last executing test programs: 6m57.447493673s ago: executing program 0 (id=1261): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) setsockopt$llc_int(r0, 0x6a, 0x5, 0x0, 0x0) 6m57.437452703s ago: executing program 0 (id=1262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000100)="dbef", 0x2, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x6815}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x6, 0x5, 0x2, 0xe2, 0xc1, 0x8, 0xd1, 0x4, 0xf, 0x2, 0xd2, 0x53, 0xf}, 0xe) recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/4096, 0x1000}, 0x9}], 0x1, 0x0, 0x0) 6m56.510839709s ago: executing program 0 (id=1333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020000000000000000100000004000180100002800c0001800800010003"], 0x28}}, 0x0) 6m56.439582059s ago: executing program 0 (id=1339): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000080)='./file0/file0\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0xc, 0x0, {r0}}, 0x20) 6m56.390553399s ago: executing program 0 (id=1345): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r1) 6m56.176052091s ago: executing program 0 (id=1360): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 6m56.148249341s ago: executing program 32 (id=1360): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 6m55.891788313s ago: executing program 4 (id=1373): creat(&(0x7f0000000300)='./file0\x00', 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd']) 6m55.864123513s ago: executing program 4 (id=1374): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6m55.831137203s ago: executing program 4 (id=1377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4000, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x30, 0x45}, 0x0) 6m55.803021243s ago: executing program 4 (id=1379): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000080)='./file0/file0\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0xc, 0x0, {r0}}, 0x20) 6m55.780947273s ago: executing program 4 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mq_notify(0xffffffffffffffff, 0x0) 6m55.510376285s ago: executing program 4 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) 6m55.510252875s ago: executing program 33 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) 4m53.675477858s ago: executing program 1 (id=6525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) 4m53.578906909s ago: executing program 1 (id=6533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m52.962647843s ago: executing program 1 (id=6535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xc5fc, 0x40, 0x6, 0x4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x66) 4m52.778291204s ago: executing program 1 (id=6537): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 4m52.627653775s ago: executing program 1 (id=6548): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') getpgrp(0x0) 4m51.81582728s ago: executing program 1 (id=6549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 4m51.81573153s ago: executing program 34 (id=6549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 17.69199949s ago: executing program 3 (id=17703): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0xffaf) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) 17.65077721s ago: executing program 3 (id=17707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000000), 0x6, 0x507, &(0x7f0000000680)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) stat(&(0x7f0000000740)='./file0\x00', 0x0) 17.61785598s ago: executing program 3 (id=17708): r0 = socket$inet6(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x76583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) 17.58375728s ago: executing program 3 (id=17712): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1c5008, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x172) 17.504287191s ago: executing program 3 (id=17714): unshare(0x6a040000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e20, @empty}], 0x10) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 17.388321091s ago: executing program 3 (id=17721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) 17.357463092s ago: executing program 35 (id=17721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) 2.660694613s ago: executing program 2 (id=18284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 2.622626284s ago: executing program 2 (id=18286): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000f80)=ANY=[@ANYBLOB="757466382c6869646500757466383a0176558a0bca7c0a5fba6a2c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d61703d6e6f726d616c4173657373696f6e3d30783030303030303030303030b6303033372c756e686964652c756e686964652c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d61703d6e6f726d616c2c6e6f726f636b2c00"], 0x2, 0x6b1, &(0x7f0000001100)="$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") r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) shutdown(r1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r0, 0x0, 0xffffffff000) 877.998605ms ago: executing program 8 (id=18320): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 838.330925ms ago: executing program 7 (id=18321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 838.062905ms ago: executing program 8 (id=18322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @dev}]}}}}}}}}, 0x0) 730.479536ms ago: executing program 8 (id=18323): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 694.146906ms ago: executing program 5 (id=18324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) 682.761886ms ago: executing program 7 (id=18325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffdfc, @rand_addr=' \x01\x00'}, 0x1c) 632.243006ms ago: executing program 8 (id=18327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a3000000000050005000200000005000100060000001c0007800800134000000002080006400000010008000840"], 0x64}}, 0x0) 631.916116ms ago: executing program 2 (id=18328): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@i_version}, {@nogrpid}, {@barrier}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x3214e80600, 0x0, 0xfffffffffdffffff}) 615.360856ms ago: executing program 7 (id=18329): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) unshare(0x600) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ppoll(&(0x7f0000000280)=[{r1, 0x701}], 0x1, 0x0, 0x0, 0x0) 539.652187ms ago: executing program 7 (id=18330): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 499.165957ms ago: executing program 5 (id=18331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 428.180787ms ago: executing program 7 (id=18332): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000010000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8}, 0x50) 426.956127ms ago: executing program 8 (id=18333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) 357.086598ms ago: executing program 2 (id=18334): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7GtwjAYBOB7eQlJCsRKsAENm7APFQ1TULEGJWMEQWyYACGk7yvs8y+dLYev+nul4bn+l9M26zk0ZbC8DJmmsdbGdG3OSRbHW/rHpN60X5Vw7ZPNWPvtvB2m7v1wszt97mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DvuAQAA//8yUgpN") wait4(r0, 0x0, 0x2, 0x0) setpriority(0x0, r0, 0x2a14b58) 356.665828ms ago: executing program 7 (id=18344): r0 = socket(0x2, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x97}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0xaaf1, 0x3, 0x8, 0xe9e, 0x1ff}, &(0x7f0000000240)=0x14) 329.887218ms ago: executing program 8 (id=18335): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0xdc) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 321.286908ms ago: executing program 6 (id=18336): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) 104.587699ms ago: executing program 2 (id=18337): r0 = io_uring_setup(0x61d8, &(0x7f0000000a40)={0x0, 0x5, 0x800, 0xfffffffe, 0x40003be}) io_setup(0x8, &(0x7f0000000680)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 97.030709ms ago: executing program 6 (id=18338): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) 63.260999ms ago: executing program 6 (id=18339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) 62.76024ms ago: executing program 6 (id=18340): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @empty, 0x3}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r2, &(0x7f0000000180)=""/195, 0xc3, 0x100) 0s ago: executing program 6 (id=18341): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): tected capacity change from 0 to 2048 [ 400.766911][ T5669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.817425][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.849137][ T5683] loop6: detected capacity change from 0 to 164 [ 400.857568][ T5681] ip6tnl0: Caught tx_queue_len zero misconfig [ 400.877124][ T5683] syz.6.15350: attempt to access beyond end of device [ 400.877124][ T5683] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 400.895884][ T5683] syz.6.15350: attempt to access beyond end of device [ 400.895884][ T5683] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 401.020323][ T5699] wg1: entered promiscuous mode [ 401.026444][ T5699] wg1: entered allmulticast mode [ 401.087522][ T5711] hub 1-0:1.0: USB hub found [ 401.094288][ T5711] hub 1-0:1.0: 8 ports detected [ 401.226332][ T5735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5735 comm=syz.6.15386 [ 401.240274][ T5735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5735 comm=syz.6.15386 [ 401.441729][ T5759] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 401.455867][ T5759] SELinux: failed to load policy [ 401.527197][ T5765] wg1: entered promiscuous mode [ 401.533155][ T5765] wg1: entered allmulticast mode [ 401.577677][ T5778] atomic_op ffff8881048d8d28 conn xmit_atomic 0000000000000000 [ 401.625309][ T5785] netlink: 92 bytes leftover after parsing attributes in process `syz.3.15400'. [ 401.635532][ T5785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15400'. [ 401.828479][ T5806] SELinux: failed to load policy [ 402.161556][ T5864] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 402.251182][ T3760] Bluetooth: hci0: command 0x1003 tx timeout [ 402.253607][ T5432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 402.399509][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 402.399524][ T29] audit: type=1326 audit(378.224:32342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5871 comm="syz.5.15440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 402.464767][ T5896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5896 comm=syz.3.15450 [ 402.580668][ T29] audit: type=1326 audit(378.392:32343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 402.605211][ T29] audit: type=1326 audit(378.392:32344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 402.630416][ T29] audit: type=1326 audit(378.392:32345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 402.655421][ T29] audit: type=1326 audit(378.392:32346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 402.679915][ T29] audit: type=1326 audit(378.420:32347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.15464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 402.786166][ T5919] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.796474][ T5919] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.822297][ T29] audit: type=1400 audit(378.617:32348): avc: denied { setopt } for pid=5920 comm="syz.3.15462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.876688][ T5919] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.887231][ T5919] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.937803][ T5919] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.948573][ T5919] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.001068][ T5919] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.011395][ T5919] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.043518][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15471'. [ 403.063848][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15471'. [ 403.093113][ T5316] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.102363][ T5316] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.117974][ T5316] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.128593][ T5316] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.200678][ T5316] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.209996][ T5316] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.219318][ T5316] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.228184][ T5316] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.252032][ T5942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15473'. [ 403.477110][ T5978] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15490'. [ 403.506928][ T5982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5982 comm=syz.5.15492 [ 403.527615][ T5984] loop6: detected capacity change from 0 to 1024 [ 403.551413][ T5984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.586126][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.626185][ T5997] loop6: detected capacity change from 0 to 2048 [ 403.661577][ T6003] netlink: 'syz.3.15501': attribute type 1 has an invalid length. [ 403.670184][ T6003] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15501'. [ 403.684250][ T5997] Alternate GPT is invalid, using primary GPT. [ 403.691823][ T5997] loop6: p1 p2 p3 [ 403.743274][ T6007] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15503'. [ 403.782671][ T6014] netlink: 'syz.5.15506': attribute type 1 has an invalid length. [ 403.817381][ T6016] ALSA: seq fatal error: cannot create timer (-19) [ 403.923089][ T29] audit: type=1400 audit(379.646:32349): avc: denied { mounton } for pid=6038 comm="syz.6.15517" path="/2778/file0" dev="tmpfs" ino=14311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 404.226011][ T6094] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 404.332884][ T29] audit: type=1400 audit(380.029:32350): avc: denied { connect } for pid=6112 comm="syz.7.15553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.367252][ T6115] lo speed is unknown, defaulting to 1000 [ 404.400208][ T6118] SELinux: policydb version 0 does not match my version range 15-35 [ 404.411496][ T29] audit: type=1400 audit(380.057:32351): avc: denied { getopt } for pid=6112 comm="syz.7.15553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.455789][ T6115] vcan0 speed is unknown, defaulting to 1000 [ 404.467790][ T6118] SELinux: failed to load policy [ 404.540482][ T6133] netlink: 176 bytes leftover after parsing attributes in process `gtp'. [ 404.579857][ T6138] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 404.579857][ T6138] program syz.6.15563 not setting count and/or reply_len properly [ 404.669861][ T6148] vxlan0: entered promiscuous mode [ 404.806997][ T6162] netlink: 'syz.6.15572': attribute type 16 has an invalid length. [ 405.200155][ T6198] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 405.227738][ T6200] netlink: 'syz.5.15590': attribute type 1 has an invalid length. [ 405.511349][ T6205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6205 comm=syz.5.15602 [ 405.614309][ T6221] netlink: 'syz.3.15599': attribute type 3 has an invalid length. [ 405.763272][ T6244] netlink: 'syz.5.15610': attribute type 3 has an invalid length. [ 405.773625][ T6246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6246 comm=syz.3.15611 [ 405.811891][ T6251] netlink: 'syz.6.15614': attribute type 1 has an invalid length. [ 406.099532][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 406.163272][ T6295] netlink: 'syz.5.15633': attribute type 10 has an invalid length. [ 406.172568][ T6295] ipvlan0: entered allmulticast mode [ 406.178362][ T6295] veth0_vlan: entered allmulticast mode [ 406.186286][ T6295] team0: Device ipvlan0 failed to register rx_handler [ 406.281429][ T6311] netlink: 'syz.3.15641': attribute type 20 has an invalid length. [ 406.290139][ T6311] netlink: 'syz.3.15641': attribute type 20 has an invalid length. [ 406.416311][ T6329] lo speed is unknown, defaulting to 1000 [ 406.460114][ T6342] SELinux: policydb version 0 does not match my version range 15-35 [ 406.469716][ T6342] SELinux: failed to load policy [ 406.474676][ T6329] vcan0 speed is unknown, defaulting to 1000 [ 406.697236][ T36] hid_parser_main: 31 callbacks suppressed [ 406.697255][ T36] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 406.711496][ T36] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 406.737681][ T36] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 406.745994][ T36] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 406.809304][ T6405] lo speed is unknown, defaulting to 1000 [ 406.844462][ T6405] vcan0 speed is unknown, defaulting to 1000 [ 406.853641][ T6417] SELinux: policydb version 0 does not match my version range 15-35 [ 406.862794][ T6417] SELinux: failed to load policy [ 407.171155][ T6454] loop6: detected capacity change from 0 to 512 [ 407.192961][ T6454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.226359][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.250357][ T6462] loop6: detected capacity change from 0 to 512 [ 407.279027][ T6467] __nla_validate_parse: 8 callbacks suppressed [ 407.279044][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15682'. [ 407.493230][ T6503] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 407.746517][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 407.746532][ T29] audit: type=1326 audit(383.219:32553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9e62f6567 code=0x7ffc0000 [ 407.782420][ T29] audit: type=1326 audit(383.228:32554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9e629b779 code=0x7ffc0000 [ 407.813055][ T29] audit: type=1326 audit(383.228:32555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 407.850819][ T29] audit: type=1326 audit(383.238:32556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9e62f6567 code=0x7ffc0000 [ 407.878588][ T29] audit: type=1326 audit(383.238:32557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9e629b779 code=0x7ffc0000 [ 407.903774][ T29] audit: type=1326 audit(383.238:32558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 407.930071][ T29] audit: type=1326 audit(383.256:32559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9e62f6567 code=0x7ffc0000 [ 407.955469][ T29] audit: type=1326 audit(383.256:32560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9e629b779 code=0x7ffc0000 [ 407.980561][ T29] audit: type=1326 audit(383.256:32561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 408.006127][ T29] audit: type=1326 audit(383.266:32562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.15693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9e62f6567 code=0x7ffc0000 [ 408.061660][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15705'. [ 408.072759][ T6530] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15702'. [ 408.193624][ T6563] SELinux: ebitmap start bit (4043309158) is not a multiple of the map unit size (64) [ 408.203945][ T6563] SELinux: failed to load policy [ 408.361094][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15725'. [ 408.375103][ T6601] SELinux: ebitmap start bit (4043309158) is not a multiple of the map unit size (64) [ 408.389767][ T6601] SELinux: failed to load policy [ 408.438451][ T6612] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6612 comm=syz.5.15731 [ 408.477610][ T36] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 408.485762][ T36] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 408.505666][ T36] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 408.516367][ T36] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 408.570383][ T6632] netlink: 'syz.5.15739': attribute type 16 has an invalid length. [ 408.580016][ T6632] netlink: 'syz.5.15739': attribute type 17 has an invalid length. [ 408.636284][ T6632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.852454][ T6687] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15758'. [ 408.862151][ T6687] tipc: Enabling of bearer rejected, failed to enable media [ 408.943354][ T6697] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 409.127374][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15770'. [ 409.159470][ T6719] vxlan0: entered promiscuous mode [ 409.179509][ T5329] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.188997][ T5329] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.207696][ T5329] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.229087][ T5329] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.489171][ T6751] xt_hashlimit: max too large, truncated to 1048576 [ 409.500306][ T6751] Cannot find add_set index 0 as target [ 409.697584][ T6762] SELinux: failed to load policy [ 409.781912][ T6774] dvmrp1: entered allmulticast mode [ 409.793128][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 409.793578][ T6774] dvmrp1: left allmulticast mode [ 409.802545][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 409.803068][ T36] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x3 [ 409.826519][ T36] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 410.001032][ T6817] lo speed is unknown, defaulting to 1000 [ 410.008217][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15808'. [ 410.023181][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15808'. [ 410.153397][ T6817] vcan0 speed is unknown, defaulting to 1000 [ 410.332510][ T6880] netlink: 'syz.3.15823': attribute type 16 has an invalid length. [ 410.340698][ T6880] netlink: 'syz.3.15823': attribute type 17 has an invalid length. [ 410.394856][ T6880] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 410.942670][ T6935] loop7: detected capacity change from 0 to 16384 [ 411.092299][ T6944] loop7: detected capacity change from 16384 to 0 [ 411.099531][ C0] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 2 [ 411.247193][ T6980] loop6: detected capacity change from 0 to 512 [ 411.255525][ T6980] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 411.279356][ T6980] EXT4-fs (loop6): 1 truncate cleaned up [ 411.293260][ T6980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.341542][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15871'. [ 411.355264][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.362670][ T6999] program syz.5.15873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.589174][ T7052] netlink: 'syz.5.15889': attribute type 22 has an invalid length. [ 411.598728][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15889'. [ 411.637671][ T7052] netlink: 'syz.5.15889': attribute type 22 has an invalid length. [ 411.767911][ T7081] loop6: detected capacity change from 0 to 512 [ 411.776691][ T7081] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 411.792554][ T7081] EXT4-fs (loop6): 1 truncate cleaned up [ 411.801777][ T7081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.849876][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.887465][ T7099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.899746][ T7099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.921699][ T7101] bond5: entered promiscuous mode [ 411.927499][ T7101] bond5: entered allmulticast mode [ 411.933121][ T7101] 8021q: adding VLAN 0 to HW filter on device bond5 [ 411.945461][ T7101] bond5 (unregistering): Released all slaves [ 411.963076][ T7099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.976222][ T7099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.068332][ T7099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.079449][ T7099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.146616][ T7099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.159841][ T7099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.210169][ T7204] netlink: 'syz.6.15911': attribute type 4 has an invalid length. [ 412.283929][ T5329] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.293237][ T5329] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.325192][ T5329] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.334029][ T5329] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.344857][ T5329] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.354709][ T5329] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.365782][ T5329] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.375113][ T5329] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.547274][ T7244] io-wq is not configured for unbound workers [ 412.894220][ T7261] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.912550][ T7261] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.915179][ T7263] loop6: detected capacity change from 0 to 128 [ 412.931924][ T7263] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.954411][ T7261] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.965205][ T7261] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.977316][ T6594] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.028926][ T7261] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.039133][ T7261] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.052813][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.060799][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.068570][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.076200][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.083879][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.092036][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.101208][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.109461][ T29] kauditd_printk_skb: 911 callbacks suppressed [ 413.109477][ T29] audit: type=1326 audit(388.233:33474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f016b11b779 code=0x7ffc0000 [ 413.116510][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.116540][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.143209][ T29] audit: type=1326 audit(388.279:33475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f016b176567 code=0x7ffc0000 [ 413.150032][ T3410] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 413.159422][ T29] audit: type=1326 audit(388.279:33476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f016b11b779 code=0x7ffc0000 [ 413.217371][ T29] audit: type=1326 audit(388.279:33477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f016b17f6c9 code=0x7ffc0000 [ 413.243604][ T3410] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 413.243973][ T29] audit: type=1326 audit(388.317:33478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f016b176567 code=0x7ffc0000 [ 413.280963][ T29] audit: type=1326 audit(388.317:33479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f016b11b779 code=0x7ffc0000 [ 413.305285][ T29] audit: type=1326 audit(388.317:33480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f016b17f6c9 code=0x7ffc0000 [ 413.329089][ T29] audit: type=1326 audit(388.317:33481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f016b176567 code=0x7ffc0000 [ 413.353041][ T29] audit: type=1326 audit(388.317:33482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f016b11b779 code=0x7ffc0000 [ 413.377740][ T29] audit: type=1326 audit(388.317:33483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.2.15921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f016b17f6c9 code=0x7ffc0000 [ 413.405019][ T7261] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.415102][ T7261] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.464536][ T5329] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.473710][ T5329] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.494322][ T7304] loop6: detected capacity change from 0 to 128 [ 413.503972][ T5329] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.513177][ T5329] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.543904][ T7304] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.578755][ T5948] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.588281][ T5948] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.598050][ T6594] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.599952][ T5948] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.617511][ T5948] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.735445][ T7345] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 413.735445][ T7345] program syz.5.15956 not setting count and/or reply_len properly [ 414.033211][ T7399] lo speed is unknown, defaulting to 1000 [ 414.053971][ T7407] ref_ctr_offset mismatch. inode: 0x3512 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 414.105627][ T7399] vcan0 speed is unknown, defaulting to 1000 [ 414.462332][ T7489] lo speed is unknown, defaulting to 1000 [ 414.513635][ T7489] vcan0 speed is unknown, defaulting to 1000 [ 414.741969][ T7551] SELinux: ebitmap: truncated map [ 414.752403][ T7551] SELinux: failed to load policy [ 414.868809][ T7566] usb usb8: usbfs: process 7566 (syz.3.16032) did not claim interface 0 before use [ 414.952482][ T7570] __nla_validate_parse: 7 callbacks suppressed [ 414.952497][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16034'. [ 415.337467][ T7609] netlink: 'syz.6.16052': attribute type 1 has an invalid length. [ 415.841692][ T7654] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 416.299916][ T7696] netlink: 7 bytes leftover after parsing attributes in process `syz.3.16092'. [ 416.333285][ T7701] netlink: 'syz.3.16094': attribute type 2 has an invalid length. [ 416.341496][ T7701] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16094'. [ 416.396892][ T7708] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16098'. [ 416.407005][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16098'. [ 416.423172][ T7706] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 416.596894][ T7731] FAT-fs (loop13): unable to read boot sector [ 417.005575][ T7750] lo speed is unknown, defaulting to 1000 [ 417.021844][ T7765] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16113'. [ 417.031130][ T7765] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16113'. [ 417.054801][ T7765] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16113'. [ 417.060888][ T7750] vcan0 speed is unknown, defaulting to 1000 [ 417.064270][ T7765] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16113'. [ 417.084208][ T7770] netlink: 14 bytes leftover after parsing attributes in process `syz.5.16118'. [ 417.102362][ T7770] hsr_slave_0: left promiscuous mode [ 417.131900][ T7770] hsr_slave_1: left promiscuous mode [ 417.309930][ T7810] FAT-fs (loop11): unable to read boot sector [ 417.943177][ T7896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7896 comm=syz.3.16166 [ 417.956726][ T7896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7896 comm=syz.3.16166 [ 417.995854][ T7902] vlan0: entered allmulticast mode [ 418.168473][ T7936] veth4: entered promiscuous mode [ 418.174921][ T7936] veth4: entered allmulticast mode [ 418.270080][ T7969] geneve3: entered promiscuous mode [ 418.277317][ T5948] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 45815 - 0 [ 418.286372][ T5948] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 45815 - 0 [ 418.326868][ T5948] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 45815 - 0 [ 418.346734][ T5948] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 45815 - 0 [ 418.597855][ T36] IPVS: starting estimator thread 0... [ 418.639458][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 418.639474][ T29] audit: type=1400 audit(393.405:33767): avc: denied { accept } for pid=8000 comm="syz.6.16205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.703739][ T7996] IPVS: using max 3072 ests per chain, 153600 per kthread [ 418.978417][ T8022] netlink: 'syz.2.16213': attribute type 10 has an invalid length. [ 419.298567][ T29] audit: type=1326 audit(394.032:33768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.7.16230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x0 [ 419.419353][ T29] audit: type=1326 audit(394.135:33769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.16233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 419.493195][ T29] audit: type=1326 audit(394.172:33770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.16233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 419.519531][ T29] audit: type=1326 audit(394.172:33771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.16233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 419.543865][ T29] audit: type=1326 audit(394.172:33772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.16233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 419.567533][ T29] audit: type=1326 audit(394.182:33773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.16233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 419.590887][ T29] audit: type=1326 audit(394.182:33774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.16233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 419.615415][ T29] audit: type=1326 audit(394.182:33775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.16233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 419.638829][ T29] audit: type=1326 audit(394.182:33776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.16233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f176e5ff6c9 code=0x7ffc0000 [ 419.888187][ T8106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 419.994068][ T8129] geneve3: entered promiscuous mode [ 420.008023][ T5389] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 56552 - 0 [ 420.018992][ T5389] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 56552 - 0 [ 420.047993][ T5389] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 56552 - 0 [ 420.061159][ T8137] bridge0: entered allmulticast mode [ 420.068498][ T5389] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 56552 - 0 [ 420.085404][ T8137] pim6reg: entered allmulticast mode [ 421.003861][ T8238] __nla_validate_parse: 6 callbacks suppressed [ 421.003925][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16297'. [ 421.019210][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16297'. [ 421.429687][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16317'. [ 421.653275][ T8313] netlink: 536 bytes leftover after parsing attributes in process `syz.7.16324'. [ 421.663177][ T8313] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16324'. [ 421.741280][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16330'. [ 421.750658][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16330'. [ 421.778497][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16331'. [ 421.788031][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16331'. [ 421.798103][ T8328] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 422.032123][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16342'. [ 422.818884][ T8433] vcan0: tx address claim with dlc 0 [ 423.179431][ T8467] lo speed is unknown, defaulting to 1000 [ 423.286856][ T8467] vcan0 speed is unknown, defaulting to 1000 [ 423.600258][ T8513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8513 comm=syz.7.16398 [ 424.105012][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 424.105028][ T29] audit: type=1107 audit(398.522:33899): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ä' [ 424.207904][ T8601] ip6gre1: entered allmulticast mode [ 424.252349][ T8605] sd 0:0:1:0: device reset [ 424.451922][ T8616] lo speed is unknown, defaulting to 1000 [ 424.520455][ T8616] vcan0 speed is unknown, defaulting to 1000 [ 424.585576][ T8630] lo speed is unknown, defaulting to 1000 [ 424.642189][ T8630] vcan0 speed is unknown, defaulting to 1000 [ 424.692673][ T29] audit: type=1400 audit(399.083:33900): avc: denied { create } for pid=8659 comm="syz.3.16448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 424.754081][ T29] audit: type=1400 audit(399.102:33901): avc: denied { bind } for pid=8659 comm="syz.3.16448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 424.875162][ T29] audit: type=1326 audit(399.252:33902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8686 comm="syz.6.16453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 424.906044][ T29] audit: type=1326 audit(399.252:33903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8686 comm="syz.6.16453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 424.938193][ T29] audit: type=1326 audit(399.308:33904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8686 comm="syz.6.16453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 424.964243][ T29] audit: type=1326 audit(399.308:33905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8686 comm="syz.6.16453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 425.015319][ T29] audit: type=1326 audit(399.364:33906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8686 comm="syz.6.16453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 425.053606][ T29] audit: type=1400 audit(399.411:33907): avc: denied { read } for pid=8704 comm="syz.3.16459" name="/" dev="configfs" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.077811][ T29] audit: type=1400 audit(399.411:33908): avc: denied { open } for pid=8704 comm="syz.3.16459" path="/2742/file0" dev="configfs" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.185417][ T8720] lo speed is unknown, defaulting to 1000 [ 425.218100][ T8720] vcan0 speed is unknown, defaulting to 1000 [ 425.283569][ T8733] netem: incorrect gi model size [ 425.289604][ T8733] netem: change failed [ 425.370855][ T8758] lo speed is unknown, defaulting to 1000 [ 425.408077][ T8766] pimreg: entered allmulticast mode [ 425.417990][ T8766] pimreg: left allmulticast mode [ 425.428644][ T8771] netlink: 'syz.5.16475': attribute type 1 has an invalid length. [ 425.455306][ T8771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.466348][ T8758] vcan0 speed is unknown, defaulting to 1000 [ 425.500401][ T8771] bond1: (slave geneve2): making interface the new active one [ 425.526675][ T8771] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 425.839279][ T8868] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 426.080896][ T8903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 426.165067][ T8916] SELinux: failed to load policy [ 426.352233][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.369166][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.542616][ T8956] __nla_validate_parse: 7 callbacks suppressed [ 426.542631][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16530'. [ 426.564939][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16531'. [ 426.584930][ T8963] xt_hashlimit: max too large, truncated to 1048576 [ 426.595015][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16533'. [ 426.607645][ T5329] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.622220][ T5329] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.633624][ T5329] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.662993][ T5329] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.751444][ T8996] sg_write: data in/out 3238986/120 bytes for SCSI command 0x0-- guessing data in; [ 426.751444][ T8996] program syz.6.16548 not setting count and/or reply_len properly [ 426.890159][ T9018] netlink: 'syz.2.16558': attribute type 12 has an invalid length. [ 427.015219][ T9034] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.086163][ T9042] netlink: 'syz.6.16572': attribute type 3 has an invalid length. [ 427.183296][ T9058] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.210044][ T9046] 9p: Unknown access argument ¿: -22 [ 427.229181][ T9063] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 427.279961][ T9058] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.320946][ T9073] lo speed is unknown, defaulting to 1000 [ 427.346796][ T9058] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.359547][ T9073] vcan0 speed is unknown, defaulting to 1000 [ 427.394500][ T9058] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.452839][ T5948] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.465495][ T5316] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.480644][ T5948] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.503099][ T5948] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.027507][ T9200] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16619'. [ 428.051348][ T9202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16620'. [ 428.404945][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16640'. [ 428.416785][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16640'. [ 428.429859][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16640'. [ 428.440753][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16640'. [ 428.582023][ T9272] lo speed is unknown, defaulting to 1000 [ 428.596807][ T9275] netlink: 'syz.3.16649': attribute type 16 has an invalid length. [ 428.607382][ T9275] netlink: 'syz.3.16649': attribute type 17 has an invalid length. [ 428.618745][ T9278] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 428.650782][ T9275] 0ªX¹¦À: left allmulticast mode [ 428.656285][ T9275] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 428.683493][ T9272] vcan0 speed is unknown, defaulting to 1000 [ 428.736898][ T9282] sd 0:0:1:0: device reset [ 428.877444][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16661'. [ 429.364327][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 429.364359][ T29] audit: type=1326 audit(409.740:34078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.400272][ T29] audit: type=1326 audit(409.740:34079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.424302][ T29] audit: type=1326 audit(409.740:34080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.449763][ T29] audit: type=1326 audit(409.740:34081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.475120][ T29] audit: type=1326 audit(409.740:34082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.475187][ T5432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 429.499552][ T29] audit: type=1326 audit(409.740:34083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.506028][ T3760] Bluetooth: hci0: command 0x1003 tx timeout [ 429.533047][ T29] audit: type=1326 audit(409.740:34084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.564408][ T29] audit: type=1326 audit(409.740:34085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.589312][ T29] audit: type=1326 audit(409.772:34086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 429.618141][ T29] audit: type=1326 audit(409.772:34087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.7.16690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 430.747546][ T9510] lo speed is unknown, defaulting to 1000 [ 430.826286][ T9510] vcan0 speed is unknown, defaulting to 1000 [ 431.266324][ T9577] lo speed is unknown, defaulting to 1000 [ 431.302350][ T9577] vcan0 speed is unknown, defaulting to 1000 [ 431.302852][ T9585] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 431.622037][ T9644] netlink: 'syz.2.16764': attribute type 1 has an invalid length. [ 431.630905][ T9644] __nla_validate_parse: 1 callbacks suppressed [ 431.630921][ T9644] netlink: 244 bytes leftover after parsing attributes in process `syz.2.16764'. [ 432.080532][ T9683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16779'. [ 432.464928][ T9717] netlink: 'syz.2.16794': attribute type 13 has an invalid length. [ 432.579447][ T5948] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.589433][ T5948] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.609275][ T5948] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.618001][ T5948] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.715202][ T9745] netlink: 'syz.5.16806': attribute type 16 has an invalid length. [ 432.723135][ T9745] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16806'. [ 432.770562][ T9754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16810'. [ 432.951473][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16819'. [ 433.032069][ T9798] SELinux: policydb version -2036594179 does not match my version range 15-35 [ 433.049683][ T9798] SELinux: failed to load policy [ 433.560890][ T9863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9863 comm=syz.7.16855 [ 433.575355][ T9863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9863 comm=syz.7.16855 [ 433.677337][ T9869] loop9: detected capacity change from 0 to 7 [ 433.684714][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 433.720344][ T9869] Buffer I/O error on dev loop9, logical block 0, async page read [ 433.730381][ T9869] loop9: unable to read partition table [ 433.737371][ T9869] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 433.737371][ T9869] ) failed (rc=-5) [ 433.951807][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16870'. [ 434.172704][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 434.172720][ T29] audit: type=1400 audit(414.793:34246): avc: denied { create } for pid=9918 comm="syz.2.16877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.204576][ T29] audit: type=1400 audit(414.824:34247): avc: denied { create } for pid=9916 comm="syz.6.16876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 434.228432][ T29] audit: type=1400 audit(414.824:34248): avc: denied { setopt } for pid=9916 comm="syz.6.16876" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 434.253376][ T29] audit: type=1400 audit(414.824:34249): avc: denied { write } for pid=9916 comm="syz.6.16876" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 434.324804][ T29] audit: type=1400 audit(414.824:34250): avc: denied { mounton } for pid=9920 comm="syz.7.16878" path="/2285/bus" dev="tmpfs" ino=11726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 434.349556][ T29] audit: type=1400 audit(414.877:34251): avc: denied { ioctl } for pid=9918 comm="syz.2.16877" path="socket:[132026]" dev="sockfs" ino=132026 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.376279][ T29] audit: type=1400 audit(414.877:34252): avc: denied { bind } for pid=9918 comm="syz.2.16877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.396283][ T29] audit: type=1400 audit(414.877:34253): avc: denied { write } for pid=9918 comm="syz.2.16877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.418004][ T29] audit: type=1400 audit(414.877:34254): avc: denied { read } for pid=9922 comm="syz.6.16879" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.444887][ T29] audit: type=1400 audit(414.877:34255): avc: denied { open } for pid=9922 comm="syz.6.16879" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.551586][ T9938] SELinux: failed to load policy [ 434.680625][ T9950] can0: slcan on ttyS3. [ 434.697974][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.708370][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.758644][ T9960] syzkaller1: entered promiscuous mode [ 434.764559][ T9960] syzkaller1: entered allmulticast mode [ 434.780720][ T9950] can0 (unregistered): slcan off ttyS3. [ 434.850246][ T5389] Bluetooth: hci0: Frame reassembly failed (-84) [ 434.957370][ T9998] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16904'. [ 435.023922][T10008] netlink: 176 bytes leftover after parsing attributes in process `syz.7.16909'. [ 435.271240][T10026] netlink: 'syz.6.16917': attribute type 21 has an invalid length. [ 435.279416][T10026] netlink: 128 bytes leftover after parsing attributes in process `syz.6.16917'. [ 435.289757][T10026] netlink: 'syz.6.16917': attribute type 5 has an invalid length. [ 435.297768][T10026] netlink: 'syz.6.16917': attribute type 6 has an invalid length. [ 435.305708][T10026] netlink: 3 bytes leftover after parsing attributes in process `syz.6.16917'. [ 435.323335][T10028] loop9: detected capacity change from 0 to 7 [ 435.332851][T10028] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.348988][T10028] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.357164][T10028] loop9: unable to read partition table [ 435.363385][T10028] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 435.363385][T10028] ) failed (rc=-5) [ 435.390911][T10032] lo speed is unknown, defaulting to 1000 [ 435.468894][T10032] vcan0 speed is unknown, defaulting to 1000 [ 435.715972][ T3395] page_pool_release_retry() stalled pool shutdown: id 209, 1 inflight 60 sec [ 435.944757][T10045] Set syz1 is full, maxelem 65536 reached [ 436.426801][T10113] __nla_validate_parse: 1 callbacks suppressed [ 436.426819][T10113] netlink: 128 bytes leftover after parsing attributes in process `syz.5.16942'. [ 436.462874][T10115] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 436.788916][ T5432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 436.834134][T10139] netlink: 'syz.2.16953': attribute type 21 has an invalid length. [ 436.868894][T10139] netlink: 'syz.2.16953': attribute type 1 has an invalid length. [ 436.877783][T10139] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16953'. [ 437.086938][T10153] netlink: 'syz.6.16958': attribute type 13 has an invalid length. [ 437.176289][ T5948] Bluetooth: hci0: Frame reassembly failed (-84) [ 437.190937][ T3395] vcan0 speed is unknown, defaulting to 1000 [ 437.197699][ T3395] syz1: Port: 1 Link DOWN [ 437.198855][ T5329] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.212710][ T5329] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.222133][ T5329] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 45815 - 0 [ 437.232995][ T9] vcan0 speed is unknown, defaulting to 1000 [ 437.233545][ T5329] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.248476][ T5329] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.259214][ T5329] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 45815 - 0 [ 437.272887][ T5329] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.283331][ T5329] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.292315][ T5329] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 45815 - 0 [ 437.311292][ T5329] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.320680][ T5329] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.330522][ T5329] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 45815 - 0 [ 437.409462][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16968'. [ 437.617245][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 437.977334][T10232] team0: Caught tx_queue_len zero misconfig [ 437.985268][T10234] netlink: 'syz.7.16994': attribute type 1 has an invalid length. [ 437.996157][T10234] netlink: 'syz.7.16994': attribute type 6 has an invalid length. [ 438.005512][T10234] netlink: 'syz.7.16994': attribute type 3 has an invalid length. [ 438.014682][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16994'. [ 438.471605][T10287] lo speed is unknown, defaulting to 1000 [ 438.532534][T10287] vcan0 speed is unknown, defaulting to 1000 [ 438.567356][T10301] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 438.669102][T10330] netlink: 444 bytes leftover after parsing attributes in process `syz.6.17028'. [ 438.679866][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17028'. [ 438.890114][T10355] lo speed is unknown, defaulting to 1000 [ 438.934073][T10355] vcan0 speed is unknown, defaulting to 1000 [ 439.021654][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 439.021670][ T29] audit: type=1400 audit(419.877:34421): avc: denied { name_bind } for pid=10387 comm="syz.7.17042" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 439.067687][T10390] netlink: 'syz.7.17043': attribute type 13 has an invalid length. [ 439.140478][ T3760] Bluetooth: hci0: command 0x1003 tx timeout [ 439.147537][ T5432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 439.177845][T10400] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10400 comm=syz.3.17049 [ 439.190618][T10400] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10400 comm=syz.3.17049 [ 439.227021][ T29] audit: type=1326 audit(420.087:34422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.6.17052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 439.252459][ T29] audit: type=1326 audit(420.097:34423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.6.17052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 439.278714][ T29] audit: type=1326 audit(420.097:34424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.6.17052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 439.303570][ T29] audit: type=1326 audit(420.181:34425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.6.17052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 439.327703][ T29] audit: type=1326 audit(420.181:34426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.6.17052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 439.361865][ T29] audit: type=1326 audit(420.234:34427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.6.17052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 439.385935][ T29] audit: type=1326 audit(420.234:34428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.6.17052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 439.424818][ T29] audit: type=1326 audit(420.234:34429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.6.17052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 439.494983][T10390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.505050][T10390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.517366][T10390] hsr0: left promiscuous mode [ 439.522731][ T29] audit: type=1400 audit(420.402:34430): avc: denied { create } for pid=10425 comm="syz.5.17054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 439.598236][ T5389] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.606911][ T5389] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.688910][T10412] lo speed is unknown, defaulting to 1000 [ 439.694973][ T5389] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.703575][ T5389] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.748080][ T5389] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.758013][ T5389] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.768896][T10445] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 439.780596][T10447] netlink: 'syz.5.17063': attribute type 1 has an invalid length. [ 439.802218][ T5389] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.815168][ T5389] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.864841][T10412] vcan0 speed is unknown, defaulting to 1000 [ 440.072303][T10490] ALSA: seq fatal error: cannot create timer (-22) [ 440.118173][T10496] atomic_op ffff888103167528 conn xmit_atomic 0000000000000000 [ 440.253060][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17082'. [ 440.372167][T10524] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 440.390875][T10526] atomic_op ffff888103167528 conn xmit_atomic 0000000000000000 [ 440.432222][T10532] netlink: 'syz.5.17090': attribute type 13 has an invalid length. [ 440.520288][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.528873][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.728693][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.766406][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.022793][ T1986] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.031773][ T1986] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.057755][ T1986] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.067617][ T1986] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.084996][T10546] Set syz1 is full, maxelem 65536 reached [ 441.091338][ T1986] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.101780][ T1986] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.112994][ T1986] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.122949][ T1986] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.221313][T10570] lo speed is unknown, defaulting to 1000 [ 441.285604][T10570] vcan0 speed is unknown, defaulting to 1000 [ 441.466986][T10609] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17111'. [ 441.487439][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17113'. [ 441.498989][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17113'. [ 441.568633][T10625] x_tables: duplicate underflow at hook 1 [ 441.613958][T10631] netlink: 51 bytes leftover after parsing attributes in process `syz.5.17122'. [ 441.723643][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.732956][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.858290][T10675] loop9: detected capacity change from 0 to 7 [ 441.867535][T10675] Buffer I/O error on dev loop9, logical block 0, async page read [ 441.877309][T10675] Buffer I/O error on dev loop9, logical block 0, async page read [ 441.885184][T10676] lo speed is unknown, defaulting to 1000 [ 441.886132][T10675] loop9: unable to read partition table [ 441.900789][T10675] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 441.900789][T10675] ) failed (rc=-5) [ 441.941165][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17141'. [ 441.952597][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17141'. [ 441.968580][T10676] vcan0 speed is unknown, defaulting to 1000 [ 442.109762][T10722] bridge_slave_0: left promiscuous mode [ 442.115752][T10722] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.124517][T10722] bridge_slave_1: left allmulticast mode [ 442.130231][T10722] bridge_slave_1: left promiscuous mode [ 442.136056][T10722] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.145098][T10722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.154041][T10722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.339708][ T3760] Bluetooth: hci0: command 0x1003 tx timeout [ 442.346511][ T5432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 442.423506][T10749] team0: Port device team_slave_0 removed [ 442.479856][T10749] team0: Port device team_slave_1 removed [ 442.502059][T10749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.511511][T10749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.546603][T10749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.564468][T10745] syzkaller0: entered allmulticast mode [ 442.581270][T10758] syzkaller0 (unregistering): left allmulticast mode [ 442.686374][T10777] atomic_op ffff888103763128 conn xmit_atomic 0000000000000000 [ 442.885771][T10802] netlink: 'syz.2.17185': attribute type 6 has an invalid length. [ 442.912075][T10806] syzkaller0: entered allmulticast mode [ 442.941956][T10806] syzkaller0 (unregistering): left allmulticast mode [ 443.083818][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17194'. [ 443.228303][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17198'. [ 443.326921][T10843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10843 comm=syz.5.17201 [ 443.430395][T10853] lo speed is unknown, defaulting to 1000 [ 443.538072][T10853] vcan0 speed is unknown, defaulting to 1000 [ 443.987536][T10913] syzkaller0: entered allmulticast mode [ 444.000310][T10913] syzkaller0 (unregistering): left allmulticast mode [ 444.166232][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 444.166247][ T29] audit: type=1326 audit(425.276:34628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.7.17223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 444.259073][ T29] audit: type=1326 audit(425.339:34629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.7.17223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 444.282894][ T29] audit: type=1326 audit(425.339:34630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10923 comm="syz.7.17223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d960df703 code=0x7ffc0000 [ 444.306348][ T29] audit: type=1326 audit(425.349:34631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.5.17224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 444.331896][ T29] audit: type=1326 audit(425.349:34632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.5.17224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 444.357400][ T29] audit: type=1326 audit(425.349:34633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.5.17224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 444.382456][ T29] audit: type=1326 audit(425.349:34634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.5.17224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 444.410497][ T29] audit: type=1326 audit(425.349:34635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.5.17224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 444.438997][ T29] audit: type=1326 audit(425.349:34636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.5.17224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 444.464305][ T29] audit: type=1326 audit(425.349:34637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.5.17224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 444.559631][T10872] Set syz1 is full, maxelem 65536 reached [ 444.603938][T10943] netlink: 'syz.3.17232': attribute type 13 has an invalid length. [ 444.798918][T10943] hsr0: left promiscuous mode [ 444.835786][T10966] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 444.855584][ T5351] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.864944][ T5351] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.874958][ T5351] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 56552 - 0 [ 444.918691][ T5351] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.927974][ T5351] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.937155][ T5351] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 56552 - 0 [ 444.996683][T10980] netlink: 'syz.5.17258': attribute type 1 has an invalid length. [ 445.026546][T10980] bond2: entered promiscuous mode [ 445.033051][T10980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.041977][ T5351] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.051876][ T5351] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.061047][ T5351] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 56552 - 0 [ 445.070760][T10984] syzkaller0: entered allmulticast mode [ 445.076569][ T5351] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.086404][ T5351] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.095111][ T5351] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 56552 - 0 [ 445.116624][T10980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.124940][T10980] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 445.136361][T10980] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 445.148537][T10980] bond2: (slave vxcan3): making interface the new active one [ 445.156293][T10980] vxcan3: entered promiscuous mode [ 445.164096][T10980] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 445.176134][T10984] syzkaller0 (unregistering): left allmulticast mode [ 445.353240][T11050] pim6reg: entered allmulticast mode [ 445.360055][T11050] pim6reg: left allmulticast mode [ 445.365773][T11054] netlink: 'syz.3.17259': attribute type 1 has an invalid length. [ 445.387338][T11054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 445.405744][T11054] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 445.415278][T11054] bond4: (slave batadv1): making interface the new active one [ 445.424680][T11054] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 446.452896][T11133] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 446.462153][T11133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.472260][T11133] vhci_hcd vhci_hcd.0: Device attached [ 446.483930][T11138] vhci_hcd: connection closed [ 446.491156][ T5358] vhci_hcd: stop threads [ 446.493116][T11136] syzkaller0: entered allmulticast mode [ 446.496761][ T5358] vhci_hcd: release socket [ 446.515005][ T5358] vhci_hcd: disconnect device [ 446.529283][T11136] syzkaller0 (unregistering): left allmulticast mode [ 446.585990][T11153] lo speed is unknown, defaulting to 1000 [ 446.588110][T11158] netlink: 'syz.3.17279': attribute type 1 has an invalid length. [ 446.611892][T11158] bond5: entered promiscuous mode [ 446.617848][T11158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 446.630452][T11153] vcan0 speed is unknown, defaulting to 1000 [ 446.672756][T11158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 446.681123][T11158] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 446.692525][T11158] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 446.705253][T11158] bond5: (slave vxcan3): making interface the new active one [ 446.713113][T11158] vxcan3: entered promiscuous mode [ 446.719922][T11158] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 446.822129][T11225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11225 comm=syz.3.17285 [ 446.835006][T11225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11225 comm=syz.3.17285 [ 447.009079][T11231] block device autoloading is deprecated and will be removed. [ 447.644815][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17301'. [ 447.749383][T11277] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 447.756906][T11277] vhci_hcd: invalid port number 96 [ 447.762898][T11277] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 447.915576][T11291] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17311'. [ 448.004948][T11303] pim6reg: entered allmulticast mode [ 448.015331][T11303] pim6reg: left allmulticast mode [ 448.246950][T11334] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 448.444128][T11351] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 448.453167][T11351] vhci_hcd: invalid port number 96 [ 448.458410][T11351] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 448.502948][T11359] block device autoloading is deprecated and will be removed. [ 448.702748][T11387] xt_hashlimit: max too large, truncated to 1048576 [ 448.703853][T11387] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 448.754671][T11391] netlink: 268 bytes leftover after parsing attributes in process `syz.7.17350'. [ 448.835120][T11406] loop6: detected capacity change from 0 to 512 [ 448.892029][T11406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.929575][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 448.929591][ T29] audit: type=1400 audit(430.286:34804): avc: denied { read append open } for pid=11404 comm="syz.6.17354" path="/3148/file0/cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 448.965421][ T29] audit: type=1400 audit(430.286:34805): avc: denied { ioctl } for pid=11404 comm="syz.6.17354" path="/3148/file0/cpu.stat" dev="loop6" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 449.027271][ T29] audit: type=1400 audit(430.391:34806): avc: denied { unmount } for pid=6594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 449.049155][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.069171][ T29] audit: type=1400 audit(430.433:34807): avc: denied { write } for pid=11432 comm="syz.6.17363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 449.079018][T11431] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 449.119241][ T29] audit: type=1400 audit(430.486:34808): avc: denied { read } for pid=11432 comm="syz.6.17363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 449.161341][ T29] audit: type=1400 audit(430.528:34809): avc: denied { ioctl } for pid=11440 comm="syz.5.17367" path="socket:[135888]" dev="sockfs" ino=135888 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.236797][ T29] audit: type=1400 audit(430.612:34810): avc: denied { watch watch_reads } for pid=11451 comm="syz.3.17372" path="/proc/6291" dev="proc" ino=136252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 449.366330][ T29] audit: type=1400 audit(430.749:34811): avc: denied { map } for pid=11469 comm="syz.2.17378" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 449.467311][ T29] audit: type=1326 audit(430.854:34812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11482 comm="syz.2.17383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016b17f6c9 code=0x7ffc0000 [ 449.490856][ T29] audit: type=1326 audit(430.854:34813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11482 comm="syz.2.17383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016b17f6c9 code=0x7ffc0000 [ 450.110797][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17410'. [ 450.178483][T11555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11555 comm=syz.5.17413 [ 450.301094][T11564] netlink: 176 bytes leftover after parsing attributes in process `syz.5.17416'. [ 450.694811][T11594] netlink: 96 bytes leftover after parsing attributes in process `syz.7.17428'. [ 451.283017][T11644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17448'. [ 451.603196][T11675] netlink: 96 bytes leftover after parsing attributes in process `syz.7.17459'. [ 451.771723][T11694] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 451.807423][T11696] lo speed is unknown, defaulting to 1000 [ 451.860972][T11696] vcan0 speed is unknown, defaulting to 1000 [ 451.903794][T11708] netlink: 'syz.6.17472': attribute type 5 has an invalid length. [ 451.996064][T11736] syzkaller1: entered promiscuous mode [ 451.996085][T11736] syzkaller1: entered allmulticast mode [ 452.170850][T11752] loop6: detected capacity change from 0 to 128 [ 452.171149][T11752] EXT4-fs: Ignoring removed nobh option [ 452.202417][T11752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.232697][T11752] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 452.232719][T11752] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 452.232789][T11752] vhci_hcd vhci_hcd.0: Device attached [ 452.233342][T11760] vhci_hcd: connection closed [ 452.289007][ T5358] vhci_hcd: stop threads [ 452.289021][ T5358] vhci_hcd: release socket [ 452.289029][ T5358] vhci_hcd: disconnect device [ 452.384048][T11770] netlink: 176 bytes leftover after parsing attributes in process `syz.2.17480'. [ 452.425078][T11782] netlink: 48 bytes leftover after parsing attributes in process `syz.7.17484'. [ 452.450073][T11782] netlink: 48 bytes leftover after parsing attributes in process `syz.7.17484'. [ 452.502991][T11787] tipc: New replicast peer: 255.255.255.83 [ 452.508928][T11787] tipc: Enabled bearer , priority 10 [ 452.535705][T11794] No such timeout policy "syz1" [ 452.557360][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17492'. [ 452.663382][ T3371] kernel read not supported for file /1094/schedstat (pid: 3371 comm: kworker/0:2) [ 452.740456][ T6594] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.756732][ T1034] hid_parser_main: 16 callbacks suppressed [ 452.756752][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.771177][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.779102][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.787023][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.823956][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.832320][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.840029][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.847923][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.858090][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.866543][ T1034] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 452.879479][ T1034] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 452.892639][T11834] vcan0: entered allmulticast mode [ 452.899544][T11834] vcan0: left allmulticast mode [ 453.013924][T11856] vhci_hcd: invalid port number 96 [ 453.020926][T11856] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 453.112542][T11865] SELinux: failed to load policy [ 453.350965][T11900] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 453.430940][T11905] netlink: 'syz.3.17532': attribute type 5 has an invalid length. [ 453.526566][T11930] netlink: 'syz.7.17541': attribute type 21 has an invalid length. [ 453.573142][ T3371] tipc: Node number set to 2319001649 [ 453.736826][T11949] lo speed is unknown, defaulting to 1000 [ 453.792722][T11954] pim6reg: entered allmulticast mode [ 453.835442][T11949] vcan0 speed is unknown, defaulting to 1000 [ 453.862801][T11962] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 453.963790][T11966] netlink: 19 bytes leftover after parsing attributes in process `syz.3.17552'. [ 453.985571][T11954] pim6reg: left allmulticast mode [ 453.991849][ T3371] page_pool_release_retry() stalled pool shutdown: id 218, 1 inflight 60 sec [ 454.040074][T11982] vhci_hcd: invalid port number 96 [ 454.045360][T11982] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 454.078446][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 454.078462][ T29] audit: type=1326 audit(435.675:35198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.110730][ T29] audit: type=1326 audit(435.675:35199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.136870][ T29] audit: type=1326 audit(435.675:35200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.162847][ T29] audit: type=1326 audit(435.675:35201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.188613][ T29] audit: type=1326 audit(435.675:35202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.215254][ T29] audit: type=1326 audit(435.675:35203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.241616][ T29] audit: type=1326 audit(435.675:35204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.270097][ T29] audit: type=1326 audit(435.675:35205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.296849][ T29] audit: type=1326 audit(435.675:35206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.326640][ T29] audit: type=1326 audit(435.675:35207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.5.17558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 454.420616][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17564'. [ 454.577361][T12030] lo speed is unknown, defaulting to 1000 [ 454.637171][T12030] vcan0 speed is unknown, defaulting to 1000 [ 454.820741][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17582'. [ 454.888916][T12095] bond6: entered promiscuous mode [ 455.056487][T12158] lo speed is unknown, defaulting to 1000 [ 455.131036][T12158] vcan0 speed is unknown, defaulting to 1000 [ 455.198542][T12195] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 455.339973][T12231] bond5: entered promiscuous mode [ 455.562863][T12311] lo speed is unknown, defaulting to 1000 [ 455.607157][T12311] vcan0 speed is unknown, defaulting to 1000 [ 455.924136][T12402] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 455.931464][T12402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.939573][T12402] vhci_hcd vhci_hcd.0: Device attached [ 455.953446][T12402] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 455.960167][T12402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 455.968318][T12402] vhci_hcd vhci_hcd.0: Device attached [ 456.000409][T12402] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 456.007209][T12402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 456.015181][T12402] vhci_hcd vhci_hcd.0: Device attached [ 456.036317][T12402] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 456.042967][T12402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.050677][T12402] vhci_hcd vhci_hcd.0: Device attached [ 456.064733][T12402] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 456.072189][T12402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 456.080886][T12402] vhci_hcd vhci_hcd.0: Device attached [ 456.087391][T12413] vhci_hcd: connection closed [ 456.087626][ T5364] vhci_hcd: stop threads [ 456.092929][T12426] vhci_hcd: connection closed [ 456.093454][ T5364] vhci_hcd: release socket [ 456.108455][ T5364] vhci_hcd: disconnect device [ 456.113864][T12403] vhci_hcd: connection closed [ 456.114005][T12409] vhci_hcd: connection closed [ 456.119626][T12421] vhci_hcd: connection closed [ 456.125877][ T5364] vhci_hcd: stop threads [ 456.136635][ T5364] vhci_hcd: release socket [ 456.142455][ T5364] vhci_hcd: disconnect device [ 456.148526][ T5364] vhci_hcd: stop threads [ 456.153458][ T5364] vhci_hcd: release socket [ 456.159100][ T5364] vhci_hcd: disconnect device [ 456.180138][ T5364] vhci_hcd: stop threads [ 456.185093][ T5364] vhci_hcd: release socket [ 456.190070][ T5364] vhci_hcd: disconnect device [ 456.196687][ T5364] vhci_hcd: stop threads [ 456.204383][ T5364] vhci_hcd: release socket [ 456.209099][ T5364] vhci_hcd: disconnect device [ 456.552872][T12460] bond3 (unregistering): Released all slaves [ 456.643964][T12545] 9pnet_fd: Insufficient options for proto=fd [ 456.786919][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17700'. [ 456.797750][T12568] netlink: 'syz.5.17701': attribute type 2 has an invalid length. [ 456.805676][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17701'. [ 456.821367][T12570] SELinux: failed to load policy [ 456.851485][T12574] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12574 comm=syz.6.17706 [ 456.998395][T12588] bond6 (unregistering): Released all slaves [ 457.080730][T12670] program syz.5.17718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.090933][T12670] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 457.128100][T12673] netlink: 'syz.2.17719': attribute type 3 has an invalid length. [ 457.171957][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17723'. [ 457.184482][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17723'. [ 457.389544][T12704] bond5 (unregistering): Released all slaves [ 457.397140][T12741] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17732'. [ 457.442354][T12681] lo speed is unknown, defaulting to 1000 [ 457.461392][T12777] lo speed is unknown, defaulting to 1000 [ 457.514439][T12681] vcan0 speed is unknown, defaulting to 1000 [ 457.589887][T12777] vcan0 speed is unknown, defaulting to 1000 [ 457.762767][T12681] chnl_net:caif_netlink_parms(): no params data found [ 457.824945][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.832387][T12681] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.856472][T12681] bridge_slave_0: entered allmulticast mode [ 457.863476][T12681] bridge_slave_0: entered promiscuous mode [ 457.870711][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.877957][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.889462][T12681] bridge_slave_1: entered allmulticast mode [ 457.900694][T12681] bridge_slave_1: entered promiscuous mode [ 457.928736][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.940740][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.973546][T12681] team0: Port device team_slave_0 added [ 457.984323][T12681] team0: Port device team_slave_1 added [ 458.083936][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.091652][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.118784][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.150545][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.158949][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.189070][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.228553][T12681] hsr_slave_0: entered promiscuous mode [ 458.236658][T12681] hsr_slave_1: entered promiscuous mode [ 458.243493][T12681] debugfs: 'hsr0' already exists in 'hsr' [ 458.249795][T12681] Cannot create hsr debugfs directory [ 458.343209][T12681] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 458.352238][T12681] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 458.360987][T12681] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 458.370057][T12681] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 458.391320][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.398868][T12681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.406778][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.416259][T12681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.445946][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.461682][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.471994][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.489098][T12681] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.500019][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.507326][ T5351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.519048][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.527115][ T5351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.589611][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.688269][T12681] veth0_vlan: entered promiscuous mode [ 458.696217][T12681] veth1_vlan: entered promiscuous mode [ 458.711446][T12681] veth0_macvtap: entered promiscuous mode [ 458.718990][T12681] veth1_macvtap: entered promiscuous mode [ 458.730006][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.741973][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.756392][ T5351] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.766317][ T5351] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.777546][ T5351] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.791965][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.848491][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 458.848509][ T29] audit: type=1400 audit(440.696:35907): avc: denied { write } for pid=13217 comm="syz.8.17722" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 458.950629][ T29] audit: type=1326 audit(440.812:35908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.7.17760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 458.967145][T13229] lo speed is unknown, defaulting to 1000 [ 458.974678][ T29] audit: type=1326 audit(440.812:35909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.7.17760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 459.005377][ T29] audit: type=1326 audit(440.812:35910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.7.17760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 459.029195][ T29] audit: type=1326 audit(440.812:35911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.7.17760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 459.089623][T13238] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.118183][T13229] vcan0 speed is unknown, defaulting to 1000 [ 459.192959][T13238] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.208736][ T29] audit: type=1400 audit(441.074:35912): avc: denied { create } for pid=13261 comm="syz.6.17763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 459.228260][ T29] audit: type=1400 audit(441.074:35913): avc: denied { connect } for pid=13261 comm="syz.6.17763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 459.255332][ T29] audit: type=1400 audit(441.127:35914): avc: denied { lock } for pid=13255 comm="syz.2.17762" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=140448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 459.310569][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17765'. [ 459.323195][T13238] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.334847][ T29] audit: type=1400 audit(441.211:35915): avc: denied { mounton } for pid=13273 comm="syz.7.17771" path="/2487/file0" dev="tmpfs" ino=12757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 459.391840][T13238] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.434271][ T29] audit: type=1400 audit(441.316:35916): avc: denied { create } for pid=13289 comm="syz.5.17778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 459.497499][T13300] loop6: detected capacity change from 0 to 512 [ 459.515585][T13300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.544642][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.133749][T13315] netlink: 'syz.6.17784': attribute type 3 has an invalid length. [ 460.193285][T13313] bond2 (unregistering): Released all slaves [ 460.279754][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17787'. [ 460.308842][T13390] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 460.491188][T13406] loop6: detected capacity change from 0 to 512 [ 460.560126][T13406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.648943][ T5350] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.659031][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.675630][ T5350] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.683920][ T5350] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.703637][ T5350] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.723969][T13434] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 460.806451][T13438] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.889153][T13444] loop6: detected capacity change from 0 to 512 [ 460.898152][T13433] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.17804'. [ 460.909113][T13433] netlink: zone id is out of range [ 460.915097][T13433] netlink: zone id is out of range [ 460.938600][T13433] netlink: zone id is out of range [ 460.944256][T13433] netlink: zone id is out of range [ 460.950715][T13433] netlink: zone id is out of range [ 460.951073][T13444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 460.956644][T13433] netlink: zone id is out of range [ 460.956653][T13433] netlink: zone id is out of range [ 460.956658][T13433] netlink: zone id is out of range [ 460.956664][T13433] netlink: zone id is out of range [ 460.956670][T13433] netlink: zone id is out of range [ 461.003736][T13444] System zones: 1-12 [ 461.011570][T13457] loop8: detected capacity change from 0 to 512 [ 461.019122][T13444] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.17810: corrupted in-inode xattr: e_value size too large [ 461.034318][T13444] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.17810: couldn't read orphan inode 15 (err -117) [ 461.048953][T13457] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.17815: inode has both inline data and extents flags [ 461.075039][T13444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.090850][T13457] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.17815: couldn't read orphan inode 15 (err -117) [ 461.104046][T13457] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.129116][T13444] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.17810: Unrecognised inode hash code 4 [ 461.137462][T13457] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 461.141432][T13444] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.17810: Corrupt directory, running e2fsck is recommended [ 461.169325][T13444] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.17810: Unrecognised inode hash code 4 [ 461.180831][T13444] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.17810: Corrupt directory, running e2fsck is recommended [ 461.196052][T13444] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.17810: Unrecognised inode hash code 4 [ 461.209440][T13444] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.17810: Corrupt directory, running e2fsck is recommended [ 461.224450][T12681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.234013][T13444] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.17810: Unrecognised inode hash code 4 [ 461.251158][T13444] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.17810: Corrupt directory, running e2fsck is recommended [ 461.268133][T13444] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.17810: Unrecognised inode hash code 4 [ 461.281289][T13444] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.17810: Corrupt directory, running e2fsck is recommended [ 461.399266][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.435642][T13496] netlink: 'syz.5.17830': attribute type 15 has an invalid length. [ 461.444587][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17830'. [ 461.468414][ T31] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 461.479417][ T31] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 461.488778][T13496] netlink: 'syz.5.17830': attribute type 15 has an invalid length. [ 461.496979][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17830'. [ 461.498232][ T31] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 461.515373][ T31] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 461.576992][T13512] SELinux: policydb version 768 does not match my version range 15-35 [ 461.600191][T13512] SELinux: failed to load policy [ 461.609976][T13515] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17839'. [ 461.687946][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17844'. [ 461.702896][T13534] netlink: 'syz.7.17845': attribute type 15 has an invalid length. [ 461.712769][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17845'. [ 461.734718][ T31] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 461.743763][ T31] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 461.755222][T13534] netlink: 'syz.7.17845': attribute type 15 has an invalid length. [ 461.764401][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17845'. [ 461.776020][ T31] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 461.784841][ T31] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 461.836607][T13544] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13544 comm=syz.6.17848 [ 461.850566][T13544] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13544 comm=syz.6.17848 [ 461.982992][T13574] netlink: 'syz.6.17860': attribute type 15 has an invalid length. [ 462.004711][T13574] netlink: 'syz.6.17860': attribute type 15 has an invalid length. [ 462.192110][T13620] loop6: detected capacity change from 0 to 512 [ 462.202506][T13620] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.17879: invalid indirect mapped block 256 (level 2) [ 462.217712][T13620] EXT4-fs (loop6): 2 truncates cleaned up [ 462.223951][T13620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.248500][T13620] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.17879: bg 0: block 5: invalid block bitmap [ 462.266075][T13620] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 462.282802][T13620] EXT4-fs (loop6): This should not happen!! Data will be lost [ 462.282802][T13620] [ 462.295384][T13620] EXT4-fs (loop6): Total free blocks count 0 [ 462.302500][T13620] EXT4-fs (loop6): Free/Dirty block details [ 462.308831][T13620] EXT4-fs (loop6): free_blocks=0 [ 462.313031][T13626] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 462.315081][T13620] EXT4-fs (loop6): dirty_blocks=5 [ 462.330328][T13620] EXT4-fs (loop6): Block reservation details [ 462.336723][T13620] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 462.373920][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.451074][T13655] netlink: 'syz.8.17890': attribute type 10 has an invalid length. [ 462.462939][T13655] team0: Port device dummy0 added [ 462.472646][T13655] netlink: 'syz.8.17890': attribute type 10 has an invalid length. [ 462.488883][T13655] team0: Port device dummy0 removed [ 462.498395][T13655] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 462.552978][T13664] __nla_validate_parse: 3 callbacks suppressed [ 462.552994][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17894'. [ 462.569905][T13664] netlink: 312 bytes leftover after parsing attributes in process `syz.2.17894'. [ 462.579188][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17894'. [ 462.656835][T13667] bond1 (unregistering): Released all slaves [ 462.781243][T13751] IPVS: Unknown mcast interface: hsr0 [ 462.865909][T13765] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 463.053528][T13785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17921'. [ 463.110448][T13793] netlink: 'syz.5.17925': attribute type 1 has an invalid length. [ 463.119124][T13793] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.17925'. [ 463.184798][T13801] netlink: 'syz.2.17929': attribute type 12 has an invalid length. [ 463.192985][T13801] netlink: 'syz.2.17929': attribute type 29 has an invalid length. [ 463.201063][T13801] netlink: 148 bytes leftover after parsing attributes in process `syz.2.17929'. [ 463.210225][T13801] netlink: 'syz.2.17929': attribute type 2 has an invalid length. [ 463.218140][T13801] netlink: 23 bytes leftover after parsing attributes in process `syz.2.17929'. [ 463.545930][T13845] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17949'. [ 463.555561][T13845] netlink: 196 bytes leftover after parsing attributes in process `syz.6.17949'. [ 463.569136][T13845] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17949'. [ 463.571430][T13840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13840 comm=syz.5.17946 [ 463.594174][T13843] atomic_op ffff888103763128 conn xmit_atomic 0000000000000000 [ 463.706523][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 463.706537][ T29] audit: type=1400 audit(445.812:36288): avc: denied { ioctl } for pid=13855 comm="syz.5.17964" path="socket:[141659]" dev="sockfs" ino=141659 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 463.805750][ T29] audit: type=1400 audit(445.906:36289): avc: denied { bind } for pid=13870 comm="syz.6.17960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 463.859779][ T29] audit: type=1326 audit(445.969:36290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.5.17963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 463.887044][ T29] audit: type=1326 audit(445.969:36291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.5.17963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 463.911297][ T29] audit: type=1326 audit(445.969:36292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.5.17963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 463.937760][ T29] audit: type=1326 audit(445.969:36293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.5.17963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 463.963214][ T29] audit: type=1326 audit(445.969:36294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.5.17963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 463.988168][ T29] audit: type=1326 audit(445.969:36295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.5.17963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 464.013860][ T29] audit: type=1326 audit(445.969:36296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.5.17963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 464.038323][ T29] audit: type=1326 audit(445.969:36297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13877 comm="syz.5.17963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143128f6c9 code=0x7ffc0000 [ 464.129126][T13901] team0: Port device geneve1 added [ 464.141626][ T5351] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.150380][T13903] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 464.161954][ T5351] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.171178][ T5351] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.183880][ T5351] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.367436][T13921] bond6 (unregistering): Released all slaves [ 464.478294][T14017] team0: Port device dummy0 added [ 464.487830][T14017] team0: Port device dummy0 removed [ 464.495767][T14017] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 465.247329][T14131] lo speed is unknown, defaulting to 1000 [ 465.291248][T14141] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.332031][T14131] vcan0 speed is unknown, defaulting to 1000 [ 465.359861][T14141] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.418330][T14141] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.476799][T14141] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.552290][ T5350] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.590960][ T5350] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.611618][ T5350] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.640433][ T5350] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.732429][T14189] loop8: detected capacity change from 0 to 512 [ 465.757235][T14189] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 465.948147][T14208] loop8: detected capacity change from 0 to 512 [ 465.988388][T14208] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.18062: bg 0: block 248: padding at end of block bitmap is not set [ 466.009390][T14208] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.18062: Failed to acquire dquot type 1 [ 466.025823][T14208] EXT4-fs (loop8): 1 truncate cleaned up [ 466.032798][T14208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.135997][T12681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.366915][T14260] bond5: entered promiscuous mode [ 466.373981][T14260] bond5: entered allmulticast mode [ 466.393354][T14260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.406922][T14260] bond5 (unregistering): Released all slaves [ 467.045445][T14355] can0: slcan on ptm0. [ 467.083246][T14363] validate_nla: 5 callbacks suppressed [ 467.083270][T14363] netlink: 'syz.5.18091': attribute type 3 has an invalid length. [ 467.110432][T14355] can0 (unregistered): slcan off ptm0. [ 467.130919][T14373] syzkaller1: entered promiscuous mode [ 467.137147][T14373] syzkaller1: entered allmulticast mode [ 467.182137][T14382] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 467.317623][T14403] lo speed is unknown, defaulting to 1000 [ 467.367382][T14403] vcan0 speed is unknown, defaulting to 1000 [ 467.499987][T14448] __nla_validate_parse: 9 callbacks suppressed [ 467.500003][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18116'. [ 467.755502][T14459] loop8: detected capacity change from 0 to 512 [ 467.780843][T14459] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.819671][T12681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.912868][T14480] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18130'. [ 467.980806][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.8.18134'. [ 468.238798][T14523] loop6: detected capacity change from 0 to 512 [ 468.254548][T14523] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.18149: bg 0: block 248: padding at end of block bitmap is not set [ 468.269713][T14523] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.18149: Failed to acquire dquot type 1 [ 468.286015][T14523] EXT4-fs (loop6): 1 truncate cleaned up [ 468.292496][T14523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.329770][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.363385][T14535] loop6: detected capacity change from 0 to 1024 [ 468.388048][T14535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.419763][T14535] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.18150: Allocating blocks 449-513 which overlap fs metadata [ 468.464166][T14532] EXT4-fs (loop6): pa ffff888106e84770: logic 48, phys. 177, len 21 [ 468.474249][T14532] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 468.530679][T14546] bond6: entered promiscuous mode [ 468.535906][T14546] bond6: entered allmulticast mode [ 468.543454][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.553776][T14546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.569940][T14546] bond6 (unregistering): Released all slaves [ 468.579729][T14585] xt_l2tp: wrong L2TP version: 1 [ 468.604367][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 468.604381][ T29] audit: type=1326 audit(450.948:36389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.6.18159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 468.653996][ T29] audit: type=1326 audit(450.948:36390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.6.18159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 468.681836][ T29] audit: type=1326 audit(451.011:36391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.6.18159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 468.707003][ T29] audit: type=1326 audit(451.011:36392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.6.18159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e62ff6c9 code=0x7ffc0000 [ 468.790434][T14634] SELinux: policydb version 0 does not match my version range 15-35 [ 468.799861][T14634] SELinux: failed to load policy [ 468.891971][ T29] audit: type=1400 audit(451.253:36393): avc: denied { mounton } for pid=14646 comm="syz.5.18171" path="/proc/1446/task" dev="proc" ino=143636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 468.994674][T14661] lo speed is unknown, defaulting to 1000 [ 469.051035][T14670] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.077651][ T29] audit: type=1400 audit(451.452:36394): avc: denied { read } for pid=14671 comm="syz.5.18180" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 469.112345][T14674] loop6: detected capacity change from 0 to 128 [ 469.128763][T14661] vcan0 speed is unknown, defaulting to 1000 [ 469.143251][T14674] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 469.164222][T14674] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 469.167404][ T29] audit: type=1326 audit(451.505:36395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.7.18182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 469.202456][ T29] audit: type=1326 audit(451.505:36396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.7.18182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 469.228700][ T29] audit: type=1326 audit(451.505:36397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.7.18182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 469.254648][ T29] audit: type=1326 audit(451.505:36398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.7.18182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d960df6c9 code=0x7ffc0000 [ 469.283042][T14670] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.297224][T14672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.307605][T14683] netlink: 96 bytes leftover after parsing attributes in process `syz.7.18184'. [ 469.320677][T14672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.354313][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18186'. [ 469.365804][T14670] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.415893][T14670] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.518315][ T5350] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.551690][ T5350] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.569226][ T5350] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.583250][ T5350] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.594520][T14743] loop6: detected capacity change from 0 to 512 [ 469.602017][T14743] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 469.784463][T14765] netlink: 'syz.8.18202': attribute type 3 has an invalid length. [ 469.850125][T14773] loop8: detected capacity change from 0 to 1024 [ 469.883455][T14773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.931701][T14788] netlink: 'syz.7.18211': attribute type 16 has an invalid length. [ 469.940431][T14788] netlink: 156 bytes leftover after parsing attributes in process `syz.7.18211'. [ 469.962426][T14792] xt_hashlimit: max too large, truncated to 1048576 [ 469.986229][T14773] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.18205: Allocating blocks 449-513 which overlap fs metadata [ 470.022650][T14772] EXT4-fs (loop8): pa ffff888106d96620: logic 48, phys. 177, len 21 [ 470.032384][T14772] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 470.062605][T12681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.141759][T14809] loop6: detected capacity change from 0 to 512 [ 470.167912][T14809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.280826][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.403991][T14834] loop8: detected capacity change from 0 to 512 [ 470.414687][T14834] EXT4-fs: Ignoring removed bh option [ 470.422276][T14834] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 470.453035][T14834] EXT4-fs (loop8): 1 truncate cleaned up [ 470.460892][T14834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.528282][T12681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.631266][T14858] ip6t_srh: unknown srh match flags 4000 [ 470.843721][T14879] netlink: 'syz.2.18247': attribute type 7 has an invalid length. [ 470.910243][T14886] loop6: detected capacity change from 0 to 128 [ 471.001583][T14886] syz.6.18250: attempt to access beyond end of device [ 471.001583][T14886] loop6: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 471.015652][T14886] syz.6.18250: attempt to access beyond end of device [ 471.015652][T14886] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 471.030739][T14886] syz.6.18250: attempt to access beyond end of device [ 471.030739][T14886] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 471.044994][T14886] syz.6.18250: attempt to access beyond end of device [ 471.044994][T14886] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 471.060383][T14886] syz.6.18250: attempt to access beyond end of device [ 471.060383][T14886] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 471.097068][T14886] syz.6.18250: attempt to access beyond end of device [ 471.097068][T14886] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 471.112661][T14886] syz.6.18250: attempt to access beyond end of device [ 471.112661][T14886] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 471.127414][T14893] lo speed is unknown, defaulting to 1000 [ 471.145170][T14886] syz.6.18250: attempt to access beyond end of device [ 471.145170][T14886] loop6: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 471.164310][T14886] syz.6.18250: attempt to access beyond end of device [ 471.164310][T14886] loop6: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 471.179473][T14886] syz.6.18250: attempt to access beyond end of device [ 471.179473][T14886] loop6: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 471.201653][T14893] vcan0 speed is unknown, defaulting to 1000 [ 471.487580][T14942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.634631][T14960] netlink: 5 bytes leftover after parsing attributes in process `syz.8.18272'. [ 471.645278][T14960] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 471.668352][T14960] 0ªî{X¹¦: entered allmulticast mode [ 471.686172][T14960] net_ratelimit: 38 callbacks suppressed [ 471.686188][T14960] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 471.748618][T14970] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 471.761495][T14970] SELinux: failed to load policy [ 471.867207][T14981] lo speed is unknown, defaulting to 1000 [ 471.934627][T14981] vcan0 speed is unknown, defaulting to 1000 [ 472.328963][T15072] loop8: detected capacity change from 0 to 512 [ 472.365316][T15072] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 472.380398][T15072] EXT4-fs (loop8): orphan cleanup on readonly fs [ 472.425071][T15072] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.18297: corrupted inode contents [ 472.439466][T15072] EXT4-fs (loop8): Remounting filesystem read-only [ 472.448171][T15072] EXT4-fs (loop8): 1 truncate cleaned up [ 472.455809][ T5358] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 472.466835][ T5358] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 472.477964][ T5358] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 472.490845][T15072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 472.572590][T12681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.697084][T15122] loop8: detected capacity change from 0 to 512 [ 472.705696][T15122] EXT4-fs: Ignoring removed i_version option [ 472.723184][T15122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.833216][T12681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.486294][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 473.486310][ T29] audit: type=1400 audit(456.074:36478): avc: denied { create } for pid=15223 comm="syz.7.18317" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 473.536288][ T29] audit: type=1400 audit(456.074:36479): avc: denied { rename } for pid=15223 comm="syz.7.18317" name="file0" dev="tmpfs" ino=13307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 473.582464][ T29] audit: type=1400 audit(456.158:36480): avc: denied { mounton } for pid=15223 comm="syz.7.18317" path="/2593/file7" dev="tmpfs" ino=13307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 473.605588][ T29] audit: type=1400 audit(456.179:36481): avc: denied { unlink } for pid=18025 comm="syz-executor" name="file7" dev="tmpfs" ino=13307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 473.690563][ T29] audit: type=1400 audit(456.242:36482): avc: denied { create } for pid=15234 comm="syz.8.18320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 473.710257][ T29] audit: type=1400 audit(456.242:36483): avc: denied { ioctl } for pid=15234 comm="syz.8.18320" path="socket:[144394]" dev="sockfs" ino=144394 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 473.735164][ T29] audit: type=1400 audit(456.253:36484): avc: denied { bind } for pid=15234 comm="syz.8.18320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 473.840026][T15246] loop8: detected capacity change from 0 to 128 [ 473.852883][T15246] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 473.879760][T15246] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 473.897997][T15246] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 473.907564][T15246] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 473.919906][T15246] Buffer I/O error on dev loop8, logical block 77, lost async page write [ 473.929462][T15246] Buffer I/O error on dev loop8, logical block 78, lost async page write [ 473.939631][T15246] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 473.949450][T15246] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 473.984478][T15259] netlink: 'syz.7.18330': attribute type 3 has an invalid length. [ 474.449349][ T29] audit: type=1400 audit(457.093:36485): avc: denied { bind } for pid=15307 comm="syz.6.18340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 474.470891][ T29] audit: type=1400 audit(457.093:36486): avc: denied { name_bind } for pid=15307 comm="syz.6.18340" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 474.495041][ T29] audit: type=1400 audit(457.093:36487): avc: denied { node_bind } for pid=15307 comm="syz.6.18340" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 474.508455][T15310] loop6: detected capacity change from 0 to 1024 [ 474.526843][T15310] EXT4-fs: Ignoring removed orlov option [ 474.537344][T15310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.637723][T15310] ================================================================== [ 474.647429][T15310] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 474.656719][T15310] [ 474.659045][T15310] write to 0xffff888164c875c0 of 4 bytes by task 15315 on cpu 0: [ 474.666810][T15310] writeback_single_inode+0x150/0x3f0 [ 474.673124][T15310] sync_inode_metadata+0x5b/0x90 [ 474.678360][T15310] generic_buffers_fsync_noflush+0xd9/0x120 [ 474.684734][T15310] ext4_sync_file+0x1ab/0x690 [ 474.689604][T15310] vfs_fsync_range+0x10d/0x130 [ 474.694483][T15310] ext4_buffered_write_iter+0x34f/0x3c0 [ 474.700132][T15310] ext4_file_write_iter+0x387/0xf60 [ 474.705511][T15310] iter_file_splice_write+0x666/0xa60 [ 474.711235][T15310] direct_splice_actor+0x156/0x2a0 [ 474.716524][T15310] splice_direct_to_actor+0x312/0x680 [ 474.721913][T15310] do_splice_direct+0xda/0x150 [ 474.727665][T15310] do_sendfile+0x380/0x650 [ 474.732700][T15310] __x64_sys_sendfile64+0x105/0x150 [ 474.738422][T15310] x64_sys_call+0x2bb4/0x3000 [ 474.743623][T15310] do_syscall_64+0xd2/0x200 [ 474.748163][T15310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.754162][T15310] [ 474.756493][T15310] read to 0xffff888164c875c0 of 4 bytes by task 15310 on cpu 1: [ 474.765436][T15310] generic_buffers_fsync_noflush+0x80/0x120 [ 474.771536][T15310] ext4_sync_file+0x1ab/0x690 [ 474.776293][T15310] vfs_fsync_range+0x10d/0x130 [ 474.781046][T15310] ext4_buffered_write_iter+0x34f/0x3c0 [ 474.786754][T15310] ext4_file_write_iter+0x387/0xf60 [ 474.791954][T15310] iter_file_splice_write+0x666/0xa60 [ 474.797316][T15310] direct_splice_actor+0x156/0x2a0 [ 474.802586][T15310] splice_direct_to_actor+0x312/0x680 [ 474.808638][T15310] do_splice_direct+0xda/0x150 [ 474.813499][T15310] do_sendfile+0x380/0x650 [ 474.818024][T15310] __x64_sys_sendfile64+0x105/0x150 [ 474.823390][T15310] x64_sys_call+0x2bb4/0x3000 [ 474.828057][T15310] do_syscall_64+0xd2/0x200 [ 474.832554][T15310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.838605][T15310] [ 474.840912][T15310] value changed: 0x00000070 -> 0x00000002 [ 474.846878][T15310] [ 474.849206][T15310] Reported by Kernel Concurrency Sanitizer on: [ 474.857211][T15310] CPU: 1 UID: 0 PID: 15310 Comm: syz.6.18341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 474.871471][T15310] Tainted: [W]=WARN [ 474.876181][T15310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 474.886760][T15310] ================================================================== [ 474.924637][ T6594] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.