): avc: denied { unlink } for pid=12507 comm="syz-executor" name="file0" dev="tmpfs" ino=5662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 273.190683][ T29] audit: type=1400 audit(278.022:10794): avc: denied { open } for pid=25469 comm="syz.6.9246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 273.210233][ T29] audit: type=1400 audit(278.022:10795): avc: denied { kernel } for pid=25469 comm="syz.6.9246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 273.229804][ T29] audit: type=1400 audit(278.022:10796): avc: denied { tracepoint } for pid=25469 comm="syz.6.9246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 273.249931][ T29] audit: type=1400 audit(278.022:10797): avc: denied { mounton } for pid=25469 comm="syz.6.9246" path="/997/file0" dev="tmpfs" ino=5131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 273.272951][ T29] audit: type=1400 audit(278.022:10798): avc: denied { mount } for pid=25469 comm="syz.6.9246" name="/" dev="ramfs" ino=78071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 273.602223][T25521] loop6: detected capacity change from 0 to 2048 [ 273.621086][T25521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.682538][T25533] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.727732][T25538] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9268: bg 0: block 345: padding at end of block bitmap is not set [ 273.744384][T25539] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9284'. [ 273.745718][T25538] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 903 with error 117 [ 273.766771][T25538] EXT4-fs (loop6): This should not happen!! Data will be lost [ 273.766771][T25538] [ 273.858767][ T2563] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 919 with max blocks 1 with error 28 [ 273.871451][ T2563] EXT4-fs (loop6): This should not happen!! Data will be lost [ 273.871451][ T2563] [ 273.881186][ T2563] EXT4-fs (loop6): Total free blocks count 0 [ 273.887170][ T2563] EXT4-fs (loop6): Free/Dirty block details [ 273.893139][ T2563] EXT4-fs (loop6): free_blocks=0 [ 273.898107][ T2563] EXT4-fs (loop6): dirty_blocks=16 [ 273.903290][ T2563] EXT4-fs (loop6): Block reservation details [ 273.976282][T25559] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.025457][T25559] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.073038][T25559] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.129854][T25559] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.242555][T25586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9294'. [ 274.398494][T25616] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 274.425016][T25620] pimreg: entered allmulticast mode [ 274.432506][T25620] pimreg: left allmulticast mode [ 274.450249][ T3388] Process accounting resumed [ 274.614699][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9325'. [ 274.775275][T25678] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.9337'. [ 274.821820][T25685] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9341'. [ 274.831238][T25685] IPVS: Unknown mcast interface: ipvlan1 [ 274.974745][T25709] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 274.982975][T25709] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.148223][T25729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.252383][T25739] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.269126][T25739] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.299052][T25739] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.378664][T25739] infiniband syz2: set down [ 275.383228][T25739] infiniband syz2: added ip6_vti0 [ 275.388328][ T3388] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.419077][T25739] RDS/IB: syz2: added [ 275.423083][T25739] smc: adding ib device syz2 with port count 1 [ 275.432504][T25739] smc: ib device syz2 port 1 has no pnetid [ 275.438698][ T4625] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.454200][T25739] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.536490][T25739] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.588164][T25739] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.645038][T25739] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.673326][T25757] netlink: 'syz.7.9377': attribute type 21 has an invalid length. [ 275.681920][T25757] netlink: 'syz.7.9377': attribute type 1 has an invalid length. [ 275.689637][T25757] netlink: 144 bytes leftover after parsing attributes in process `syz.7.9377'. [ 275.719379][T25739] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.473391][ T8593] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.489756][ T8593] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.508366][ T8593] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.527240][ T8593] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.590906][T25799] bridge0: port 1(batadv2) entered blocking state [ 276.597417][T25799] bridge0: port 1(batadv2) entered disabled state [ 276.606113][T25799] batadv2: entered allmulticast mode [ 276.611882][T25799] batadv2: entered promiscuous mode [ 276.953079][T25828] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 277.047668][T25832] __nla_validate_parse: 1 callbacks suppressed [ 277.047682][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9412'. [ 277.080330][ T8610] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 277.089602][ T8610] batman_adv: batadv2: MLD Querier appeared [ 277.872145][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 277.872158][ T29] audit: type=1400 audit(282.945:11088): avc: denied { mounton } for pid=25878 comm="syz.4.9433" path="/file0" dev="ramfs" ino=79388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 278.009870][T25889] IPv6: Can't replace route, no match found [ 278.084947][ T29] audit: type=1400 audit(283.155:11089): avc: denied { setopt } for pid=25894 comm="syz.0.9441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 278.223230][ T29] audit: type=1326 audit(283.302:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25907 comm="syz.6.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 278.246996][ T29] audit: type=1326 audit(283.302:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25907 comm="syz.6.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 278.270116][ T29] audit: type=1326 audit(283.302:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25907 comm="syz.6.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 278.293807][ T29] audit: type=1326 audit(283.302:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25907 comm="syz.6.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 278.316918][ T29] audit: type=1326 audit(283.302:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25907 comm="syz.6.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 278.340590][ T29] audit: type=1326 audit(283.302:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25907 comm="syz.6.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 278.363675][ T29] audit: type=1326 audit(283.302:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25907 comm="syz.6.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 278.387291][ T29] audit: type=1326 audit(283.302:11097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25907 comm="syz.6.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 278.416780][T25913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9450'. [ 278.477940][T25922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9452'. [ 278.486977][T25922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9452'. [ 278.498317][T25922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9452'. [ 278.507881][T25922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9452'. [ 278.669559][T25929] ip6_vti0 speed is unknown, defaulting to 1000 [ 278.830357][T25935] pimreg: entered allmulticast mode [ 278.846911][T25935] pimreg: left allmulticast mode [ 278.934697][T25945] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 279.297689][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.318279][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.332470][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.341073][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.348779][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.366998][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.374638][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.382855][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.390523][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.399977][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.408299][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.416027][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.423597][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.431210][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.439500][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.447038][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.454883][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.463063][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.470622][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.478312][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.485960][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.494314][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.501935][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.509514][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.517144][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.525425][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.532982][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.540497][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.548730][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.556237][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.563937][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.571563][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.579886][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.587409][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.594974][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.602536][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.610744][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.618364][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.625946][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.634201][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.641794][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.649374][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.657468][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.665720][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.673359][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.680906][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.688506][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.696642][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.704431][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.712003][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.720133][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.727640][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.735310][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.743095][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.751372][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.758913][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.766675][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.774199][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.782716][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.790283][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.797839][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.806217][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.813796][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.821319][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.852342][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.866105][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.874391][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.882117][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.889647][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.897311][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.905814][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.921423][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.957688][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 279.981987][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 280.023879][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 280.045657][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 280.062103][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 280.075087][T25966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 280.139726][T25984] netlink: 'syz.4.9478': attribute type 3 has an invalid length. [ 280.682949][T26026] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 280.763349][T26034] loop6: detected capacity change from 0 to 1024 [ 280.796006][T26034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.834516][T26034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.080024][T26051] pimreg: entered allmulticast mode [ 281.119830][T26051] pimreg: left allmulticast mode [ 281.291256][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.300842][T26066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.360575][T26066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.426964][T26078] netlink: 'syz.4.9519': attribute type 1 has an invalid length. [ 281.435347][T26066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.491885][T26066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.585048][ T8612] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.608870][ T8612] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.639778][ T8612] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.676957][ T8612] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.755256][T26103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9535'. [ 281.982690][T26114] ip6_vti0 speed is unknown, defaulting to 1000 [ 282.469282][T26164] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 282.476746][T26164] SELinux: failed to load policy [ 282.559947][T26174] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 282.641038][T26183] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 282.685776][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 282.685791][ T29] audit: type=1400 audit(287.995:11232): avc: denied { create } for pid=26186 comm="syz.6.9572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.723261][ T29] audit: type=1400 audit(288.037:11233): avc: denied { bind } for pid=26186 comm="syz.6.9572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.742716][ T29] audit: type=1400 audit(288.037:11234): avc: denied { write } for pid=26186 comm="syz.6.9572" path="socket:[80107]" dev="sockfs" ino=80107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.905132][ T29] audit: type=1400 audit(288.226:11235): avc: denied { ioctl } for pid=26199 comm="syz.4.9578" path="socket:[80137]" dev="sockfs" ino=80137 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 282.954946][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9580'. [ 282.982678][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9580'. [ 283.006900][T26208] netem: incorrect gi model size [ 283.011941][T26208] netem: change failed [ 283.125730][ T29] audit: type=1400 audit(288.446:11236): avc: denied { read } for pid=26209 comm="syz.4.9583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.220308][T26218] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.273206][T26218] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.273265][ T29] audit: type=1400 audit(288.583:11237): avc: denied { getopt } for pid=26219 comm="syz.6.9587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.339897][T26218] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.396733][T26218] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.461883][ T8612] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.470888][ T8612] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.529389][ T8612] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.573554][T26235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9593'. [ 283.577124][ T8612] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.613878][T26235] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 283.689968][T26247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9595'. [ 283.712541][T26247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9595'. [ 283.722335][ T8593] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.738696][ T8593] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.761213][ T8593] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.777667][ T8593] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.856781][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9607'. [ 283.877023][T26271] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.890069][T26262] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9607'. [ 283.899194][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9607'. [ 283.950129][ T29] audit: type=1400 audit(289.328:11238): avc: denied { setopt } for pid=26279 comm="syz.0.9599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 283.957055][T26271] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.035424][T26271] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.096765][T26271] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.140119][T26304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9602'. [ 284.206216][ T8610] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.221327][ T2563] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.245943][ T8610] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.254474][ T8610] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.362794][ T29] audit: type=1400 audit(289.759:11239): avc: denied { create } for pid=26329 comm="syz.7.9608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.383096][T26333] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 284.417073][ T29] audit: type=1400 audit(289.801:11240): avc: denied { connect } for pid=26329 comm="syz.7.9608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.806260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.893523][T26407] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.916448][ T29] audit: type=1400 audit(290.336:11241): avc: denied { mount } for pid=26410 comm="syz.0.9625" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 284.999519][T26407] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.038310][T26407] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.121186][T26407] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.366145][ T2563] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.382475][ T2563] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.395060][ T2563] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.403832][ T2563] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.793315][T26476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9644'. [ 285.839266][T26476] bond_slave_0: entered promiscuous mode [ 285.844960][T26476] bond_slave_1: entered promiscuous mode [ 285.872351][T26476] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 285.884091][T26476] bond_slave_0: left promiscuous mode [ 285.889509][T26476] bond_slave_1: left promiscuous mode [ 286.033777][T26490] netem: incorrect gi model size [ 286.038815][T26490] netem: change failed [ 286.383670][T26523] serio: Serial port ptm1 [ 286.566006][T26543] xt_hashlimit: max too large, truncated to 1048576 [ 286.600889][T26546] netlink: 'syz.4.9679': attribute type 29 has an invalid length. [ 286.626140][T26546] netlink: 'syz.4.9679': attribute type 29 has an invalid length. [ 286.768553][T26564] serio: Serial port ptm1 [ 287.331730][T26622] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 287.350612][T26626] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 287.590280][T26656] atomic_op ffff88811a17a128 conn xmit_atomic 0000000000000000 [ 287.705964][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 287.706051][ T29] audit: type=1400 audit(293.265:11360): avc: denied { connect } for pid=26662 comm="syz.6.9733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.750734][ T29] audit: type=1400 audit(293.317:11361): avc: denied { relabelto } for pid=26665 comm="syz.0.9734" name="NETLINK" dev="sockfs" ino=80701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 287.855892][T26673] __nla_validate_parse: 3 callbacks suppressed [ 287.855909][T26673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9737'. [ 287.913177][T26677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9737'. [ 288.046246][ T29] audit: type=1326 audit(293.622:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.0.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 288.069935][ T29] audit: type=1326 audit(293.622:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.0.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 288.093734][ T29] audit: type=1326 audit(293.622:11364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.0.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 288.116809][ T29] audit: type=1326 audit(293.622:11365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.0.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 288.140455][ T29] audit: type=1326 audit(293.622:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.0.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 288.163474][ T29] audit: type=1326 audit(293.674:11367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.0.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 288.187112][ T29] audit: type=1326 audit(293.674:11368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.0.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 288.210222][ T29] audit: type=1326 audit(293.727:11369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.0.9740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 288.300328][T26694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.314965][T26694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.688277][T26728] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 288.934892][T26753] 9pnet_fd: Insufficient options for proto=fd [ 289.540152][T26788] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 289.565006][T26769] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.701232][T26769] chnl_net:caif_netlink_parms(): no params data found [ 289.781873][T26769] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.789841][T26769] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.812738][T26769] bridge_slave_0: entered allmulticast mode [ 289.819394][T26769] bridge_slave_0: entered promiscuous mode [ 289.826418][T26769] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.833557][T26769] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.840800][T26769] bridge_slave_1: entered allmulticast mode [ 289.847143][T26769] bridge_slave_1: entered promiscuous mode [ 289.870384][T26769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.880744][T26769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.924808][T26769] team0: Port device team_slave_0 added [ 289.931641][T26769] team0: Port device team_slave_1 added [ 289.948538][T26769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.955616][T26769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.981544][T26769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.992902][T26769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.999960][T26769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.025948][T26769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.066032][T26769] hsr_slave_0: entered promiscuous mode [ 290.077203][T26769] hsr_slave_1: entered promiscuous mode [ 290.083352][T26769] debugfs: 'hsr0' already exists in 'hsr' [ 290.089106][T26769] Cannot create hsr debugfs directory [ 290.224853][T26847] 9pnet_fd: Insufficient options for proto=fd [ 290.300481][T26853] atomic_op ffff88811a178d28 conn xmit_atomic 0000000000000000 [ 290.331521][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9815'. [ 290.340574][T26855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9815'. [ 290.349563][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9815'. [ 290.358437][T26855] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9815'. [ 290.382231][T26855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9815'. [ 290.406241][T26868] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 290.412794][T26868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.420381][T26868] vhci_hcd vhci_hcd.0: Device attached [ 290.428579][T26868] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 290.435110][T26868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.442233][T26769] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 290.442661][T26868] vhci_hcd vhci_hcd.0: Device attached [ 290.457572][T26769] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 290.464383][T26868] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 290.470900][T26868] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 290.478555][T26868] vhci_hcd vhci_hcd.0: Device attached [ 290.480934][T26769] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 290.489449][T26868] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 290.497326][T26868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.504872][T26868] vhci_hcd vhci_hcd.0: Device attached [ 290.512526][T26769] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 290.519841][T26868] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12) [ 290.526433][T26868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.534647][T26868] vhci_hcd vhci_hcd.0: Device attached [ 290.549153][T26877] vhci_hcd: connection closed [ 290.549434][ T2563] vhci_hcd: stop threads [ 290.558561][ T2563] vhci_hcd: release socket [ 290.563758][ T2563] vhci_hcd: disconnect device [ 290.569125][T26873] vhci_hcd: connection closed [ 290.569321][T26869] vhci_hcd: connection closed [ 290.574162][T26871] vhci_hcd: connection closed [ 290.577410][T26875] vhci_hcd: connection closed [ 290.589683][ T2563] vhci_hcd: stop threads [ 290.598810][ T2563] vhci_hcd: release socket [ 290.603223][ T2563] vhci_hcd: disconnect device [ 290.636648][ T2563] vhci_hcd: stop threads [ 290.640925][ T2563] vhci_hcd: release socket [ 290.646073][ T2563] vhci_hcd: disconnect device [ 290.655313][T26769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.668134][ T2563] vhci_hcd: stop threads [ 290.672408][ T2563] vhci_hcd: release socket [ 290.673361][ T36] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 290.677741][ T2563] vhci_hcd: disconnect device [ 290.684918][ T36] usb 13-1: enqueue for inactive port 0 [ 290.690823][T26769] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.705409][ T2563] vhci_hcd: stop threads [ 290.709678][ T2563] vhci_hcd: release socket [ 290.714171][ T2563] vhci_hcd: disconnect device [ 290.718061][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.725961][ T8593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.734988][ T36] usb 13-1: enqueue for inactive port 0 [ 290.743574][ T36] usb 13-1: enqueue for inactive port 0 [ 290.752845][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.759925][ T8593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.809204][ T36] vhci_hcd: vhci_device speed not set [ 290.850127][T26769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.012410][ T3409] kernel write not supported for file bpf-prog (pid: 3409 comm: kworker/0:5) [ 291.079094][T26769] veth0_vlan: entered promiscuous mode [ 291.093121][T26928] bridge0: entered allmulticast mode [ 291.099706][T26769] veth1_vlan: entered promiscuous mode [ 291.106677][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9833'. [ 291.127525][T26769] veth0_macvtap: entered promiscuous mode [ 291.146373][T26769] veth1_macvtap: entered promiscuous mode [ 291.170046][T26769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.192107][T26769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.202905][ T2563] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.212256][ T2563] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.230912][ T8597] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.243295][ T8597] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.305243][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9780'. [ 291.331204][T26952] netlink: 312 bytes leftover after parsing attributes in process `syz.8.9780'. [ 291.490739][T26986] syzkaller1: entered promiscuous mode [ 291.496450][T26986] syzkaller1: entered allmulticast mode [ 291.543032][T26996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.733303][T27019] netlink: 'syz.6.9875': attribute type 1 has an invalid length. [ 292.575459][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 292.575475][ T29] audit: type=1400 audit(298.377:11500): avc: denied { create } for pid=27041 comm="syz.7.9883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.586157][T27040] netlink: 'syz.0.9882': attribute type 3 has an invalid length. [ 292.611384][ T29] audit: type=1400 audit(298.419:11501): avc: denied { write } for pid=27043 comm="syz.8.9884" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 292.637401][T27045] vhci_hcd: invalid port number 96 [ 292.642588][T27045] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 292.696268][T27055] loop8: detected capacity change from 0 to 512 [ 292.703907][T27055] EXT4-fs: Ignoring removed nobh option [ 292.709958][T27055] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 292.720671][T27055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e0ac, mo2=0002] [ 292.730511][T27055] EXT4-fs (loop8): orphan cleanup on readonly fs [ 292.738644][T27055] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.9890: attempt to clear invalid blocks 1024 len 1 [ 292.752900][T27055] EXT4-fs (loop8): Remounting filesystem read-only [ 292.764856][T27055] EXT4-fs (loop8): 1 truncate cleaned up [ 292.770914][T27055] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 292.792166][T27063] __nla_validate_parse: 2 callbacks suppressed [ 292.792181][T27063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9893'. [ 292.808092][T27063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9893'. [ 292.808598][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 292.817194][T27063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9893'. [ 292.818157][T27063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9893'. [ 292.890526][T27073] loop6: detected capacity change from 0 to 1024 [ 292.891531][ T29] audit: type=1326 audit(298.703:11502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27074 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 292.900195][T27073] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 292.919960][ T29] audit: type=1326 audit(298.703:11503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27074 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 292.930061][T27073] System zones: 0-1, 3-36 [ 292.956704][ T29] audit: type=1326 audit(298.776:11504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27074 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 292.980386][ T29] audit: type=1326 audit(298.776:11505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27074 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 292.985592][T27073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.003431][ T29] audit: type=1326 audit(298.776:11506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27074 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 293.003472][ T29] audit: type=1326 audit(298.776:11507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27074 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 293.063979][ T29] audit: type=1326 audit(298.776:11508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27074 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 293.087621][ T29] audit: type=1326 audit(298.776:11509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27074 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f34c9f749 code=0x7ffc0000 [ 293.087904][T27080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9900'. [ 293.153633][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.240485][T27093] lo: Caught tx_queue_len zero misconfig [ 293.261879][T27093] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 293.386562][T27118] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 293.411698][T27121] pim6reg: entered allmulticast mode [ 293.436459][T27130] atomic_op ffff888119d5c928 conn xmit_atomic 0000000000000000 [ 293.867529][T27196] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 293.911872][T27202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9955'. [ 293.921026][T27202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9955'. [ 293.971019][T27207] netem: incorrect ge model size [ 293.976035][T27207] netem: change failed [ 294.088343][T27228] netlink: 'syz.0.9966': attribute type 18 has an invalid length. [ 294.096414][T27228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9966'. [ 294.137509][T27228] netlink: 'syz.0.9966': attribute type 18 has an invalid length. [ 294.146052][T27228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9966'. [ 294.151490][T27235] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9969'. [ 294.163975][T27235] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 294.226214][T27241] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27241 comm=syz.6.9971 [ 294.238797][T27241] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27241 comm=syz.6.9971 [ 294.622411][T27307] netlink: 'syz.7.10002': attribute type 30 has an invalid length. [ 294.655941][ T8579] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.669724][ T8579] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.688563][ T8579] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.702906][ T8579] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.265147][T27354] loop6: detected capacity change from 0 to 512 [ 295.284007][T27354] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.10023: corrupted in-inode xattr: invalid ea_ino [ 295.298426][T27354] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.10023: couldn't read orphan inode 15 (err -117) [ 295.311094][T27354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.396784][T27325] Set syz1 is full, maxelem 65536 reached [ 295.411102][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.420890][T27356] openvswitch: netlink: Missing key (keys=40, expected=80) [ 295.543977][T27374] netlink: zone id is out of range [ 295.549150][T27374] netlink: zone id is out of range [ 295.565804][T27374] netlink: zone id is out of range [ 295.581027][T27374] netlink: set zone limit has 8 unknown bytes [ 295.636592][T27384] loop8: detected capacity change from 0 to 256 [ 295.660472][T27384] FAT-fs (loop8): bogus number of FAT sectors [ 295.666716][T27384] FAT-fs (loop8): Can't find a valid FAT filesystem [ 295.954907][T27407] SELinux: failed to load policy [ 296.483171][T27445] netlink: 'syz.6.10064': attribute type 39 has an invalid length. [ 296.693890][T27469] xt_policy: neither incoming nor outgoing policy selected [ 296.819342][T27480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27480 comm=syz.4.10080 [ 296.990978][T27498] loop8: detected capacity change from 0 to 512 [ 297.017480][T27498] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 297.046560][T27498] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10078: bg 0: block 384: padding at end of block bitmap is not set [ 297.064758][T27497] ip6_vti0 speed is unknown, defaulting to 1000 [ 297.071801][T27498] EXT4-fs (loop8): Remounting filesystem read-only [ 297.090472][T27498] EXT4-fs (loop8): 1 truncate cleaned up [ 297.109349][T27498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.323370][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.419156][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 297.419173][ T29] audit: type=1400 audit(303.469:11666): avc: denied { connect } for pid=27527 comm="syz.6.10099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.523275][T27526] loop8: detected capacity change from 0 to 1764 [ 297.557491][ T29] audit: type=1400 audit(303.595:11667): avc: denied { mount } for pid=27523 comm="syz.8.10096" name="/" dev="loop8" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 297.613121][T27537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27537 comm=syz.6.10105 [ 297.626536][T27537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27537 comm=syz.6.10105 [ 297.647291][ T29] audit: type=1400 audit(303.679:11668): avc: denied { unmount } for pid=26769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 297.685043][T27541] loop8: detected capacity change from 0 to 2048 [ 297.685353][ T29] audit: type=1400 audit(303.700:11669): avc: denied { kexec_image_load } for pid=27538 comm="syz.0.10104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 297.756388][T27541] loop8: p1 p2 p3 [ 297.816386][ T29] audit: type=1326 audit(303.878:11670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.8.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34030f749 code=0x7ffc0000 [ 297.840085][ T29] audit: type=1326 audit(303.878:11671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.8.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34030f749 code=0x7ffc0000 [ 297.865630][ T29] audit: type=1326 audit(303.878:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.8.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34030f749 code=0x7ffc0000 [ 297.889308][ T29] audit: type=1326 audit(303.878:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.8.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34030f749 code=0x7ffc0000 [ 297.912646][ T29] audit: type=1326 audit(303.878:11674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27551 comm="syz.8.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34030f749 code=0x7ffc0000 [ 297.936374][ T29] audit: type=1400 audit(303.899:11675): avc: denied { mounton } for pid=27550 comm="syz.6.10112" path="/1181/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 298.063732][T27576] __nla_validate_parse: 7 callbacks suppressed [ 298.063750][T27576] netlink: 96 bytes leftover after parsing attributes in process `syz.8.10122'. [ 298.094985][T27579] loop6: detected capacity change from 0 to 1024 [ 298.107041][T27579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.163393][T27589] netlink: 'syz.7.10126': attribute type 29 has an invalid length. [ 298.173475][T27589] netlink: 'syz.7.10126': attribute type 29 has an invalid length. [ 298.182228][T27589] netlink: 500 bytes leftover after parsing attributes in process `syz.7.10126'. [ 298.206466][T27594] netlink: 'syz.7.10128': attribute type 7 has an invalid length. [ 298.257144][T27594] netlink: 'syz.7.10128': attribute type 7 has an invalid length. [ 298.272648][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.274270][T27605] netlink: 'syz.0.10133': attribute type 1 has an invalid length. [ 298.289562][T27605] netlink: 15150 bytes leftover after parsing attributes in process `syz.0.10133'. [ 298.472616][T27628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10144'. [ 298.484974][T27632] loop8: detected capacity change from 0 to 512 [ 298.493515][T27632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.539258][T27632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 298.671584][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 298.901783][T27674] loop6: detected capacity change from 0 to 8192 [ 298.951271][T27688] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10168'. [ 299.115123][T27712] loop8: detected capacity change from 0 to 512 [ 299.138616][T27712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.150441][T27712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 299.158547][T27712] System zones: 1-2, 4-12, 8-8 [ 299.163648][T27712] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.10177: iget: bad i_size value: 38620345925642 [ 299.176938][T27712] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.10177: couldn't read orphan inode 15 (err -117) [ 299.189790][T27712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.223521][T27712] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.10177 [ 299.260035][ T8610] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:41: bg 0: block 5: invalid block bitmap [ 299.288139][ T8610] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 299.300465][ T8610] EXT4-fs (loop8): This should not happen!! Data will be lost [ 299.300465][ T8610] [ 299.310134][ T8610] EXT4-fs (loop8): Total free blocks count 0 [ 299.316338][ T8610] EXT4-fs (loop8): Free/Dirty block details [ 299.322979][ T8610] EXT4-fs (loop8): free_blocks=0 [ 299.328046][ T8610] EXT4-fs (loop8): dirty_blocks=4 [ 299.333349][ T8610] EXT4-fs (loop8): Block reservation details [ 299.339449][ T8610] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 299.342173][T27739] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10190'. [ 299.346926][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.356991][T27739] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10190'. [ 299.480834][T27753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10196'. [ 299.792605][T27783] loop8: detected capacity change from 0 to 1024 [ 299.810376][T27783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.871940][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.893092][T27794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10209'. [ 299.914583][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 299.940211][T27801] IPVS: stopping master sync thread 27802 ... [ 299.941712][T27802] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 300.248735][T27860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10242'. [ 301.178469][T27934] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 301.377261][T27968] loop8: detected capacity change from 0 to 1024 [ 301.390695][T27968] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 301.400697][T27964] loop6: detected capacity change from 0 to 8192 [ 301.407445][T27968] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 301.418439][T27968] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 301.428669][T27968] JBD2: no valid journal superblock found [ 301.434396][T27968] EXT4-fs (loop8): Could not load journal inode [ 301.447239][T27964] loop6: p1 p2 p3 p4 [ 301.451355][T27964] loop6: p1 size 196608 extends beyond EOD, truncated [ 301.459511][T27964] loop6: p2 start 164919041 is beyond EOD, truncated [ 301.466260][T27964] loop6: p3 size 66846464 extends beyond EOD, truncated [ 301.474140][T27964] loop6: p4 size 37048832 extends beyond EOD, truncated [ 301.480205][T27972] loop8: detected capacity change from 0 to 1024 [ 301.496462][T27972] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.519916][T27972] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10291: bg 0: block 385: padding at end of block bitmap is not set [ 301.550430][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.680562][T27999] pim6reg: entered allmulticast mode [ 301.837279][T28030] SELinux: failed to load policy [ 301.892303][T28035] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 302.050384][T28055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28055 comm=syz.4.10328 [ 302.063062][T28055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28055 comm=syz.4.10328 [ 302.317558][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 302.317574][ T29] audit: type=1326 audit(308.602:11782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.354984][ T29] audit: type=1326 audit(308.634:11783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.378151][ T29] audit: type=1326 audit(308.634:11784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.401270][ T29] audit: type=1326 audit(308.634:11785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.424393][ T29] audit: type=1326 audit(308.634:11786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.447461][ T29] audit: type=1326 audit(308.634:11787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.470573][ T29] audit: type=1326 audit(308.634:11788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.493801][ T29] audit: type=1326 audit(308.644:11789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.517013][ T29] audit: type=1326 audit(308.644:11790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.540106][ T29] audit: type=1326 audit(308.644:11791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28077 comm="syz.4.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 302.638872][T28068] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.707776][T28101] netlink: 'syz.4.10345': attribute type 10 has an invalid length. [ 302.822258][T28068] chnl_net:caif_netlink_parms(): no params data found [ 302.861942][T28121] loop6: detected capacity change from 0 to 256 [ 302.877887][T28068] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.884972][T28068] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.936732][T28068] bridge_slave_0: entered allmulticast mode [ 302.944103][T28068] bridge_slave_0: entered promiscuous mode [ 302.950819][T28068] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.957989][T28068] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.965389][T28068] bridge_slave_1: entered allmulticast mode [ 302.973400][T28068] bridge_slave_1: entered promiscuous mode [ 302.992597][T28124] __nla_validate_parse: 12 callbacks suppressed [ 302.992651][T28124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10354'. [ 303.010599][T28068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.021659][T28068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.037483][T28124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10354'. [ 303.065407][T28068] team0: Port device team_slave_0 added [ 303.073451][T28068] team0: Port device team_slave_1 added [ 303.087339][T28129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10356'. [ 303.119042][T28068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.126043][T28068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.152725][T28068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.166650][T28134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10356'. [ 303.167898][T28068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.183237][T28068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.209303][T28068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.257633][T28068] hsr_slave_0: entered promiscuous mode [ 303.264481][T28068] hsr_slave_1: entered promiscuous mode [ 303.270810][T28068] debugfs: 'hsr0' already exists in 'hsr' [ 303.277248][T28068] Cannot create hsr debugfs directory [ 303.328534][T28145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28145 comm=syz.4.10362 [ 303.341288][T28145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28145 comm=syz.4.10362 [ 303.470790][T28166] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 303.522696][T28168] 9pnet: Could not find request transport: ¼ [ 303.633723][T28068] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.651088][T28068] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 303.668724][T28068] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 303.679735][T28068] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.755848][T28068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.767993][T28068] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.796506][ T2563] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.803590][ T2563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.828775][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.835912][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.852344][T28068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.911370][T28068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.999352][T28068] veth0_vlan: entered promiscuous mode [ 304.011779][T28068] veth1_vlan: entered promiscuous mode [ 304.036521][T28068] veth0_macvtap: entered promiscuous mode [ 304.049169][T28068] veth1_macvtap: entered promiscuous mode [ 304.068330][T28068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.088144][T28068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.097234][T28239] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.10400'. [ 304.106926][ T8579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.116024][ T8579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.119568][T28239] netlink: zone id is out of range [ 304.130609][T28239] netlink: zone id is out of range [ 304.144112][T28239] netlink: zone id is out of range [ 304.144923][ T8579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.159261][T28239] netlink: set zone limit has 8 unknown bytes [ 304.183192][ T8579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.516886][T28295] bridge0: entered promiscuous mode [ 304.531036][T28295] macsec1: entered promiscuous mode [ 304.578918][T28295] bridge0: port 3(macsec1) entered blocking state [ 304.585639][T28295] bridge0: port 3(macsec1) entered disabled state [ 304.593960][T28295] macsec1: entered allmulticast mode [ 304.599313][T28295] bridge0: entered allmulticast mode [ 304.607568][T28295] macsec1: left allmulticast mode [ 304.612684][T28295] bridge0: left allmulticast mode [ 304.623494][T28295] bridge0: left promiscuous mode [ 304.654414][T28304] openvswitch: netlink: Missing key (keys=40, expected=80) [ 304.885000][T28311] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.908808][T16333] hid_parser_main: 28 callbacks suppressed [ 304.908823][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 304.922116][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 304.929836][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x2 [ 304.937269][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 304.944819][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 304.952203][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x2 [ 304.959634][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 304.967117][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 304.974550][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 304.981965][T16333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 304.983004][T28341] xt_policy: neither incoming nor outgoing policy selected [ 305.033986][T16333] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 305.077267][T28348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10449'. [ 305.180791][T28357] syzkaller0: entered promiscuous mode [ 305.186310][T28357] syzkaller0: entered allmulticast mode [ 305.346430][T28360] ip6_vti0: Caught tx_queue_len zero misconfig [ 305.599650][T28391] hub 9-0:1.0: USB hub found [ 305.615585][T28391] hub 9-0:1.0: 8 ports detected [ 305.908868][T28416] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 305.917998][T28418] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10480'. [ 305.948324][T28421] loop8: detected capacity change from 0 to 1024 [ 305.959013][T28422] loop6: detected capacity change from 0 to 1764 [ 305.965862][T28421] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.009134][T28429] sch_fq: defrate 6 ignored. [ 306.062996][T28437] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10488'. [ 306.085726][T28437] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10488'. [ 306.186905][T28455] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 306.186905][T28455] program syz.6.10497 not setting count and/or reply_len properly [ 306.257929][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.311891][T28471] netlink: 'syz.4.10503': attribute type 29 has an invalid length. [ 306.333790][T28471] netlink: 'syz.4.10503': attribute type 29 has an invalid length. [ 306.342695][T28471] netlink: 500 bytes leftover after parsing attributes in process `syz.4.10503'. [ 306.547797][T28513] netlink: 'syz.6.10523': attribute type 10 has an invalid length. [ 306.595309][T28520] netlink: 'syz.2.10525': attribute type 7 has an invalid length. [ 306.596338][T28521] netlink: 'syz.8.10527': attribute type 1 has an invalid length. [ 306.651510][T28520] netlink: 'syz.2.10525': attribute type 7 has an invalid length. [ 306.660081][ T8612] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.671094][ T8612] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.704921][ T8612] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.762740][ T8612] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.896371][T28559] IPVS: Error connecting to the multicast addr [ 307.107487][T28577] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.150505][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a901000: rx timeout, send abort [ 307.276036][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 307.276053][ T29] audit: type=1326 audit(313.809:11943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.323338][ T29] audit: type=1326 audit(313.841:11944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.347100][ T29] audit: type=1326 audit(313.841:11945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.370147][ T29] audit: type=1326 audit(313.841:11946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.394087][ T29] audit: type=1326 audit(313.841:11947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.417173][ T29] audit: type=1326 audit(313.841:11948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.440958][ T29] audit: type=1326 audit(313.841:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.464252][ T29] audit: type=1326 audit(313.841:11950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.488029][ T29] audit: type=1326 audit(313.841:11951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.511145][ T29] audit: type=1326 audit(313.841:11952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.7.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 307.548207][ T8612] Bluetooth: hci0: Frame reassembly failed (-84) [ 307.626835][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a900e00: rx timeout, send abort [ 307.635087][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a901000: abort rx timeout. Force session deactivation [ 307.788565][T28618] loop6: detected capacity change from 0 to 128 [ 307.804938][T28618] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.867877][T12522] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.929086][T28630] loop6: detected capacity change from 0 to 512 [ 307.937082][T28630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.968418][T28630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 308.029579][T28630] System zones: 1-2, 4-12, 8-8 [ 308.037550][T28630] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.10573: iget: bad i_size value: 38620345925642 [ 308.096714][T28630] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.10573: couldn't read orphan inode 15 (err -117) [ 308.111674][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a900e00: abort rx timeout. Force session deactivation [ 308.158819][T28630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.210436][T28630] Direct I/O collision with buffered writes! File: /file1 Comm: syz.6.10573 [ 308.239532][ T2563] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 308.266997][ T2563] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 308.279957][ T2563] EXT4-fs (loop6): This should not happen!! Data will be lost [ 308.279957][ T2563] [ 308.289660][ T2563] EXT4-fs (loop6): Total free blocks count 0 [ 308.295672][ T2563] EXT4-fs (loop6): Free/Dirty block details [ 308.301660][ T2563] EXT4-fs (loop6): free_blocks=0 [ 308.307324][ T2563] EXT4-fs (loop6): dirty_blocks=4 [ 308.312368][ T2563] EXT4-fs (loop6): Block reservation details [ 308.318461][ T2563] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 308.405885][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.084521][T28739] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 309.093491][T28739] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 309.370886][ T4625] hid-generic 0003:0004:0000.0017: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 309.404920][T28770] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 309.478953][T28780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.489081][T28780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.497215][ T4145] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 309.577518][T28798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28798 comm=syz.4.10650 [ 309.592020][T28799] netlink: '+}[@': attribute type 10 has an invalid length. [ 309.599359][T28799] __nla_validate_parse: 5 callbacks suppressed [ 309.599369][T28799] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 309.615374][T28799] batman_adv: batadv0: Adding interface: veth1_vlan [ 309.622024][T28799] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.647945][T28799] batman_adv: batadv0: Interface activated: veth1_vlan [ 309.703108][T28813] SELinux: failed to load policy [ 309.737845][T28820] netlink: 'syz.4.10659': attribute type 1 has an invalid length. [ 309.745774][T28820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10659'. [ 309.788446][T28826] 9pnet_fd: Insufficient options for proto=fd [ 309.825432][T28836] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 310.308656][T28911] loop8: detected capacity change from 0 to 1024 [ 310.322753][T28911] EXT4-fs: Ignoring removed orlov option [ 310.345634][T28911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.387227][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.477458][T28943] loop8: detected capacity change from 0 to 512 [ 310.574226][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10719'. [ 310.837070][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10732'. [ 310.846240][T28992] netlink: 'syz.8.10732': attribute type 30 has an invalid length. [ 310.857955][ T2563] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.867913][ T2563] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.888193][ T2563] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.902687][ T2563] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.916184][T28997] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10735'. [ 311.034720][T29014] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 311.034720][T29014] program syz.6.10743 not setting count and/or reply_len properly [ 311.077236][T29019] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 311.270835][T29033] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.278178][T29033] vhci_hcd: invalid port number 96 [ 311.283277][T29033] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 311.428879][T29035] loop6: detected capacity change from 0 to 32768 [ 311.519802][T29043] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10756'. [ 311.570428][T29053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10761'. [ 311.579809][T29053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10761'. [ 311.594673][T29054] 9pnet: Could not find request transport: ¼ [ 311.659435][T29068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10767'. [ 311.990782][T29116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10788'. [ 312.000763][T29116] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 312.039528][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 312.039543][ T29] audit: type=1326 audit(318.817:12191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.069810][ T29] audit: type=1326 audit(318.848:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.093051][ T29] audit: type=1326 audit(318.848:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.161789][ T29] audit: type=1326 audit(318.848:12194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.184941][ T29] audit: type=1326 audit(318.890:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.208042][ T29] audit: type=1326 audit(318.911:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.235583][ T29] audit: type=1326 audit(318.964:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.258824][ T29] audit: type=1326 audit(318.964:12198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.281905][ T29] audit: type=1326 audit(318.964:12199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.305894][ T29] audit: type=1326 audit(319.016:12200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29121 comm="syz.6.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f0012bbf749 code=0x7ffc0000 [ 312.362365][T29130] hub 9-0:1.0: USB hub found [ 312.367157][T29130] hub 9-0:1.0: 8 ports detected [ 312.391119][T29138] loop6: detected capacity change from 0 to 1024 [ 312.404403][T29138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 312.428757][ T2563] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 4) [ 312.442537][ T2563] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 312.455558][ T2563] EXT4-fs (loop6): This should not happen!! Data will be lost [ 312.455558][ T2563] [ 312.504600][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 312.581037][T29162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29162 comm=syz.4.10809 [ 312.594548][T29162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29162 comm=syz.4.10809 [ 313.010929][ T4145] Bluetooth: hci0: command 0x1003 tx timeout [ 313.017303][ T4636] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.148792][T29221] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.249080][T29234] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.486997][T29263] netlink: 'syz.6.10855': attribute type 1 has an invalid length. [ 313.504430][T29263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.841175][T29309] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 314.028397][T29340] FAT-fs (loop15): unable to read boot sector [ 314.053914][T29343] loop8: detected capacity change from 0 to 2048 [ 314.107966][T29343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.170829][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.282225][T29374] loop8: detected capacity change from 0 to 2048 [ 314.451412][T29374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.477721][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.588172][T29398] __nla_validate_parse: 9 callbacks suppressed [ 314.588186][T29398] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10914'. [ 314.728826][T29414] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 314.879144][T29429] netlink: 'syz.4.10929': attribute type 10 has an invalid length. [ 314.887101][T29429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10929'. [ 314.985823][T29443] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10935'. [ 315.308318][T29474] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10946'. [ 315.692833][T29470] Set syz1 is full, maxelem 65536 reached [ 315.809123][T29504] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10958'. [ 315.819159][T29504] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10958'. [ 315.828823][T29504] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10958'. [ 316.249371][T29570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10983'. [ 316.270349][T29536] cgroup: fork rejected by pids controller in /syz2 [ 316.285469][T29570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.339370][T29632] bond6: (slave batadv1): Opening slave failed [ 316.428917][T29911] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 316.554180][T30161] netlink: 'wÞ£ÿ': attribute type 3 has an invalid length. [ 316.614954][T30230] netlink: 'syz.6.10995': attribute type 12 has an invalid length. [ 316.855705][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 316.855721][ T29] audit: type=1400 audit(323.867:12418): avc: denied { read } for pid=30510 comm="syz.8.11007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.883687][T30514] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11007'. [ 316.946855][ T29] audit: type=1400 audit(323.940:12419): avc: denied { read write } for pid=30556 comm="syz.8.11009" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.970942][ T29] audit: type=1400 audit(323.940:12420): avc: denied { open } for pid=30556 comm="syz.8.11009" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.053684][ T29] audit: type=1400 audit(323.961:12421): avc: denied { create } for pid=30573 comm="syz.7.11010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.073825][ T29] audit: type=1400 audit(324.014:12422): avc: denied { ioctl } for pid=30573 comm="syz.7.11010" path="socket:[91487]" dev="sockfs" ino=91487 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.098579][ T29] audit: type=1400 audit(324.014:12423): avc: denied { module_request } for pid=30573 comm="syz.7.11010" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 317.121937][ T29] audit: type=1400 audit(324.024:12424): avc: denied { sys_module } for pid=30573 comm="syz.7.11010" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 317.149653][ T29] audit: type=1326 audit(324.171:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30596 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7135ddf749 code=0x7ffc0000 [ 317.172824][ T29] audit: type=1326 audit(324.171:12426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30596 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7135ddf749 code=0x7ffc0000 [ 317.196582][ T29] audit: type=1326 audit(324.171:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30596 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7135ddf749 code=0x7ffc0000 [ 317.249197][T30605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.258511][T30605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.769673][T30652] netlink: 51 bytes leftover after parsing attributes in process `syz.2.11038'. [ 317.791615][T30654] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 317.988766][T30677] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.996993][T30677] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.005041][T30677] vhci_hcd: invalid port number 32 [ 318.010240][T30677] vhci_hcd: default hub control req: 0300 vfffa i0020 l0 [ 318.022480][T30687] macvtap0: refused to change device tx_queue_len [ 318.108261][T30703] netlink: 'syz.6.11060': attribute type 1 has an invalid length. [ 318.167037][T30710] loop6: detected capacity change from 0 to 512 [ 318.202909][T30710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.311131][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.342202][T30721] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 318.357644][T30721] SELinux: failed to load policy [ 318.436669][T30731] loop8: detected capacity change from 0 to 1764 [ 318.447444][T30731] iso9660: Unknown parameter 'de' [ 318.685937][T30762] ip6_vti0 speed is unknown, defaulting to 1000 [ 319.388631][T30826] loop6: detected capacity change from 0 to 512 [ 319.404045][T30826] EXT4-fs: Ignoring removed nobh option [ 319.441663][T30826] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 319.470256][T30826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e0ac, mo2=0002] [ 319.478225][T30826] EXT4-fs (loop6): orphan cleanup on readonly fs [ 319.578126][T30826] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.11110: attempt to clear invalid blocks 1024 len 1 [ 319.594691][T30832] __nla_validate_parse: 2 callbacks suppressed [ 319.594748][T30832] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11125'. [ 319.609903][T30832] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11125'. [ 319.650405][T30826] EXT4-fs (loop6): Remounting filesystem read-only [ 319.664991][T30836] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 319.664991][T30836] program syz.4.11115 not setting count and/or reply_len properly [ 319.669799][T30826] EXT4-fs (loop6): 1 truncate cleaned up [ 319.738592][T30826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 319.880301][T12522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 319.959100][T30856] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.985088][T30856] vhci_hcd: invalid port number 96 [ 319.990252][T30856] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 319.998463][ T9] hid_parser_main: 48 callbacks suppressed [ 319.998536][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 320.031988][ T9] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 320.918400][T30883] ip6_vti0 speed is unknown, defaulting to 1000 [ 321.181717][T30911] netlink: 'syz.7.11155': attribute type 4 has an invalid length. [ 321.229794][T30913] netlink: 'syz.7.11155': attribute type 4 has an invalid length. [ 321.239362][ T36] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 321.255081][ T36] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.360856][T30920] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11159'. [ 321.403097][T30920] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 321.459302][T30924] loop6: detected capacity change from 0 to 1764 [ 321.508460][T30924] iso9660: Unknown parameter 'de' [ 321.652503][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 321.652515][ T29] audit: type=1400 audit(328.906:12543): avc: denied { mount } for pid=30939 comm="syz.7.11156" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 321.876371][ T29] audit: type=1400 audit(329.137:12544): avc: denied { mounton } for pid=30949 comm="syz.6.11160" path="/proc/3026/task" dev="proc" ino=92009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 321.940794][T30962] hub 9-0:1.0: USB hub found [ 321.995705][T30962] hub 9-0:1.0: 8 ports detected [ 322.102237][ T9] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 322.118641][ T9] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 322.144299][ T29] audit: type=1326 audit(329.409:12545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 322.168112][ T29] audit: type=1326 audit(329.409:12546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 322.191245][ T29] audit: type=1326 audit(329.409:12547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 322.212376][T30969] ip6_vti0 speed is unknown, defaulting to 1000 [ 322.215183][ T29] audit: type=1326 audit(329.409:12548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 322.244495][ T29] audit: type=1326 audit(329.409:12549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30972 comm="syz.4.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b798f749 code=0x7ffc0000 [ 322.441035][ T29] audit: type=1326 audit(329.724:12550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30980 comm="syz.2.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7135ddf749 code=0x7ffc0000 [ 322.464792][ T29] audit: type=1326 audit(329.724:12551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30980 comm="syz.2.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7135ddf749 code=0x7ffc0000 [ 322.549842][ T29] audit: type=1326 audit(329.735:12552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30980 comm="syz.2.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7135ddf749 code=0x7ffc0000 [ 322.595028][T30995] macsec2: entered promiscuous mode [ 322.602304][T30995] bridge0: port 2(macsec2) entered blocking state [ 322.609044][T30995] bridge0: port 2(macsec2) entered disabled state [ 322.633254][T30995] macsec2: entered allmulticast mode [ 322.647615][T30995] macsec2: left allmulticast mode [ 322.769067][T30997] ip6_vti0 speed is unknown, defaulting to 1000 [ 323.361017][T31020] ip6_vti0 speed is unknown, defaulting to 1000 [ 323.424665][T31043] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.11199'. [ 323.455817][T31043] netlink: zone id is out of range [ 323.461064][T31043] netlink: zone id is out of range [ 323.471424][T31043] netlink: zone id is out of range [ 323.497552][T31043] netlink: set zone limit has 8 unknown bytes [ 323.893066][T31077] loop8: detected capacity change from 0 to 512 [ 323.904889][T31075] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11214'. [ 323.935678][T31075] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11214'. [ 323.952584][T31077] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 324.013148][T31081] hub 9-0:1.0: USB hub found [ 324.044569][T31081] hub 9-0:1.0: 8 ports detected [ 324.061770][T31077] EXT4-fs (loop8): 1 truncate cleaned up [ 324.067944][T31077] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.111129][T26769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.122226][T31091] SELinux: failed to load policy [ 324.295655][T31116] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11233'. [ 324.317856][T31116] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11233'. [ 324.443031][T31128] syzkaller0: entered promiscuous mode [ 324.448533][T31128] syzkaller0: entered allmulticast mode [ 324.851325][T31180] netlink: 256 bytes leftover after parsing attributes in process `syz.8.11262'. [ 326.223207][T31287] ip6_vti0 speed is unknown, defaulting to 1000 [ 326.451887][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 326.451901][ T29] audit: type=1326 audit(333.945:12760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.537544][ T29] audit: type=1326 audit(333.976:12761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.560683][ T29] audit: type=1326 audit(333.976:12762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.583810][ T29] audit: type=1326 audit(333.976:12763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.606884][ T29] audit: type=1326 audit(333.976:12764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.630049][ T29] audit: type=1326 audit(333.976:12765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.653163][ T29] audit: type=1326 audit(333.987:12766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.676256][ T29] audit: type=1326 audit(333.987:12767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.699413][ T29] audit: type=1326 audit(333.987:12768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.722693][ T29] audit: type=1326 audit(333.987:12769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31308 comm="syz.7.11317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea655ff749 code=0x7ffc0000 [ 326.926613][T31338] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11342'. [ 326.935723][T31338] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11342'. [ 326.972200][T31338] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11342'. [ 327.025889][T31341] ip6_vti0 speed is unknown, defaulting to 1000 [ 327.203252][T31356] loop8: detected capacity change from 0 to 128 [ 327.217827][T31356] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.254626][T26769] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.725442][T31410] vlan0: entered allmulticast mode [ 327.730635][T31410] bridge_slave_0: entered allmulticast mode [ 328.310208][T31461] netlink: 'syz.7.11386': attribute type 12 has an invalid length. [ 328.723788][ T8612] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 328.734288][ T8612] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 328.744617][ T8612] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.808344][ T8612] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 328.818744][ T8612] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 328.829203][ T8612] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.847299][T31529] vlan0: entered allmulticast mode [ 328.852583][T31529] bridge_slave_0: entered allmulticast mode [ 328.909915][ T8612] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 328.920461][ T8612] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 328.930841][ T8612] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.013319][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11423'. [ 329.022404][T31549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11423'. [ 329.039851][ T8612] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 329.050306][ T8612] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 329.060664][ T8612] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.076729][ T8593] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.077760][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11423'. [ 329.090484][ T8593] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.093939][T31549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11423'. [ 329.117725][T31543] ip6_vti0 speed is unknown, defaulting to 1000 [ 329.142634][ T8593] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.152942][ T8593] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.214902][ T8612] bridge_slave_1: left allmulticast mode [ 329.220604][ T8612] bridge_slave_1: left promiscuous mode [ 329.227117][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.237897][ T8612] bridge_slave_0: left allmulticast mode [ 329.243722][ T8612] bridge_slave_0: left promiscuous mode [ 329.249382][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.320442][T31573] netlink: 204 bytes leftover after parsing attributes in process `syz.2.11433'. [ 329.345798][ T8612] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.358380][ T8612] bond_slave_0: left promiscuous mode [ 329.365136][ T8612] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.376690][ T8612] bond_slave_1: left promiscuous mode [ 329.383035][ T8612] $Hÿ (unregistering): Released all slaves [ 329.397976][ T8612] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 329.412288][ T8612] vxcan3: left promiscuous mode [ 329.421534][ T8612] bond1 (unregistering): Released all slaves [ 329.543828][ T8612] hsr_slave_0: left promiscuous mode [ 329.557695][ T8612] hsr_slave_1: left promiscuous mode [ 329.577845][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.585249][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.615752][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.623159][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.655571][ T8612] veth1_vlan: left promiscuous mode [ 329.666423][ T8612] veth0_vlan: left promiscuous mode [ 329.700886][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11446'. [ 329.780995][ T8612] team0 (unregistering): Port device team_slave_1 removed [ 329.794920][ T8612] team0 (unregistering): Port device team_slave_0 removed [ 329.852518][T31623] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11455'. [ 329.998905][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 330.015359][ T36] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.058098][T31656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31656 comm=syz.7.11468 [ 330.071381][T31656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31656 comm=syz.7.11468 [ 330.146807][T31660] netlink: 204 bytes leftover after parsing attributes in process `syz.7.11470'. [ 330.348674][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11487'. [ 330.391620][T31685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11481'. [ 330.409841][T31685] IPVS: Error connecting to the multicast addr [ 330.429146][T31690] netlink: 204 bytes leftover after parsing attributes in process `syz.4.11484'. [ 330.475469][ T36] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 330.495940][ T36] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.828223][T31722] ================================================================== [ 330.836343][T31722] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 330.845286][T31722] [ 330.847602][T31722] read to 0xffff88810c202920 of 4 bytes by task 31706 on cpu 1: [ 330.855230][T31722] selinux_inode_permission+0x334/0x740 [ 330.860785][T31722] security_inode_permission+0x6d/0xb0 [ 330.866265][T31722] inode_permission+0x106/0x310 [ 330.871150][T31722] link_path_walk+0x162/0x900 [ 330.875855][T31722] path_openat+0x1de/0x2170 [ 330.880360][T31722] do_filp_open+0x109/0x230 [ 330.884871][T31722] io_openat2+0x272/0x390 [ 330.889223][T31722] io_openat+0x1b/0x30 [ 330.893307][T31722] __io_issue_sqe+0xfe/0x2e0 [ 330.897919][T31722] io_issue_sqe+0x56/0xa80 [ 330.902354][T31722] io_submit_sqes+0x675/0x1060 [ 330.907129][T31722] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 330.912686][T31722] __x64_sys_io_uring_enter+0x78/0x90 [ 330.918073][T31722] x64_sys_call+0x2df0/0x3000 [ 330.922763][T31722] do_syscall_64+0xd2/0x200 [ 330.927277][T31722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.933172][T31722] [ 330.935518][T31722] write to 0xffff88810c202920 of 4 bytes by task 31722 on cpu 0: [ 330.943231][T31722] selinux_inode_permission+0x3ac/0x740 [ 330.948786][T31722] security_inode_permission+0x6d/0xb0 [ 330.954248][T31722] inode_permission+0x106/0x310 [ 330.959142][T31722] link_path_walk+0x162/0x900 [ 330.963862][T31722] path_openat+0x1de/0x2170 [ 330.968370][T31722] do_filp_open+0x109/0x230 [ 330.972975][T31722] io_openat2+0x272/0x390 [ 330.977310][T31722] io_openat+0x1b/0x30 [ 330.981383][T31722] __io_issue_sqe+0xfe/0x2e0 [ 330.985981][T31722] io_issue_sqe+0x56/0xa80 [ 330.990409][T31722] io_wq_submit_work+0x3f7/0x5f0 [ 330.995359][T31722] io_worker_handle_work+0x44e/0x9b0 [ 331.000660][T31722] io_wq_worker+0x22e/0x860 [ 331.005177][T31722] ret_from_fork+0x122/0x1b0 [ 331.009775][T31722] ret_from_fork_asm+0x1a/0x30 [ 331.014547][T31722] [ 331.016868][T31722] value changed: 0x00000001 -> 0x00000000 [ 331.022585][T31722] [ 331.024910][T31722] Reported by Kernel Concurrency Sanitizer on: [ 331.031072][T31722] CPU: 0 UID: 0 PID: 31722 Comm: iou-wrk-31706 Not tainted syzkaller #0 PREEMPT(voluntary) [ 331.041175][T31722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.051268][T31722] ================================================================== [ 333.577656][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 333.577672][ T29] audit: type=1400 audit(341.430:13038): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 333.607465][ T29] audit: type=1400 audit(341.430:13039): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1