last executing test programs: 2m20.200580147s ago: executing program 4 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m20.155360161s ago: executing program 4 (id=1069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'bridge_slave_1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 2m20.082640967s ago: executing program 4 (id=1072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x2002, {0x0, 0x0, 0x0, r3, {0xa, 0x6}, {0x0, 0x7}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x48}}, 0x0) 2m20.030090341s ago: executing program 4 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m19.747380714s ago: executing program 4 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 2m19.199353568s ago: executing program 4 (id=1095): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) 2m19.145036323s ago: executing program 32 (id=1095): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) 44.670153876s ago: executing program 5 (id=4353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 44.669506036s ago: executing program 5 (id=4355): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 43.814244135s ago: executing program 5 (id=4369): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) io_setup(0x5, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 43.650384118s ago: executing program 5 (id=4372): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) 43.235849012s ago: executing program 5 (id=4384): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) link(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 43.126539371s ago: executing program 5 (id=4389): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xffffffffffffff6f, 0x22, 0x0, 0x0) 43.121325271s ago: executing program 33 (id=4389): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xffffffffffffff6f, 0x22, 0x0, 0x0) 43.116977882s ago: executing program 2 (id=4392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x2, 0x40, 0x1, 0x6, 0x3ff, 0xc2, 0x9, 0x1}}}}]}, 0x58}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 43.053183076s ago: executing program 2 (id=4396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x8, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 42.965832584s ago: executing program 2 (id=4401): ptrace(0x10, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 42.212017364s ago: executing program 2 (id=4417): unshare(0x40600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 42.191677106s ago: executing program 2 (id=4420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 41.947653536s ago: executing program 2 (id=4424): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 41.947481096s ago: executing program 34 (id=4424): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.351456411s ago: executing program 3 (id=5643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.325918144s ago: executing program 3 (id=5644): socket$inet6(0xa, 0x3, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000000000000000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x50}}], 0x1, 0xc080) 1.293372836s ago: executing program 3 (id=5645): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) 1.009650429s ago: executing program 1 (id=5655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 979.546082ms ago: executing program 1 (id=5657): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = msgget$private(0x0, 0x10) msgrcv(r2, 0x0, 0x62, 0x2, 0x1000) msgsnd(0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="30b75e37faf109b95fccc95cf093eb885adf54798604832c38739a7ddd7f42c8b1d2a5a13ee6bab8b40db5eb13cfd962695cffdf932a939974b918d02830a4e7ceda9590a14396a129ffad5d2917b4176c82ae7b0ca675b835dd9db759cdc1e8f0bec66ef7f772c4dd6cf2ecf5143f136b6ff4e78c03bb96ee5c0828de89957bececed60c5b5335beef7074f712c295ef579e296"], &(0x7f0000000080)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 430.051756ms ago: executing program 3 (id=5681): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 429.575916ms ago: executing program 0 (id=5683): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000780)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) 366.751341ms ago: executing program 7 (id=5685): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x6}, 0x18) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) 366.386401ms ago: executing program 7 (id=5686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000001801000020786c3500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='tlb_flush\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 365.992371ms ago: executing program 3 (id=5687): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = gettid() tkill(r2, 0x12) 343.022433ms ago: executing program 3 (id=5688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 342.708033ms ago: executing program 7 (id=5689): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='block_plug\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 340.991113ms ago: executing program 0 (id=5699): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 303.925286ms ago: executing program 6 (id=5690): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 286.283408ms ago: executing program 7 (id=5692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) listen(r0, 0xfffffffd) r2 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 231.784822ms ago: executing program 6 (id=5693): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 231.443622ms ago: executing program 6 (id=5694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 224.692522ms ago: executing program 0 (id=5695): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0x64842, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 212.831304ms ago: executing program 7 (id=5696): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x400) 182.503276ms ago: executing program 7 (id=5697): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 135.96341ms ago: executing program 0 (id=5698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 135.631009ms ago: executing program 6 (id=5700): syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 135.31803ms ago: executing program 6 (id=5701): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 122.47551ms ago: executing program 6 (id=5702): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 118.439241ms ago: executing program 1 (id=5703): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000043c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 92.629353ms ago: executing program 1 (id=5704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) close(r3) 78.237544ms ago: executing program 1 (id=5705): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) 19.842989ms ago: executing program 0 (id=5706): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) 562.071µs ago: executing program 1 (id=5707): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 0s ago: executing program 0 (id=5717): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x2000, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffc9c, 0x2, {0x0, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) kernel console output (not intermixed with test programs): ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 123.564497][ T29] audit: type=1326 audit(380.488:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 123.587566][ T29] audit: type=1326 audit(380.488:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 123.610625][ T29] audit: type=1326 audit(380.488:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 123.633631][ T29] audit: type=1326 audit(380.488:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 123.656529][ T29] audit: type=1326 audit(380.488:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 123.679530][ T29] audit: type=1326 audit(380.488:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 123.702613][ T29] audit: type=1326 audit(380.488:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.0.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 123.734400][T11418] netlink: 'syz.2.3326': attribute type 13 has an invalid length. [ 123.764153][T11420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3327'. [ 123.773189][T11420] netlink: 'syz.5.3327': attribute type 7 has an invalid length. [ 123.780915][T11420] netlink: 'syz.5.3327': attribute type 8 has an invalid length. [ 123.788704][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3327'. [ 124.106482][T11460] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3343'. [ 124.379191][T11484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.494933][T11484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.521284][T11489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11489 comm=syz.0.3356 [ 124.533918][T11489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11489 comm=syz.0.3356 [ 124.655712][T11484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.791458][T11484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.922996][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.945282][ T3865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.976305][ T3865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.998535][ T3865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.267840][T11535] usb usb8: usbfs: process 11535 (syz.0.3373) did not claim interface 0 before use [ 125.309391][T11540] geneve0: entered allmulticast mode [ 125.360334][T11545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11545 comm=syz.0.3379 [ 125.606239][T11561] netlink: 'syz.3.3386': attribute type 4 has an invalid length. [ 126.404433][T11628] __nla_validate_parse: 10 callbacks suppressed [ 126.404469][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 126.423884][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 126.429261][T11624] loop1: detected capacity change from 0 to 8192 [ 126.444850][T11624] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.457866][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 126.490478][T11632] usb usb8: usbfs: process 11632 (syz.5.3416) did not claim interface 0 before use [ 126.513637][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 126.547928][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 126.559783][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 126.650011][T11651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11651 comm=syz.5.3425 [ 126.707876][T11653] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3426'. [ 127.162691][T11677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3434'. [ 127.304609][T11697] loop1: detected capacity change from 0 to 512 [ 127.320953][T11697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.345554][T11697] EXT4-fs (loop1): 1 truncate cleaned up [ 127.351753][T11697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.390092][T10153] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.536168][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3449'. [ 127.756444][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3455'. [ 127.798061][T11735] loop3: detected capacity change from 0 to 512 [ 127.823560][T11735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.855608][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.877993][T11745] loop3: detected capacity change from 0 to 256 [ 127.895375][T11745] FAT-fs (loop3): IO charset cp863 not found [ 128.745913][T11803] team1: entered promiscuous mode [ 128.750990][T11803] team1: entered allmulticast mode [ 128.840053][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 128.840072][ T29] audit: type=1400 audit(385.818:5554): avc: denied { audit_write } for pid=11810 comm="syz.5.3491" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 128.867021][ T29] audit: type=1107 audit(385.818:5555): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 128.976480][T11827] cgroup: Unknown subsys name 'cpuset' [ 129.009875][T11825] loop5: detected capacity change from 0 to 8192 [ 129.073347][ T29] audit: type=1107 audit(386.058:5556): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 129.206704][T11853] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 129.371565][ T29] audit: type=1400 audit(386.288:5557): avc: denied { watch_reads } for pid=11861 comm="syz.3.3515" path="/743/file0" dev="tmpfs" ino=3878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.422735][ T29] audit: type=1326 audit(386.378:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 129.445871][ T29] audit: type=1326 audit(386.378:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 129.469407][ T29] audit: type=1326 audit(386.378:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 129.492554][ T29] audit: type=1326 audit(386.378:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 129.515554][ T29] audit: type=1326 audit(386.378:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 129.538519][ T29] audit: type=1326 audit(386.378:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 129.991908][T11900] loop2: detected capacity change from 8192 to 0 [ 130.107413][T11914] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 130.129292][T11914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.156957][T11914] bond0: (slave veth11): Enslaving as an active interface with a down link [ 130.184987][T11914] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.198014][T11914] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 130.225932][T11924] netem: incorrect ge model size [ 130.230950][T11924] netem: change failed [ 130.267985][T11931] rdma_op ffff88811b64b580 conn xmit_rdma 0000000000000000 [ 130.316943][T11933] blktrace: Concurrent blktraces are not allowed on loop1 [ 130.569676][T11964] ip6tnl1: entered promiscuous mode [ 130.575062][T11964] ip6tnl1: entered allmulticast mode [ 130.595583][T11966] loop5: detected capacity change from 0 to 128 [ 130.618593][T11966] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.630851][T11959] loop1: detected capacity change from 0 to 8192 [ 130.732993][T11971] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.733211][ T6023] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.779515][T11974] blktrace: Concurrent blktraces are not allowed on loop7 [ 130.788366][T11971] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.844098][T11971] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.854412][T11979] netlink: 'syz.3.3567': attribute type 21 has an invalid length. [ 130.881781][T11979] netlink: 'syz.3.3567': attribute type 1 has an invalid length. [ 130.903549][T11982] netlink: 'syz.0.3568': attribute type 13 has an invalid length. [ 130.915657][T11971] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.935136][T11985] netlink: 'syz.3.3570': attribute type 10 has an invalid length. [ 130.992528][ T3821] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.011107][ T3821] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.025270][ T3821] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.033761][ T3821] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.064755][T11996] -1: renamed from syzkaller0 [ 131.757967][T12059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.957464][T12087] bridge_slave_0: left allmulticast mode [ 131.963477][T12087] bridge_slave_0: left promiscuous mode [ 131.969233][T12087] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.978315][T12087] bridge_slave_1: left allmulticast mode [ 131.984098][T12087] bridge_slave_1: left promiscuous mode [ 131.990014][T12087] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.999355][T12087] bond0: (slave bond_slave_0): Releasing backup interface [ 132.009185][T12087] bond0: (slave bond_slave_1): Releasing backup interface [ 132.020327][T12087] team0: Port device team_slave_0 removed [ 132.028913][T12087] team0: Port device team_slave_1 removed [ 132.035904][T12087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.043310][T12087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.051799][T12087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.059287][T12087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.075187][T12087] bond1: left promiscuous mode [ 132.080119][T12087] bridge0: port 3(bond1) entered disabled state [ 132.250013][T12109] sch_fq: defrate 4294967295 ignored. [ 132.316466][T12117] syzkaller0: entered allmulticast mode [ 132.348027][T12117] syzkaller0: entered promiscuous mode [ 132.360650][T12117] syzkaller0 (unregistering): left allmulticast mode [ 132.367458][T12117] syzkaller0 (unregistering): left promiscuous mode [ 132.528815][T12135] random: crng reseeded on system resumption [ 132.613934][T12146] __nla_validate_parse: 7 callbacks suppressed [ 132.613967][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3642'. [ 132.648922][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'. [ 132.808926][T12163] loop5: detected capacity change from 0 to 512 [ 132.985155][T12163] EXT4-fs: Ignoring removed oldalloc option [ 132.991166][T12163] EXT4-fs: inline encryption not supported [ 132.997075][T12163] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.047259][T12163] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.138970][T12163] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3650: bg 0: block 64: padding at end of block bitmap is not set [ 133.156272][T12163] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3650: Failed to acquire dquot type 0 [ 133.174426][T12163] EXT4-fs (loop5): 1 truncate cleaned up [ 133.181627][T12163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.213801][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.843326][T12233] loop5: detected capacity change from 0 to 128 [ 133.866046][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 133.866064][ T29] audit: type=1400 audit(390.848:5780): avc: denied { override_creds } for pid=12236 comm="syz.0.3682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.957223][T12233] syz.5.3680: attempt to access beyond end of device [ 133.957223][T12233] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 133.971049][T12233] syz.5.3680: attempt to access beyond end of device [ 133.971049][T12233] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 133.986682][T12233] syz.5.3680: attempt to access beyond end of device [ 133.986682][T12233] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 134.000438][T12233] syz.5.3680: attempt to access beyond end of device [ 134.000438][T12233] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 134.015445][T12233] syz.5.3680: attempt to access beyond end of device [ 134.015445][T12233] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 134.029010][T12233] syz.5.3680: attempt to access beyond end of device [ 134.029010][T12233] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 134.044409][T12233] syz.5.3680: attempt to access beyond end of device [ 134.044409][T12233] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 134.057983][T12233] syz.5.3680: attempt to access beyond end of device [ 134.057983][T12233] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 134.071628][T12233] syz.5.3680: attempt to access beyond end of device [ 134.071628][T12233] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 134.085507][T12233] syz.5.3680: attempt to access beyond end of device [ 134.085507][T12233] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 134.102063][ T29] audit: type=1326 audit(391.088:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.125745][ T29] audit: type=1326 audit(391.088:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.148751][ T29] audit: type=1326 audit(391.088:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.171866][ T29] audit: type=1326 audit(391.088:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.194987][ T29] audit: type=1326 audit(391.088:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.218005][ T29] audit: type=1326 audit(391.088:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.240980][ T29] audit: type=1326 audit(391.088:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.263866][ T29] audit: type=1326 audit(391.088:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.286957][ T29] audit: type=1326 audit(391.088:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 134.517126][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3702'. [ 134.730042][T12308] bridge: RTM_NEWNEIGH with invalid ether address [ 135.182214][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119e7b600: rx timeout, send abort [ 135.190534][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119e7b600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.208122][T12365] SELinux: Context is not valid (left unmapped). [ 135.262700][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3751'. [ 135.272026][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3751'. [ 135.663076][T12411] loop5: detected capacity change from 0 to 1024 [ 135.685146][T12411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.716974][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.735367][T12420] netlink: 'syz.0.3764': attribute type 2 has an invalid length. [ 135.743190][T12420] netlink: 'syz.0.3764': attribute type 1 has an invalid length. [ 135.751011][T12420] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3764'. [ 135.804251][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3770'. [ 135.814192][T12433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 135.820988][T12433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.828702][T12433] vhci_hcd vhci_hcd.0: Device attached [ 135.864208][T12434] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 135.871285][ T52] vhci_hcd: stop threads [ 135.875697][ T52] vhci_hcd: release socket [ 135.880139][ T52] vhci_hcd: disconnect device [ 136.379679][T12444] net_ratelimit: 11 callbacks suppressed [ 136.379697][T12444] bond_slave_1: mtu less than device minimum [ 136.955892][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3794'. [ 137.164505][ T8700] hid_parser_main: 43 callbacks suppressed [ 137.164526][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.177801][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.185261][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.192689][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.200071][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.207509][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.214928][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.222417][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.229969][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.237408][ T8700] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 137.248518][ T8700] hid-generic 0008:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 137.306903][T12505] geneve0: left allmulticast mode [ 137.314867][T12505] bond1: left allmulticast mode [ 137.320525][T12505] veth5: left promiscuous mode [ 137.327477][T12505] team1: left promiscuous mode [ 137.332446][T12505] team1: left allmulticast mode [ 137.338328][ T52] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.363062][ T52] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.381783][ T52] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.408599][ T52] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.715600][T12567] netlink: 'syz.1.3825': attribute type 1 has an invalid length. [ 137.730440][T12567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.745861][T12567] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 137.755095][T12567] bond2: (slave batadv1): making interface the new active one [ 137.763927][T12567] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 138.284237][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3846'. [ 138.307980][T12618] netlink: 'syz.1.3847': attribute type 13 has an invalid length. [ 138.451849][T12622] blktrace: Concurrent blktraces are not allowed on loop3 [ 138.852848][T12636] loop3: detected capacity change from 0 to 8192 [ 138.904992][T12643] ref_ctr_offset mismatch. inode: 0x3ec offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000000 [ 138.999853][T12648] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 140.278964][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 140.278984][ T29] audit: type=1400 audit(397.258:6114): avc: denied { mounton } for pid=12684 comm="syz.1.3873" path="/file0" dev="ramfs" ino=38613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 140.343148][T12689] wg2: entered promiscuous mode [ 140.348035][T12689] wg2: entered allmulticast mode [ 140.387868][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3877'. [ 140.615682][T12716] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 140.626119][T12716] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 140.646615][T12718] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 140.812088][T12733] netlink: 'syz.2.3896': attribute type 1 has an invalid length. [ 140.843854][T12733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.871162][T12736] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 140.897134][T12736] bond1: (slave batadv1): making interface the new active one [ 140.941101][T12736] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 141.120056][ T29] audit: type=1326 audit(398.098:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 141.143137][ T29] audit: type=1326 audit(398.098:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 141.166377][ T29] audit: type=1326 audit(398.098:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 141.189428][ T29] audit: type=1326 audit(398.098:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb587d4ec23 code=0x7ffc0000 [ 141.390943][ T29] audit: type=1326 audit(398.098:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb587d4d69f code=0x7ffc0000 [ 141.413873][ T29] audit: type=1326 audit(398.098:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb587d4ec77 code=0x7ffc0000 [ 141.436885][ T29] audit: type=1326 audit(398.098:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb587d4d550 code=0x7ffc0000 [ 141.459857][ T29] audit: type=1326 audit(398.098:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb587d4d84a code=0x7ffc0000 [ 141.482711][ T29] audit: type=1326 audit(398.098:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 141.784717][T12759] program syz.5.3907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.975519][T12779] loop3: detected capacity change from 0 to 512 [ 142.003924][T12779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.043480][T12790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3920'. [ 142.054832][T12790] x_tables: ip_tables: udp match: only valid for protocol 17 [ 142.167336][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3927'. [ 142.176477][T12808] tipc: Started in network mode [ 142.181697][T12808] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 142.189004][T12808] tipc: Enabled bearer , priority 10 [ 142.208298][T12808] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3927'. [ 142.217753][T12808] tipc: Resetting bearer [ 142.240631][T12808] tipc: Disabling bearer [ 142.262696][T12819] loop1: detected capacity change from 0 to 128 [ 142.270725][T12819] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.318704][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.334851][T10153] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.357912][T12826] ip6gre1: entered allmulticast mode [ 142.395038][T12834] netlink: 'syz.0.3939': attribute type 10 has an invalid length. [ 142.402966][T12834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3939'. [ 142.416603][T12834] dummy0: entered promiscuous mode [ 142.828604][T12882] tipc: New replicast peer: 255.28.0.84 [ 142.834333][T12882] tipc: Enabled bearer , priority 10 [ 142.884347][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3962'. [ 142.893397][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3962'. [ 143.102281][ T8700] hid_parser_main: 43 callbacks suppressed [ 143.102304][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.115819][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.123314][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.130761][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.138231][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.145812][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.153347][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.160738][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.168147][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.175630][ T8700] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.183908][ T8700] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 143.222058][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3974'. [ 143.440998][T12940] tipc: New replicast peer: 255.255.255.255 [ 143.447202][T12940] tipc: Enabled bearer , priority 10 [ 143.454401][T12940] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3986'. [ 143.951585][ T8700] tipc: Node number set to 43690 [ 143.967177][T12966] loop1: detected capacity change from 0 to 128 [ 144.120849][T12973] bio_check_eod: 24 callbacks suppressed [ 144.120864][T12973] syz.1.3997: attempt to access beyond end of device [ 144.120864][T12973] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 144.147616][T12973] syz.1.3997: attempt to access beyond end of device [ 144.147616][T12973] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 144.165412][T12973] syz.1.3997: attempt to access beyond end of device [ 144.165412][T12973] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 144.180047][T12973] syz.1.3997: attempt to access beyond end of device [ 144.180047][T12973] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 144.207663][T12973] syz.1.3997: attempt to access beyond end of device [ 144.207663][T12973] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 144.240185][T12973] syz.1.3997: attempt to access beyond end of device [ 144.240185][T12973] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 144.253933][T12973] syz.1.3997: attempt to access beyond end of device [ 144.253933][T12973] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 144.267662][T12973] syz.1.3997: attempt to access beyond end of device [ 144.267662][T12973] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 144.285935][T12973] syz.1.3997: attempt to access beyond end of device [ 144.285935][T12973] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 144.299877][T12973] syz.1.3997: attempt to access beyond end of device [ 144.299877][T12973] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 144.362294][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4002'. [ 144.404335][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'. [ 144.529143][ T8700] hid-generic 0008:0006:0007.0004: hidraw0: HID v0.0b Device [syz1] on syz1 [ 145.161345][T13010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4016'. [ 145.170692][T13010] x_tables: ip_tables: udp match: only valid for protocol 17 [ 145.290683][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 145.290697][ T29] audit: type=1326 audit(402.268:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f762a935ba7 code=0x7ffc0000 [ 145.319925][ T29] audit: type=1326 audit(402.268:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f762a8dadd9 code=0x7ffc0000 [ 145.342946][ T29] audit: type=1326 audit(402.268:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f762a93ebe9 code=0x7ffc0000 [ 145.372493][ T29] audit: type=1326 audit(402.348:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f762a935ba7 code=0x7ffc0000 [ 145.395639][ T29] audit: type=1326 audit(402.348:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f762a8dadd9 code=0x7ffc0000 [ 145.418451][ T29] audit: type=1326 audit(402.348:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f762a93ebe9 code=0x7ffc0000 [ 145.441562][ T29] audit: type=1326 audit(402.348:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f762a935ba7 code=0x7ffc0000 [ 145.464805][ T29] audit: type=1326 audit(402.358:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f762a8dadd9 code=0x7ffc0000 [ 145.487857][ T29] audit: type=1326 audit(402.358:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f762a93ebe9 code=0x7ffc0000 [ 145.513169][ T29] audit: type=1326 audit(402.498:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f762a935ba7 code=0x7ffc0000 [ 145.739121][T13045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4029'. [ 145.748785][T13045] x_tables: ip_tables: udp match: only valid for protocol 17 [ 145.791019][T13052] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 145.806107][T13052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.824239][T13052] vlan3: entered allmulticast mode [ 145.829501][T13052] bond3: entered allmulticast mode [ 146.239712][T13075] loop3: detected capacity change from 0 to 512 [ 146.247931][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4044'. [ 146.262555][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 146.275314][T13075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.294905][T13075] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4045: bg 0: block 217: padding at end of block bitmap is not set [ 146.350136][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.570920][T13119] netlink: 'syz.2.4061': attribute type 1 has an invalid length. [ 146.692094][T13128] macvlan2: entered promiscuous mode [ 146.712940][T13128] bond0: (slave macvlan2): Enslaving as an active interface with a down link [ 146.732919][T13128] macvlan3: entered promiscuous mode [ 146.741064][T13128] bond0: (slave macvlan3): Enslaving as an active interface with a down link [ 146.967245][T13166] netlink: 'syz.5.4081': attribute type 1 has an invalid length. [ 146.989421][T13166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.016428][T13166] vlan2: entered allmulticast mode [ 147.021848][T13166] bond2: entered allmulticast mode [ 147.213212][T13179] loop3: detected capacity change from 0 to 2048 [ 147.226173][T13179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.412173][T13197] loop5: detected capacity change from 0 to 512 [ 147.420403][T13197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 147.428501][T13197] System zones: 1-12 [ 147.444017][T13197] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.4093: error while reading EA inode 32 err=-116 [ 147.490760][T13197] EXT4-fs (loop5): Remounting filesystem read-only [ 147.497531][T13197] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 147.513792][T13207] geneve2: entered promiscuous mode [ 147.519030][T13207] geneve2: entered allmulticast mode [ 147.565760][T13197] EXT4-fs (loop5): 1 orphan inode deleted [ 147.578403][T13211] bridge0: port 1(macsec1) entered blocking state [ 147.585243][T13211] bridge0: port 1(macsec1) entered disabled state [ 147.594830][T13197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.595326][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4099'. [ 147.607440][T13211] macsec1: entered allmulticast mode [ 147.621653][T13211] bridge0: entered allmulticast mode [ 147.630724][T13211] macsec1: left allmulticast mode [ 147.635979][T13211] bridge0: left allmulticast mode [ 147.655872][T13213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.699165][T13189] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.743654][T13189] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 147.756344][T13189] EXT4-fs (loop3): This should not happen!! Data will be lost [ 147.756344][T13189] [ 147.760366][T13213] vlan3: entered allmulticast mode [ 147.766211][T13189] EXT4-fs (loop3): Total free blocks count 0 [ 147.766228][T13189] EXT4-fs (loop3): Free/Dirty block details [ 147.766240][T13189] EXT4-fs (loop3): free_blocks=2415919104 [ 147.766254][T13189] EXT4-fs (loop3): dirty_blocks=8208 [ 147.771502][T13213] bond4: entered allmulticast mode [ 147.777439][T13189] EXT4-fs (loop3): Block reservation details [ 147.805756][T13189] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 147.823984][T13223] macsec0: entered promiscuous mode [ 147.954742][ T3821] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 148.004937][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 148.039140][T13236] team2: entered promiscuous mode [ 148.044719][T13236] team2: entered allmulticast mode [ 148.085923][T13240] netlink: 'syz.3.4107': attribute type 17 has an invalid length. [ 148.093917][T13240] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4107'. [ 148.104837][T13240] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 148.252265][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.967959][T13304] __nla_validate_parse: 3 callbacks suppressed [ 148.967977][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4143'. [ 148.970851][T13300] loop3: detected capacity change from 0 to 1024 [ 149.001834][T13300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.049742][T13300] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4133: Allocating blocks 385-513 which overlap fs metadata [ 149.167856][T13313] EXT4-fs (loop3): pa ffff888106dcc930: logic 16, phys. 129, len 24 [ 149.175957][T13313] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 149.298938][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.590642][T13353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.616119][T13353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.647476][T13360] loop5: detected capacity change from 0 to 512 [ 149.674761][T13360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.749427][T13360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.801966][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.955171][T13393] netem: change failed [ 149.965286][T13394] loop5: detected capacity change from 0 to 164 [ 149.966723][T13395] bridge0: port 4(macsec1) entered blocking state [ 149.978372][T13395] bridge0: port 4(macsec1) entered disabled state [ 149.985955][T13395] macsec1: entered allmulticast mode [ 149.991309][T13395] bridge0: entered allmulticast mode [ 149.997611][T13394] bio_check_eod: 74 callbacks suppressed [ 149.997629][T13394] syz.5.4173: attempt to access beyond end of device [ 149.997629][T13394] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 150.018014][T13395] macsec1: left allmulticast mode [ 150.023281][T13395] bridge0: left allmulticast mode [ 150.028507][T13394] syz.5.4173: attempt to access beyond end of device [ 150.028507][T13394] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.070036][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4175'. [ 150.079918][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4175'. [ 150.157784][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4180'. [ 150.330728][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4188'. [ 150.352333][ T8700] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 60 sec [ 150.399109][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4188'. [ 150.448707][T13440] bridge0: port 5(macsec1) entered blocking state [ 150.455378][T13440] bridge0: port 5(macsec1) entered disabled state [ 150.462442][T13440] macsec1: entered allmulticast mode [ 150.467753][T13440] bridge0: entered allmulticast mode [ 150.473873][T13440] macsec1: left allmulticast mode [ 150.478916][T13440] bridge0: left allmulticast mode [ 150.571085][ T29] kauditd_printk_skb: 1255 callbacks suppressed [ 150.571182][ T29] audit: type=1400 audit(407.548:7775): avc: denied { setopt } for pid=13447 comm="syz.2.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.610467][T13450] geneve2: entered promiscuous mode [ 150.615873][T13450] geneve2: entered allmulticast mode [ 150.662475][T13454] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4196'. [ 151.020757][ T29] audit: type=1326 audit(407.998:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.045420][ T29] audit: type=1326 audit(407.998:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.068534][ T29] audit: type=1326 audit(407.998:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.091573][ T29] audit: type=1326 audit(408.008:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.114545][ T29] audit: type=1326 audit(408.008:7780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.137542][ T29] audit: type=1326 audit(408.008:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.160686][ T29] audit: type=1326 audit(408.008:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.183627][ T29] audit: type=1326 audit(408.008:7783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.206517][ T29] audit: type=1326 audit(408.008:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13485 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb587d4ebe9 code=0x7ffc0000 [ 151.628147][T13513] loop1: detected capacity change from 0 to 512 [ 151.654579][T13513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.674298][T13513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.719650][T10153] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.362605][T13546] Set syz1 is full, maxelem 65536 reached [ 152.410291][T13551] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4237'. [ 152.419351][T13551] 0{X: renamed from gretap0 [ 152.426058][T13551] 0{X: entered allmulticast mode [ 152.432603][T13551] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 152.675117][T13578] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 152.675117][T13578] program syz.3.4248 not setting count and/or reply_len properly [ 152.717842][T13580] syzkaller1: entered promiscuous mode [ 152.723523][T13580] syzkaller1: entered allmulticast mode [ 152.770924][T13586] loop3: detected capacity change from 0 to 2048 [ 152.803794][T13586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.834115][T13597] loop5: detected capacity change from 0 to 512 [ 152.840695][T13597] EXT4-fs: Ignoring removed nobh option [ 152.856598][T13597] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 152.867822][ T3304] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 152.883038][T13597] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4257: invalid indirect mapped block 256 (level 1) [ 152.885023][ T3304] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 152.923963][T13597] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4257: invalid indirect mapped block 2683928664 (level 1) [ 152.941675][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.956204][T13597] EXT4-fs (loop5): 1 truncate cleaned up [ 152.974331][T13597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.996412][T13597] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4257: Invalid block bitmap block 3 in block_group 0 [ 153.010957][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 153.174792][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4271'. [ 153.187136][T13632] vxlan0: entered promiscuous mode [ 153.193752][ T52] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.203075][ T52] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.211264][ T52] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.219987][ T52] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.528774][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.819356][T13651] Set syz1 is full, maxelem 65536 reached [ 154.227581][T13679] ip6gre2: entered allmulticast mode [ 154.282091][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4296'. [ 154.302040][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4296'. [ 154.904379][T13714] loop1: detected capacity change from 0 to 512 [ 154.926557][T13714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.039825][T10153] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.164105][T13750] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4319'. [ 155.261373][T13764] sctp: [Deprecated]: syz.2.4324 (pid 13764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.261373][T13764] Use struct sctp_sack_info instead [ 155.336759][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4326'. [ 155.576512][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 155.576527][ T29] audit: type=1400 audit(412.558:7993): avc: denied { listen } for pid=13801 comm="syz.2.4341" lport=45276 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.609073][ T29] audit: type=1326 audit(412.588:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.1.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 155.632151][ T29] audit: type=1326 audit(412.588:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.1.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 155.655268][ T29] audit: type=1326 audit(412.588:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.1.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 155.678509][ T29] audit: type=1400 audit(412.588:7997): avc: denied { accept } for pid=13801 comm="syz.2.4341" lport=45276 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.701171][ T29] audit: type=1400 audit(412.588:7998): avc: denied { setopt } for pid=13801 comm="syz.2.4341" lport=45276 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.724508][ T29] audit: type=1326 audit(412.588:7999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.1.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 155.751889][T13806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.760559][T13806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.855580][ T29] audit: type=1326 audit(412.588:8000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.1.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 155.878590][ T29] audit: type=1326 audit(412.588:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13804 comm="syz.1.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5bd19b14a5 code=0x7ffc0000 [ 155.901478][ T29] audit: type=1326 audit(412.598:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.1.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 156.051733][T13834] loop2: detected capacity change from 0 to 64 [ 156.172629][T13848] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4359'. [ 156.359900][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4367'. [ 156.372217][T13867] vxlan0: entered promiscuous mode [ 156.379790][ T52] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.394806][ T52] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.405723][ T52] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.414293][ T52] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.843339][T13875] loop1: detected capacity change from 0 to 512 [ 156.844203][T13874] loop5: detected capacity change from 0 to 512 [ 156.850436][T13875] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.873298][T13874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.999325][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.017961][T13884] loop5: detected capacity change from 0 to 512 [ 157.026027][T13884] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4372: corrupted in-inode xattr: invalid ea_ino [ 157.039649][T13884] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4372: couldn't read orphan inode 15 (err -117) [ 157.053027][T13884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.111548][T13884] loop5: detected capacity change from 512 to 64 [ 157.124386][T13884] syz.5.4372: attempt to access beyond end of device [ 157.124386][T13884] loop5: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 157.137960][T13884] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 37) [ 157.149166][T13884] Buffer I/O error on device loop5, logical block 37 [ 157.155933][T13884] Buffer I/O error on device loop5, logical block 38 [ 157.162615][T13884] Buffer I/O error on device loop5, logical block 39 [ 157.169345][T13884] Buffer I/O error on device loop5, logical block 40 [ 157.196734][T13884] syz.5.4372: attempt to access beyond end of device [ 157.196734][T13884] loop5: rw=2049, sector=90, nr_sectors = 8 limit=64 [ 157.210108][T13884] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 157.221441][T13884] Buffer I/O error on device loop5, logical block 45 [ 157.228119][T13884] Buffer I/O error on device loop5, logical block 46 [ 157.234791][T13884] Buffer I/O error on device loop5, logical block 47 [ 157.241472][T13884] Buffer I/O error on device loop5, logical block 48 [ 157.248844][T13884] syz.5.4372: attempt to access beyond end of device [ 157.248844][T13884] loop5: rw=2049, sector=106, nr_sectors = 8 limit=64 [ 157.262423][T13884] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 157.273688][T13884] Buffer I/O error on device loop5, logical block 53 [ 157.280398][T13884] Buffer I/O error on device loop5, logical block 54 [ 157.392482][ T6023] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 157.458095][T11656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.798193][T13929] chnl_net:caif_netlink_parms(): no params data found [ 157.809797][T13956] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 157.869726][T13929] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.876982][T13929] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.886472][T13929] bridge_slave_0: entered allmulticast mode [ 157.893707][T13929] bridge_slave_0: entered promiscuous mode [ 157.900716][T13929] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.907805][T13929] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.915178][T13929] bridge_slave_1: entered allmulticast mode [ 157.921946][T13929] bridge_slave_1: entered promiscuous mode [ 157.945209][T13968] tipc: Disabling bearer [ 157.953113][T13929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.973852][T13929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.024019][T13929] team0: Port device team_slave_0 added [ 158.067225][T13929] team0: Port device team_slave_1 added [ 158.104177][T13929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.111223][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.137347][T13929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.194265][T13929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.201284][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.227542][T13929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.299884][T13929] hsr_slave_0: entered promiscuous mode [ 158.312238][T13929] hsr_slave_1: entered promiscuous mode [ 158.340182][T13929] debugfs: 'hsr0' already exists in 'hsr' [ 158.346000][T13929] Cannot create hsr debugfs directory [ 158.495035][T14000] serio: Serial port ptm0 [ 158.522828][T13929] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.540511][T13929] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.557095][T13929] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.585745][T13929] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.641260][T14005] C: renamed from team_slave_0 [ 158.668962][T14005] netlink: 'syz.3.4422': attribute type 1 has an invalid length. [ 158.677083][T14005] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4422'. [ 158.686263][T14005] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 158.745819][ T3865] bridge_slave_1: left allmulticast mode [ 158.751640][ T3865] bridge_slave_1: left promiscuous mode [ 158.757369][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.789374][ T3865] bridge_slave_0: left promiscuous mode [ 158.795198][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.014145][ T3865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.025312][ T3865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.035738][ T3865] bond0 (unregistering): Released all slaves [ 159.045569][ T3865] bond1 (unregistering): Released all slaves [ 159.065362][ T3865] bond2 (unregistering): Released all slaves [ 159.077681][T14030] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4431'. [ 159.123216][T13929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.159454][T13929] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.176172][ T3865] tipc: Disabling bearer [ 159.181196][ T3865] tipc: Left network mode [ 159.188211][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.195300][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.221550][ T3865] hsr_slave_0: left promiscuous mode [ 159.228806][ T3865] hsr_slave_1: left promiscuous mode [ 159.235058][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.311791][ T3865] team0 (unregistering): Port device team_slave_1 removed [ 159.324612][ T3865] team0 (unregistering): Port device C removed [ 159.374318][ T3865] team0 (unregistering): Port device dummy0 removed [ 159.397524][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.404631][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.498158][T13929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.572808][T14014] chnl_net:caif_netlink_parms(): no params data found [ 159.640807][T13929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.690665][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.698066][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.733731][T14014] bridge_slave_0: entered allmulticast mode [ 159.740684][T14014] bridge_slave_0: entered promiscuous mode [ 159.755078][ T3865] IPVS: stop unused estimator thread 0... [ 159.775236][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.782459][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.792662][T14014] bridge_slave_1: entered allmulticast mode [ 159.799469][T14014] bridge_slave_1: entered promiscuous mode [ 159.864817][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.901267][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.954334][T14014] team0: Port device team_slave_0 added [ 159.967219][T14014] team0: Port device team_slave_1 added [ 160.020487][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.027624][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.053791][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.074042][T14092] netlink: 'syz.0.4446': attribute type 4 has an invalid length. [ 160.106226][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.113446][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.139637][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.160238][T13929] veth0_vlan: entered promiscuous mode [ 160.203508][T13929] veth1_vlan: entered promiscuous mode [ 160.311241][T14114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4457'. [ 160.315452][T14112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4456'. [ 160.324111][T13929] veth0_macvtap: entered promiscuous mode [ 160.523406][ T3865]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.534149][ T3865]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.543037][ T3865]  (unregistering): Released all slaves [ 160.550993][ T3865] bond0 (unregistering): (slave veth11): Releasing active interface [ 160.560173][ T3865] bond0 (unregistering): (slave macvlan2): Releasing active interface [ 160.569394][ T3865] bond0 (unregistering): (slave macvlan3): Releasing active interface [ 160.579135][ T3865] bond0 (unregistering): Released all slaves [ 160.587731][ T3865] bond1 (unregistering): (slave batadv1): Releasing active interface [ 160.598820][ T3865] bond1 (unregistering): Released all slaves [ 160.608950][T14014] hsr_slave_0: entered promiscuous mode [ 160.615746][T14014] hsr_slave_1: entered promiscuous mode [ 160.621815][T14014] debugfs: 'hsr0' already exists in 'hsr' [ 160.627544][T14014] Cannot create hsr debugfs directory [ 160.638547][T13929] veth1_macvtap: entered promiscuous mode [ 160.657811][ T3865] tipc: Disabling bearer [ 160.663035][ T3865] tipc: Disabling bearer [ 160.668367][ T3865] tipc: Left network mode [ 160.678573][T13929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.717867][ T3865] hsr_slave_0: left promiscuous mode [ 160.728402][ T3865] hsr_slave_1: left promiscuous mode [ 160.736996][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.745853][T14132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4462'. [ 160.747145][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.818215][ T3865] team0 (unregistering): Port device team_slave_1 removed [ 160.829409][ T3865] team0 (unregistering): Port device C removed [ 160.848616][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 160.848633][ T29] audit: type=1326 audit(417.828:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 160.892947][ T29] audit: type=1326 audit(417.828:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 160.915812][ T29] audit: type=1326 audit(417.828:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 160.938923][ T29] audit: type=1326 audit(417.828:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 160.961933][ T29] audit: type=1326 audit(417.828:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 160.984968][ T29] audit: type=1326 audit(417.828:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 161.007965][ T29] audit: type=1326 audit(417.828:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 161.030935][ T29] audit: type=1326 audit(417.828:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 161.054062][ T29] audit: type=1326 audit(417.828:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 161.076954][ T29] audit: type=1326 audit(417.828:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.0.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 161.100334][ T3865] team0 (unregistering): Port device dummy0 removed [ 161.115044][T13929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.149214][ T3821] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.191348][ T3821] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.224342][T14144] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 161.232253][ T3821] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.257929][ T3837] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.290133][T14014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.302727][T14014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.320825][T14014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.337681][T14150] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 161.347121][T14014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 161.413181][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.456206][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.479702][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.486921][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.487068][T14165] loop6: detected capacity change from 0 to 2048 [ 161.503114][T14165] EXT4-fs (loop6): unsupported inode size: 0 [ 161.509138][T14165] EXT4-fs (loop6): blocksize: 2048 [ 161.531617][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.538923][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.650328][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.676965][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4479'. [ 161.775722][T14202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14202 comm=syz.0.4482 [ 161.829126][T14014] veth0_vlan: entered promiscuous mode [ 161.838068][T14014] veth1_vlan: entered promiscuous mode [ 161.863841][T14014] veth0_macvtap: entered promiscuous mode [ 161.874578][T14014] veth1_macvtap: entered promiscuous mode [ 161.887147][T14014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.901818][T14014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.913270][ T1378] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.932084][ T1378] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.946366][ T1378] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.967847][ T1378] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.992208][T14229] loop7: detected capacity change from 0 to 512 [ 162.013651][T14229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.133290][T14014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.298786][T14263] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.332833][T14263] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.385110][T14270] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.397343][T14263] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.444745][T14270] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.493019][T14263] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 162.534408][T14270] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.595716][ T3821] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.607417][ T3821] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.627257][ T3821] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.640609][T14270] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.663571][ T3821] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.829723][T14299] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4518'. [ 163.204306][T14329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14329 comm=syz.0.4531 [ 163.748640][ T3837] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.763868][ T3837] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.776482][ T3837] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.785996][ T3837] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.802769][T14389] netlink: 1092 bytes leftover after parsing attributes in process `syz.3.4557'. [ 163.849868][T14398] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4555'. [ 163.915917][T14407] netlink: 'syz.7.4564': attribute type 3 has an invalid length. [ 163.957686][T14414] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4568'. [ 164.128634][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4572'. [ 164.138637][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4572'. [ 164.179516][T14430] netlink: 'syz.0.4574': attribute type 4 has an invalid length. [ 164.233579][T14438] loop3: detected capacity change from 0 to 1024 [ 164.240569][T14438] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.247108][T14438] EXT4-fs: Ignoring removed bh option [ 164.272370][T14438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.369522][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.844539][T14449] Set syz1 is full, maxelem 65536 reached [ 164.878598][T14475] netlink: 'syz.7.4593': attribute type 6 has an invalid length. [ 164.907587][T14473] netlink: 'syz.6.4592': attribute type 39 has an invalid length. [ 164.958780][T14483] sctp: [Deprecated]: syz.7.4597 (pid 14483) Use of int in max_burst socket option deprecated. [ 164.958780][T14483] Use struct sctp_assoc_value instead [ 165.175523][T14511] netlink: 'syz.6.4611': attribute type 27 has an invalid length. [ 165.238738][T14511] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.245960][T14511] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.336229][T14511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.348119][T14511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.386079][T14519] __nla_validate_parse: 3 callbacks suppressed [ 165.386095][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4612'. [ 165.401275][T14519] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4612'. [ 165.410472][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4612'. [ 165.465109][T14527] wg2: entered promiscuous mode [ 165.470007][T14527] wg2: entered allmulticast mode [ 165.504650][ T1378] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.526605][ T1378] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.542742][ T1378] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.573607][ T1378] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.585860][T14539] netlink: 'syz.3.4621': attribute type 9 has an invalid length. [ 165.721170][T14558] netlink: 'syz.6.4630': attribute type 1 has an invalid length. [ 165.728990][T14558] netlink: 'syz.6.4630': attribute type 4 has an invalid length. [ 165.736932][T14558] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4630'. [ 165.753956][T14558] netlink: 'syz.6.4630': attribute type 1 has an invalid length. [ 165.761801][T14558] netlink: 'syz.6.4630': attribute type 4 has an invalid length. [ 165.769624][T14558] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4630'. [ 165.872030][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 165.872058][ T29] audit: type=1326 audit(422.858:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.3.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a93ebe9 code=0x7ffc0000 [ 165.901267][ T29] audit: type=1326 audit(422.858:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.3.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a93ebe9 code=0x7ffc0000 [ 165.963436][ T29] audit: type=1326 audit(422.948:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.6.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 166.013975][ T29] audit: type=1326 audit(422.948:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.6.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 166.037046][ T29] audit: type=1326 audit(422.948:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.6.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 166.060202][ T29] audit: type=1326 audit(422.948:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.6.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 166.083124][ T29] audit: type=1326 audit(422.948:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.6.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 166.106243][ T29] audit: type=1326 audit(422.948:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.6.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 166.129294][ T29] audit: type=1326 audit(422.948:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.6.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 166.152485][ T29] audit: type=1326 audit(422.948:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.6.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 166.321978][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4645'. [ 166.418855][T14584] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4641'. [ 166.419010][T14580] Set syz1 is full, maxelem 65536 reached [ 166.538572][T14601] loop1: detected capacity change from 0 to 164 [ 166.556014][T14601] syz.1.4647: attempt to access beyond end of device [ 166.556014][T14601] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 166.583697][T14601] syz.1.4647: attempt to access beyond end of device [ 166.583697][T14601] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 166.967176][T14624] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4656'. [ 167.202551][T14655] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4671'. [ 167.211775][T14655] hsr_slave_0: left promiscuous mode [ 167.217637][T14655] hsr_slave_1: left promiscuous mode [ 167.365057][T14668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14668 comm=syz.3.4676 [ 167.655860][T14692] loop3: detected capacity change from 0 to 128 [ 167.971616][T14703] Set syz1 is full, maxelem 65536 reached [ 168.043478][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4701'. [ 168.345589][T14767] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 168.448804][T14779] loop3: detected capacity change from 0 to 8192 [ 168.635654][T14791] loop1: detected capacity change from 0 to 1024 [ 168.645483][T14791] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 168.674901][T14791] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 168.690752][T14791] EXT4-fs (loop1): orphan cleanup on readonly fs [ 168.700560][T14791] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 168.715170][T14791] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 168.722910][T14791] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.4729: Freeing blocks not in datazone - block = 0, count = 4096 [ 168.740745][T14798] bond0: (slave eth1): Enslaving as an active interface with an up link [ 168.752603][T14791] EXT4-fs (loop1): Remounting filesystem read-only [ 168.770804][T14791] EXT4-fs (loop1): 1 orphan inode deleted [ 168.794253][T14791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.832803][T14798] bridge_slave_0: left allmulticast mode [ 168.838503][T14798] bridge_slave_0: left promiscuous mode [ 168.844229][T14798] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.867153][T14798] bridge_slave_1: left allmulticast mode [ 168.872874][T14798] bridge_slave_1: left promiscuous mode [ 168.878581][T14798] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.901809][T14798] bond0: (slave bond_slave_0): Releasing backup interface [ 168.919380][T14798] bond0: (slave bond_slave_1): Releasing backup interface [ 168.944397][T14798] team0: Port device team_slave_0 removed [ 168.958097][T14798] team0: Port device team_slave_1 removed [ 168.968702][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.976253][T14798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.990733][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.998381][T14798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.015717][T14798] bond0: (slave eth1): Releasing backup interface [ 169.045384][T10153] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.048885][T14816] syzkaller1: entered promiscuous mode [ 169.060186][T14816] syzkaller1: entered allmulticast mode [ 169.186356][T14836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.212247][T14836] vlan2: entered allmulticast mode [ 169.217421][T14836] bond1: entered allmulticast mode [ 169.613084][T14851] Set syz1 is full, maxelem 65536 reached [ 170.289402][T14890] C: renamed from team_slave_0 [ 170.299824][T14890] validate_nla: 1 callbacks suppressed [ 170.299841][T14890] netlink: 'syz.6.4770': attribute type 1 has an invalid length. [ 170.313293][T14890] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 170.357514][T14897] vlan3: entered allmulticast mode [ 170.362719][T14897] bridge_slave_0: entered allmulticast mode [ 170.466632][T14902] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.536752][T14902] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.625948][T14902] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.703921][T14902] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.745300][T14920] __nla_validate_parse: 8 callbacks suppressed [ 170.745314][T14920] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4782'. [ 170.769920][ T3837] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.805558][ T3837] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.825951][ T3837] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.842839][ T3837] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.906604][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 170.906619][ T29] audit: type=1400 audit(427.888:8824): avc: denied { create } for pid=14934 comm="syz.1.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 170.971834][ T29] audit: type=1400 audit(427.918:8825): avc: denied { ioctl } for pid=14934 comm="syz.1.4789" path="socket:[48768]" dev="sockfs" ino=48768 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.117761][T14951] C: renamed from team_slave_0 [ 171.139383][T14951] netlink: 'syz.0.4795': attribute type 1 has an invalid length. [ 171.147236][T14951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4795'. [ 171.156467][T14951] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 171.183100][T14958] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.242076][T14958] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.277645][ T29] audit: type=1400 audit(428.248:8826): avc: denied { shutdown } for pid=14969 comm="syz.6.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.302117][ T29] audit: type=1400 audit(428.288:8827): avc: denied { firmware_load } for pid=14967 comm="syz.7.4804" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 171.329483][T14958] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.384545][ T29] audit: type=1400 audit(428.368:8828): avc: denied { create } for pid=14978 comm="syz.1.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.408885][T14958] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.488535][ T3865] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.523292][ T3865] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.572538][ T3865] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.580882][T14991] C: renamed from team_slave_0 [ 171.586114][ T29] audit: type=1326 audit(428.548:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14990 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 171.609165][ T29] audit: type=1326 audit(428.548:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14990 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 171.632181][ T29] audit: type=1326 audit(428.548:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14990 comm="syz.0.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 171.659127][T14991] netlink: 'syz.1.4814': attribute type 1 has an invalid length. [ 171.666982][T14991] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4814'. [ 171.676219][T14991] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 171.746503][ T3865] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.765193][ T29] audit: type=1400 audit(428.748:8832): avc: denied { relabelfrom } for pid=15009 comm="syz.1.4822" name="NETLINK" dev="sockfs" ino=48936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.789358][ T29] audit: type=1400 audit(428.748:8833): avc: denied { relabelto } for pid=15009 comm="syz.1.4822" name="NETLINK" dev="sockfs" ino=48936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 172.213749][T15030] C: renamed from team_slave_0 [ 172.235654][T15030] netlink: 'syz.7.4829': attribute type 1 has an invalid length. [ 172.243679][T15030] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4829'. [ 172.252756][T15030] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 172.504487][T15044] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 172.657386][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4838'. [ 172.868832][T15062] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.923647][T15062] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.968103][T15062] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.025258][T15062] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.065205][T15075] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4848'. [ 173.138451][ T1378] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.156785][ T1378] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.171372][ T1378] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.179975][ T1378] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.454346][T15109] loop3: detected capacity change from 0 to 512 [ 173.461713][T15109] journal_path: Non-blockdev passed as './bus' [ 173.467896][T15109] EXT4-fs: error: could not find journal device path [ 173.673863][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4870'. [ 173.684349][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4870'. [ 173.717605][T15129] netlink: 'syz.1.4871': attribute type 1 has an invalid length. [ 173.725550][T15129] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.4871'. [ 173.934528][T15143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4876'. [ 173.993169][T15148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15148 comm=syz.6.4878 [ 174.215242][T15179] loop7: detected capacity change from 0 to 2048 [ 174.224594][T15179] EXT4-fs (loop7): unsupported inode size: 0 [ 174.230639][T15179] EXT4-fs (loop7): blocksize: 2048 [ 174.377616][T15197] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 174.457559][T15209] loop3: detected capacity change from 0 to 128 [ 175.232052][T15289] netlink: 'syz.3.4940': attribute type 3 has an invalid length. [ 175.447161][T15319] netlink: 'syz.0.4962': attribute type 1 has an invalid length. [ 175.943161][T15351] netlink: 'syz.0.4976': attribute type 7 has an invalid length. [ 175.951021][T15351] __nla_validate_parse: 7 callbacks suppressed [ 175.951062][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4976'. [ 176.008126][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 176.008143][ T29] audit: type=1326 audit(432.988:9165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 176.053525][ T29] audit: type=1326 audit(432.988:9166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 176.076532][ T29] audit: type=1326 audit(433.018:9167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 176.099526][ T29] audit: type=1326 audit(433.018:9168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 176.122526][ T29] audit: type=1326 audit(433.028:9169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 176.145696][ T29] audit: type=1326 audit(433.028:9170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bd197ec23 code=0x7ffc0000 [ 176.168403][ T29] audit: type=1326 audit(433.028:9171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bd197ec23 code=0x7ffc0000 [ 176.191286][ T29] audit: type=1326 audit(433.028:9172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 176.214185][ T29] audit: type=1326 audit(433.028:9173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 176.237156][ T29] audit: type=1326 audit(433.028:9174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15357 comm="syz.1.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd197ebe9 code=0x7ffc0000 [ 177.344224][T15396] netlink: 'syz.3.4987': attribute type 6 has an invalid length. [ 177.543879][T15427] netlink: 'syz.7.5000': attribute type 7 has an invalid length. [ 177.551849][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5000'. [ 177.719061][T15452] netlink: 'syz.0.5012': attribute type 9 has an invalid length. [ 177.795787][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5014'. [ 177.805405][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5014'. [ 178.245294][T15472] wg2: entered promiscuous mode [ 178.250205][T15472] wg2: entered allmulticast mode [ 178.298413][T15481] netlink: 'syz.1.5023': attribute type 27 has an invalid length. [ 178.314128][T15481] wg2: left promiscuous mode [ 178.318789][T15481] wg2: left allmulticast mode [ 178.332557][T15481] team2: left promiscuous mode [ 178.337541][T15481] team2: left allmulticast mode [ 178.346081][T15481] vxlan0: left promiscuous mode [ 178.353696][ T52] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.364334][ T52] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.372977][ T52] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.382325][ T52] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.433985][T15495] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5031'. [ 178.488398][T15501] ref_ctr increment failed for inode: 0x94b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811bf46780 [ 178.503953][T15500] uprobe: syz.0.5034:15500 failed to unregister, leaking uprobe [ 178.844416][T15526] netlink: 'syz.6.5043': attribute type 4 has an invalid length. [ 178.852371][T15526] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.5043'. [ 179.231921][T15543] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5061'. [ 179.241899][T15543] hsr_slave_0: left promiscuous mode [ 179.248170][T15543] hsr_slave_1: left promiscuous mode [ 180.215911][T15564] netlink: 'syz.6.5060': attribute type 9 has an invalid length. [ 180.224101][T15564] netlink: 'syz.6.5060': attribute type 9 has an invalid length. [ 180.450762][T15588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15588 comm=syz.3.5070 [ 180.562038][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5074'. [ 180.617109][T15595] netlink: 648 bytes leftover after parsing attributes in process `syz.3.5074'. [ 181.173618][T15623] ref_ctr increment failed for inode: 0x207 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811bf41140 [ 181.185614][T15622] uprobe: syz.7.5085:15622 failed to unregister, leaking uprobe [ 181.317997][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 181.318015][ T29] audit: type=1326 audit(438.298:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 181.357356][ T29] audit: type=1326 audit(438.298:9230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 181.380379][ T29] audit: type=1326 audit(438.298:9231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73c13fec23 code=0x7ffc0000 [ 181.403209][ T29] audit: type=1326 audit(438.298:9232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f73c13fd69f code=0x7ffc0000 [ 181.425988][ T29] audit: type=1326 audit(438.298:9233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f73c13fec77 code=0x7ffc0000 [ 181.449051][ T29] audit: type=1326 audit(438.298:9234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73c13fd550 code=0x7ffc0000 [ 181.472274][ T29] audit: type=1326 audit(438.298:9235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f73c13fd84a code=0x7ffc0000 [ 181.494999][ T29] audit: type=1326 audit(438.298:9236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 181.517862][ T29] audit: type=1326 audit(438.298:9237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 181.541098][ T29] audit: type=1326 audit(438.298:9238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.6.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f73c13febe9 code=0x7ffc0000 [ 182.060418][T15680] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5121'. [ 182.179508][T15701] serio: Serial port ptm0 [ 182.302834][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5127'. [ 182.319133][T15718] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.328696][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5127'. [ 182.339527][T15718] bond5 (unregistering): Released all slaves [ 184.312382][T15835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5182'. [ 184.387740][T15844] netlink: 'syz.3.5186': attribute type 10 has an invalid length. [ 184.399093][T15844] dummy0: left allmulticast mode [ 184.404441][T15844] bridge0: port 4(dummy0) entered disabled state [ 184.416169][T15844] bridge_slave_0: left allmulticast mode [ 184.422005][T15844] bridge_slave_0: left promiscuous mode [ 184.427921][T15844] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.437525][T15844] bridge_slave_1: left allmulticast mode [ 184.443319][T15844] bridge_slave_1: left promiscuous mode [ 184.449015][T15844] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.457348][T15844] bond0: (slave bond_slave_0): Releasing backup interface [ 184.465837][T15844] bond0: (slave bond_slave_1): Releasing backup interface [ 184.474401][T15844] team0: Port device C removed [ 184.480044][T15844] team0: Port device team_slave_1 removed [ 184.486045][T15844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.493943][T15844] batadv1: left allmulticast mode [ 184.499183][T15844] batadv1: left promiscuous mode [ 184.504380][T15844] bridge0: port 3(batadv1) entered disabled state [ 184.516084][T15849] vlan2: entered allmulticast mode [ 184.898390][T15865] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5194'. [ 185.306716][T15903] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5206'. [ 185.414313][T15916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5214'. [ 185.447201][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5214'. [ 185.752804][T15945] netlink: 'syz.3.5226': attribute type 27 has an invalid length. [ 185.766158][T15945] dummy0: left promiscuous mode [ 185.794926][T15945] wg2: left promiscuous mode [ 185.799590][T15945] wg2: left allmulticast mode [ 185.848811][T15945] geneve2: left promiscuous mode [ 185.853903][T15945] geneve2: left allmulticast mode [ 185.875932][T15955] netlink: 'syz.6.5230': attribute type 1 has an invalid length. [ 185.922639][ T52] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 185.947085][T15955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.974757][ T52] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 185.997221][T15957] bond2: (slave veth5): Enslaving as an active interface with a down link [ 186.007740][T15955] bond2: (slave dummy0): making interface the new active one [ 186.040896][T15955] dummy0: entered promiscuous mode [ 186.068385][T15955] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 186.105641][ T52] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 186.141902][ T52] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 187.085578][T15997] netlink: 'syz.6.5247': attribute type 10 has an invalid length. [ 187.097164][T15997] bond2: (slave dummy0): Releasing active interface [ 187.106140][T15997] dummy0: left promiscuous mode [ 187.115551][T15997] bridge_slave_0: left allmulticast mode [ 187.121239][T15997] bridge_slave_0: left promiscuous mode [ 187.127038][T15997] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.137522][T15997] bridge_slave_1: left allmulticast mode [ 187.143458][T15997] bridge_slave_1: left promiscuous mode [ 187.149304][T15997] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.162506][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 187.162522][ T29] audit: type=1326 audit(444.138:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a93ebe9 code=0x7ffc0000 [ 187.191684][ T29] audit: type=1326 audit(444.138:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f762a93ebe9 code=0x7ffc0000 [ 187.214751][ T29] audit: type=1326 audit(444.148:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f762a93ec23 code=0x7ffc0000 [ 187.237886][ T29] audit: type=1326 audit(444.208:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f762a93d69f code=0x7ffc0000 [ 187.246772][T16002] loop3: detected capacity change from 0 to 2048 [ 187.260725][ T29] audit: type=1326 audit(444.208:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f762a93ec77 code=0x7ffc0000 [ 187.290285][ T29] audit: type=1326 audit(444.228:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f762a93d550 code=0x7ffc0000 [ 187.291315][T15997] bond0: (slave bond_slave_0): Releasing backup interface [ 187.313247][ T29] audit: type=1326 audit(444.228:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f762a93e7eb code=0x7ffc0000 [ 187.346459][ T29] audit: type=1326 audit(444.318:9379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f762a93d84a code=0x7ffc0000 [ 187.369298][ T29] audit: type=1326 audit(444.318:9380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f762a93d84a code=0x7ffc0000 [ 187.392205][ T29] audit: type=1326 audit(444.318:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.3.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f762a93d457 code=0x7ffc0000 [ 187.415631][T15997] bond0: (slave bond_slave_1): Releasing backup interface [ 187.424587][T15997] team0: Port device C removed [ 187.432155][T15997] team0: Port device team_slave_1 removed [ 187.438335][T15997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.447575][T15997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.458169][T15997] bond2: (slave veth5): Releasing active interface [ 187.491940][T16002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 187.540737][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 187.621219][T16013] batman_adv: batadv0: Adding interface: dummy0 [ 187.627601][T16013] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 187.647461][T16013] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 187.763376][T16025] netlink: 'syz.3.5262': attribute type 1 has an invalid length. [ 187.771185][T16025] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5262'. [ 187.888161][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5270'. [ 187.954575][T16048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16048 comm=syz.1.5273 [ 187.967327][T16048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16048 comm=syz.1.5273 [ 188.069688][T16054] batman_adv: batadv0: Removing interface: dummy0 [ 188.313592][T16080] bridge: RTM_NEWNEIGH with invalid ether address [ 188.856040][T16126] loop3: detected capacity change from 0 to 512 [ 188.931483][T16126] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.987916][T16126] EXT4-fs (loop3): 1 truncate cleaned up [ 188.997669][T16126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.032817][T16131] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000007 [ 189.316236][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.374360][T16138] loop1: detected capacity change from 0 to 2048 [ 189.409237][T16138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 189.463823][T10153] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 189.499859][T16144] netlink: 'syz.1.5316': attribute type 10 has an invalid length. [ 189.522214][T16144] bond0: (slave veth2): Enslaving as an active interface with an up link [ 189.545825][T16144] bond0: (slave veth2): Releasing backup interface [ 189.555939][T16144] bond2: (slave batadv1): Releasing active interface [ 189.696022][T16156] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5322'. [ 189.738396][T16156] netlink: 5448 bytes leftover after parsing attributes in process `syz.7.5322'. [ 189.764876][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5323'. [ 190.054300][T16176] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000007 [ 190.089157][T16178] loop1: detected capacity change from 0 to 4096 [ 190.109775][T16178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.181886][T10153] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.298096][T16200] loop1: detected capacity change from 0 to 2048 [ 191.306557][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5339'. [ 191.382314][T16200] Alternate GPT is invalid, using primary GPT. [ 191.388715][T16200] loop1: p2 p3 p7 [ 191.527780][T16235] IPVS: Error connecting to the multicast addr [ 191.561255][T16239] $H: renamed from bond0 [ 191.595623][T16239] $H: left allmulticast mode [ 191.600524][T16239] bond_slave_0: left allmulticast mode [ 191.606366][T16239] bond_slave_1: left allmulticast mode [ 191.724989][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5370'. [ 191.748851][T16262] netlink: 332 bytes leftover after parsing attributes in process `syz.6.5371'. [ 191.874201][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5382'. [ 191.982494][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5388'. [ 192.095277][T16310] netlink: 'syz.1.5394': attribute type 1 has an invalid length. [ 192.136924][T16310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.175174][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 192.175197][ T29] audit: type=1326 audit(449.158:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16312 comm="syz.0.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.204506][ T29] audit: type=1326 audit(449.158:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16312 comm="syz.0.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.228748][ T29] audit: type=1326 audit(449.208:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16312 comm="syz.0.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.254546][ T29] audit: type=1326 audit(449.238:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16312 comm="syz.0.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.277897][ T29] audit: type=1326 audit(449.238:9600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16312 comm="syz.0.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.301079][ T29] audit: type=1326 audit(449.238:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16312 comm="syz.0.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.327258][T16310] bond5: (slave veth19): Enslaving as an active interface with a down link [ 192.336163][T16326] $H: renamed from bond0 (while UP) [ 192.336352][ T29] audit: type=1326 audit(449.318:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16312 comm="syz.0.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.364933][ T29] audit: type=1326 audit(449.318:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16312 comm="syz.0.5395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.389907][T16326] $H: entered promiscuous mode [ 192.408962][T16327] bond5: (slave dummy0): making interface the new active one [ 192.420857][T16327] dummy0: entered promiscuous mode [ 192.429654][ T29] audit: type=1326 audit(449.408:9604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.0.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.433339][T16327] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 192.452672][ T29] audit: type=1326 audit(449.408:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.0.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853b64ebe9 code=0x7ffc0000 [ 192.881380][T16367] __nla_validate_parse: 4 callbacks suppressed [ 192.887632][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5416'. [ 192.931308][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5416'. [ 192.947245][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5416'. [ 192.957067][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5416'. [ 193.082197][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5420'. [ 193.092797][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5420'. [ 193.103139][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5420'. [ 193.113825][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5422'. [ 193.114182][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5420'. [ 193.133085][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5420'. [ 193.231354][T16394] x_tables: ip_tables: udp match: only valid for protocol 17 [ 193.429412][T16430] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 193.476898][T16436] x_tables: ip_tables: udp match: only valid for protocol 17 [ 193.724970][T16465] IPVS: Error connecting to the multicast addr [ 193.793906][T16467] veth0: entered promiscuous mode [ 193.805334][T16467] veth0 (unregistering): left promiscuous mode [ 193.829103][T16471] loop3: detected capacity change from 0 to 128 [ 193.837729][T16471] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.854097][T16471] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.893830][T16481] netlink: 'syz.3.5466': attribute type 1 has an invalid length. [ 193.907472][T16481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.928453][T16481] bond1: (slave veth11): Enslaving as an active interface with a down link [ 193.949449][T16481] bond1: (slave dummy0): making interface the new active one [ 193.957959][T16481] dummy0: entered promiscuous mode [ 193.963219][T16481] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 194.106311][T16500] IPVS: Error connecting to the multicast addr [ 194.163388][T16508] netlink: 'syz.0.5480': attribute type 19 has an invalid length. [ 194.172976][T16508] netlink: 'syz.0.5480': attribute type 19 has an invalid length. [ 194.207362][T16510] netlink: 'syz.0.5481': attribute type 6 has an invalid length. [ 194.457817][T16531] IPVS: Error connecting to the multicast addr [ 194.495135][T16535] bridge: RTM_NEWNEIGH with invalid ether address [ 194.669530][T16557] hub 9-0:1.0: USB hub found [ 194.674734][T16557] hub 9-0:1.0: 8 ports detected [ 194.704665][T16560] IPVS: stopping master sync thread 16562 ... [ 194.704665][T16562] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 194.763362][T16570] netlink: 'syz.7.5508': attribute type 19 has an invalid length. [ 194.776341][T16570] netlink: 'syz.7.5508': attribute type 19 has an invalid length. [ 194.780331][ T3837] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.821566][ T3837] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.839979][ T3837] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.851781][ T3837] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.011755][T16599] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.021677][T16599] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.032849][T16601] veth1_to_bond: entered allmulticast mode [ 195.041019][T16601] veth1_to_bond (unregistering): left allmulticast mode [ 195.074115][T16599] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.084147][T16599] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.143756][T16599] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.153594][T16599] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.193385][T16599] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.203206][T16599] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.267666][ T3811] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.276024][ T3811] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.287180][ T3811] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.295526][ T3811] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.307431][ T3821] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.315798][ T3821] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.327262][ T3821] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.335556][ T3821] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.460451][T16623] bridge: RTM_NEWNEIGH with invalid ether address [ 195.496387][T16629] netlink: 'syz.0.5534': attribute type 1 has an invalid length. [ 195.514716][T16629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.566480][T16629] bond0: (slave veth1): Enslaving as an active interface with a down link [ 195.594129][T16629] dummy0: left promiscuous mode [ 195.603492][T16629] bond0: (slave dummy0): making interface the new active one [ 195.615451][T16629] dummy0: entered promiscuous mode [ 195.624215][T16629] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 196.079370][T16678] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.162950][T16678] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.243123][T16678] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.293335][T16678] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.310993][T16700] loop3: detected capacity change from 0 to 2048 [ 196.362512][T16700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.411352][ T3821] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.449161][ T3821] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.508763][ T3821] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.536855][ T3821] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.563766][ T3837] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 196.595987][ T3837] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 196.608358][ T3837] EXT4-fs (loop3): This should not happen!! Data will be lost [ 196.608358][ T3837] [ 196.618067][ T3837] EXT4-fs (loop3): Total free blocks count 0 [ 196.624088][ T3837] EXT4-fs (loop3): Free/Dirty block details [ 196.629999][ T3837] EXT4-fs (loop3): free_blocks=4096 [ 196.635347][ T3837] EXT4-fs (loop3): dirty_blocks=16 [ 196.640462][ T3837] EXT4-fs (loop3): Block reservation details [ 196.646488][ T3837] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 196.654150][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.041991][T16774] netlink: 'syz.6.5596': attribute type 30 has an invalid length. [ 197.054048][ T3837] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.075178][T16776] netlink: 'syz.6.5597': attribute type 29 has an invalid length. [ 197.084132][ T3811] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.104677][ T3811] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.116953][T16776] netlink: 'syz.6.5597': attribute type 29 has an invalid length. [ 197.129206][T16776] unsupported nla_type 58 [ 197.141137][ T3811] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.225020][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 197.225038][ T29] audit: type=1400 audit(454.208:10069): avc: denied { setopt } for pid=16786 comm="syz.0.5602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.399069][ T29] audit: type=1326 audit(454.378:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.422197][ T29] audit: type=1326 audit(454.378:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.465664][T16801] veth1_to_bond: entered allmulticast mode [ 197.474022][ T29] audit: type=1326 audit(454.428:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.497161][ T29] audit: type=1326 audit(454.428:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.520276][ T29] audit: type=1326 audit(454.428:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.543372][ T29] audit: type=1326 audit(454.428:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.566414][ T29] audit: type=1326 audit(454.428:10076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.589706][ T29] audit: type=1326 audit(454.428:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.612744][ T29] audit: type=1326 audit(454.428:10078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16790 comm="syz.7.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba58dbebe9 code=0x7ffc0000 [ 197.636775][T16801] $H: (slave bond_slave_1): Releasing backup interface [ 197.647311][T16801] bond_slave_1 (unregistering): left promiscuous mode [ 197.656120][T16801] veth1_to_bond (unregistering): left allmulticast mode [ 197.666260][T16800] veth0: entered promiscuous mode [ 197.953011][T16810] loop1: detected capacity change from 0 to 2048 [ 197.962998][T16810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.084256][T10153] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.109935][T16818] loop1: detected capacity change from 0 to 2048 [ 198.125394][T16818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.154391][ T1378] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 198.170291][ T1378] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 198.182740][ T1378] EXT4-fs (loop1): This should not happen!! Data will be lost [ 198.182740][ T1378] [ 198.192749][ T1378] EXT4-fs (loop1): Total free blocks count 0 [ 198.198750][ T1378] EXT4-fs (loop1): Free/Dirty block details [ 198.204788][ T1378] EXT4-fs (loop1): free_blocks=4096 [ 198.210200][ T1378] EXT4-fs (loop1): dirty_blocks=16 [ 198.215387][ T1378] EXT4-fs (loop1): Block reservation details [ 198.221349][ T1378] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 198.227859][T10153] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.034690][T16922] loop3: detected capacity change from 0 to 512 [ 199.047662][T16926] __nla_validate_parse: 33 callbacks suppressed [ 199.047681][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5638'. [ 199.066577][T16922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.080407][T16926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.215592][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.529880][T17020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5652'. [ 199.539047][T17020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5652'. [ 199.551176][T17020] bridge0: port 1(vlan3) entered blocking state [ 199.557750][T17020] bridge0: port 1(vlan3) entered disabled state [ 199.564350][T17020] vlan3: entered allmulticast mode [ 199.569474][T17020] bridge0: entered allmulticast mode [ 199.575277][T17020] vlan3: left allmulticast mode [ 199.580210][T17020] bridge0: left allmulticast mode [ 199.713810][T17034] ip6gre1: entered allmulticast mode [ 199.778874][T17045] 8021q: VLANs not supported on gre0 [ 199.822610][T17051] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5666'. [ 199.837826][T17053] veth0: entered promiscuous mode [ 199.843577][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5667'. [ 199.855824][T17053] veth0 (unregistering): left promiscuous mode [ 200.087233][T17071] 8021q: VLANs not supported on gre0 [ 200.204573][T17083] veth0: entered promiscuous mode [ 200.210137][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5681'. [ 200.219951][T17083] veth0 (unregistering): left promiscuous mode [ 200.536935][T17132] ip6gre1: entered allmulticast mode [ 200.656933][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5717'. [ 200.735019][T17150] ================================================================== [ 200.743211][T17150] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 200.750485][T17150] [ 200.752785][T17150] read-write to 0xffff88810b996a10 of 4 bytes by task 17149 on cpu 0: [ 200.760909][T17150] io_issue_sqe+0x19c/0x970 [ 200.765396][T17150] io_wq_submit_work+0x3f7/0x5f0 [ 200.770323][T17150] io_worker_handle_work+0x44e/0x9b0 [ 200.775680][T17150] io_wq_worker+0x22e/0x870 [ 200.780171][T17150] ret_from_fork+0xda/0x150 [ 200.784659][T17150] ret_from_fork_asm+0x1a/0x30 [ 200.789415][T17150] [ 200.791825][T17150] read to 0xffff88810b996a10 of 4 bytes by task 17150 on cpu 1: [ 200.799455][T17150] io_flush_timeouts+0x56/0x1d0 [ 200.804300][T17150] __io_commit_cqring_flush+0xeb/0x100 [ 200.809780][T17150] io_issue_sqe+0x7cb/0x970 [ 200.814284][T17150] io_wq_submit_work+0x3f7/0x5f0 [ 200.819227][T17150] io_worker_handle_work+0x44e/0x9b0 [ 200.824511][T17150] io_wq_worker+0x22e/0x870 [ 200.829030][T17150] ret_from_fork+0xda/0x150 [ 200.833529][T17150] ret_from_fork_asm+0x1a/0x30 [ 200.838286][T17150] [ 200.840596][T17150] value changed: 0x0000027b -> 0x0000027c [ 200.846294][T17150] [ 200.848592][T17150] Reported by Kernel Concurrency Sanitizer on: [ 200.854731][T17150] CPU: 1 UID: 0 PID: 17150 Comm: iou-wrk-17145 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 200.867291][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.877328][T17150] ================================================================== [ 203.232917][ T52] bridge_slave_1: left allmulticast mode [ 203.238628][ T52] bridge_slave_1: left promiscuous mode [ 203.244338][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.252810][ T52] bridge_slave_0: left allmulticast mode [ 203.258521][ T52] bridge_slave_0: left promiscuous mode [ 203.264237][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.322986][ T52] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.333028][ T52] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.342335][ T52] $H (unregistering): (slave vlan2): Releasing backup interface [ 203.350715][ T52] dummy0: left promiscuous mode [ 203.356224][ T52] $H (unregistering): Released all slaves [ 203.425060][ T52] hsr_slave_0: left promiscuous mode [ 203.430714][ T52] hsr_slave_1: left promiscuous mode [ 203.436372][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.443818][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.474918][ T52] team0 (unregistering): Port device team_slave_1 removed [ 203.484590][ T52] team0 (unregistering): Port device C removed [ 203.504995][ T52] team0 (unregistering): Port device dummy0 removed [ 203.691567][ T1378] dummy0: left promiscuous mode [ 203.753448][ T52] IPVS: stop unused estimator thread 0... [ 205.231598][ T1378] dummy0: left promiscuous mode [ 206.791495][ T3821] dummy0: left promiscuous mode