last executing test programs: 2.045803939s ago: executing program 0 (id=3082): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.907874891s ago: executing program 4 (id=3084): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40000000, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1d, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.857412792s ago: executing program 4 (id=3087): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_setup(0x7615, &(0x7f0000000000)={0x0, 0x90bd, 0x100, 0x0, 0x1e4}) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(r1, 0xffffffffffffffff, 0x0) 1.830888752s ago: executing program 0 (id=3089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8a000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x5, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 1.598004366s ago: executing program 0 (id=3094): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x2e38, &(0x7f0000000400)={0x0, 0xe98c, 0x0, 0xc, 0x288}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$igmp(0x2, 0x3, 0x2) 1.379801909s ago: executing program 0 (id=3101): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7ade1a86dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.379487009s ago: executing program 1 (id=3102): syz_clone3(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.28729677s ago: executing program 0 (id=3104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.280780981s ago: executing program 1 (id=3106): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r2, 0x0, 0x2000}, 0x18) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1.088205524s ago: executing program 3 (id=3111): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.058410824s ago: executing program 3 (id=3112): socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x80029e3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000680)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val}, {@journal_ioprio}, {@inlinecrypt}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 1.030055245s ago: executing program 2 (id=3113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 1.013732895s ago: executing program 3 (id=3114): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x2e38, &(0x7f0000000400)={0x0, 0xe98c, 0x0, 0xc, 0x288}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$igmp(0x2, 0x3, 0x2) 885.619407ms ago: executing program 0 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendfile(r1, r1, 0x0, 0xa) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 885.386977ms ago: executing program 4 (id=3116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x880) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 802.903798ms ago: executing program 4 (id=3117): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 802.002558ms ago: executing program 3 (id=3118): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7ade1a86dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 775.015328ms ago: executing program 2 (id=3119): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='ufshcd_command\x00', 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 710.26201ms ago: executing program 4 (id=3120): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 624.977981ms ago: executing program 2 (id=3121): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 485.394563ms ago: executing program 2 (id=3122): socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @remote, 'geneve1\x00'}}, 0x1e) close(r2) 408.401154ms ago: executing program 1 (id=3123): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r1, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810) 336.153675ms ago: executing program 1 (id=3124): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) unshare(0x6a040000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000640)=ANY=[], 0x0, 0x243, &(0x7f0000000840)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x130, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@private=0xa010100, @remote, 0xff, 0xffffff, 0xc, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x3, 0x5, 0x1, 0x7, 0x2d23, 'veth1_macvtap\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 331.601815ms ago: executing program 2 (id=3134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r3) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/191, 0xcb}], 0x1, 0x0, 0x59}, 0x0) 232.725047ms ago: executing program 4 (id=3125): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_setup(0x80c, &(0x7f0000000300)={0x0, 0x6d83, 0x0, 0x40000000, 0x54}, &(0x7f0000000100), &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x7ffff000) 231.879817ms ago: executing program 2 (id=3126): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_setup(0x7615, &(0x7f0000000000)={0x0, 0x90bd, 0x100, 0x0, 0x1e4}) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(r1, 0xffffffffffffffff, 0x0) 94.980459ms ago: executing program 1 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000640), &(0x7f00000007c0)='%pi6 \x00'}, 0x20) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0), 0x4) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 94.504669ms ago: executing program 3 (id=3128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x1000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 38.65856ms ago: executing program 1 (id=3129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x100}, 0x10}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) 0s ago: executing program 3 (id=3130): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): ice dummy0 via netlink (err -105) [ 146.083056][ T8433] team0: Failed to send options change via netlink (err -105) [ 146.092900][ T8433] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.104877][ T8433] team0: Port device dummy0 removed [ 146.138368][ T8442] netlink: 'syz.3.1833': attribute type 7 has an invalid length. [ 146.146289][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 146.672839][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 146.805647][ T8472] loop2: detected capacity change from 0 to 2048 [ 146.830859][ T8472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.891948][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.042142][ T8489] loop4: detected capacity change from 0 to 8192 [ 147.104927][ T8489] loop4: p1 p2[DM] p4 [ 147.109122][ T8489] loop4: p1 size 196608 extends beyond EOD, truncated [ 147.121766][ T8489] loop4: p2 start 4292936063 is beyond EOD, truncated [ 147.128699][ T8489] loop4: p4 size 50331648 extends beyond EOD, truncated [ 147.201951][ T8504] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.211806][ T8504] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.260172][ T8511] netlink: 'syz.3.1860': attribute type 7 has an invalid length. [ 147.268000][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 147.278389][ T8504] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.288301][ T8504] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.318275][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1858'. [ 147.332939][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'. [ 147.351877][ T8504] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.361969][ T8504] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.384758][ T8517] lo speed is unknown, defaulting to 1000 [ 147.411659][ T8504] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.421555][ T8504] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.432619][ T8517] lo speed is unknown, defaulting to 1000 [ 147.467897][ T8504] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.476281][ T8504] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.488523][ T8504] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.496937][ T8504] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.509136][ T8504] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.517431][ T8504] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.537948][ T8521]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.547159][ T8521]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.556576][ T8521]  (unregistering): Released all slaves [ 147.568096][ T8504] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.576432][ T8504] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.742907][ T8536] __nla_validate_parse: 1 callbacks suppressed [ 147.742927][ T8536] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1870'. [ 147.880760][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.889768][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.112369][ T8554] bridge3: entered promiscuous mode [ 148.226835][ T8560] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1880'. [ 148.231157][ T8558] lo speed is unknown, defaulting to 1000 [ 148.236714][ T8560] gretap0: entered promiscuous mode [ 148.250517][ T8560] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1880'. [ 148.259593][ T8560] 0ªî{X¹¦: renamed from gretap0 [ 148.266108][ T8560] 0ªî{X¹¦: left promiscuous mode [ 148.271387][ T8560] 0ªî{X¹¦: entered allmulticast mode [ 148.280256][ T8560] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 148.368542][ T8558] lo speed is unknown, defaulting to 1000 [ 148.436774][ T8570] loop4: detected capacity change from 0 to 128 [ 148.492020][ T8570] vfat: Bad value for 'check' [ 148.559440][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 148.559489][ T29] audit: type=1400 audit(148.535:21875): avc: denied { mount } for pid=8569 comm="syz.4.1884" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.587227][ T29] audit: type=1400 audit(148.535:21876): avc: denied { mounton } for pid=8569 comm="syz.4.1884" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 148.649709][ T8572] loop2: detected capacity change from 0 to 7 [ 148.676697][ T29] audit: type=1400 audit(148.615:21877): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.931999][ T29] audit: type=1400 audit(148.905:21878): avc: denied { accept } for pid=8595 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.047372][ T8607] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1899'. [ 149.077342][ T8610] batadv_slave_1: entered promiscuous mode [ 149.096436][ T8610] batadv_slave_1: left promiscuous mode [ 149.113061][ T29] audit: type=1400 audit(149.095:21879): avc: denied { watch watch_reads } for pid=8605 comm="syz.4.1900" path="/391/file1" dev="tmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.174783][ T29] audit: type=1400 audit(149.155:21880): avc: denied { getopt } for pid=8616 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.194532][ T29] audit: type=1326 audit(149.155:21881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8616 comm="syz.1.1904" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9de1c2e9a9 code=0x0 [ 149.395801][ T8626] loop4: detected capacity change from 0 to 764 [ 149.403594][ T29] audit: type=1400 audit(149.385:21882): avc: denied { mount } for pid=8625 comm="syz.4.1907" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 149.459502][ T29] audit: type=1400 audit(149.445:21883): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 149.594066][ T29] audit: type=1326 audit(149.575:21884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8633 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 149.617906][ T8634] loop2: detected capacity change from 0 to 1024 [ 149.631945][ T8634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.647114][ T8634] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.1911: lblock 1 mapped to illegal pblock 1 (length 15) [ 149.661670][ T8634] EXT4-fs (loop2): Remounting filesystem read-only [ 149.678588][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.758882][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'. [ 149.802112][ T8646] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 150.299595][ T8666] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.309614][ T8666] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.421091][ T8666] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.430995][ T8666] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.521203][ T8666] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.531090][ T8666] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.611544][ T8666] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.621403][ T8666] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.746844][ T8666] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.755181][ T8666] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.956349][ T8666] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.964911][ T8666] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.033426][ T8666] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.041764][ T8666] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.100034][ T8666] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.108484][ T8666] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.266568][ T8688] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1931'. [ 151.322200][ T8694] lo speed is unknown, defaulting to 1000 [ 151.408451][ T8694] lo speed is unknown, defaulting to 1000 [ 151.432462][ T8698] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1934'. [ 151.639953][ T8712] veth0: entered promiscuous mode [ 151.645537][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 151.657464][ T8711] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1940'. [ 151.667060][ T8712] veth0 (unregistering): left promiscuous mode [ 151.689773][ T8711] gretap0: entered promiscuous mode [ 151.713263][ T8713] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1940'. [ 151.770189][ T8713] 0ªî{X¹¦: renamed from gretap0 [ 151.794065][ T8713] 0ªî{X¹¦: left promiscuous mode [ 151.799204][ T8713] 0ªî{X¹¦: entered allmulticast mode [ 151.829323][ T8713] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 151.896462][ T8705] lo speed is unknown, defaulting to 1000 [ 152.076410][ T8715] tipc: Enabled bearer , priority 0 [ 152.102515][ T8714] tipc: Resetting bearer [ 152.124743][ T8714] tipc: Disabling bearer [ 152.135498][ T8721] netlink: 'syz.3.1943': attribute type 1 has an invalid length. [ 152.179114][ T8724] netlink: 'syz.3.1944': attribute type 7 has an invalid length. [ 152.609353][ T8751] loop4: detected capacity change from 0 to 4096 [ 152.666494][ T8751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.728236][ T8705] lo speed is unknown, defaulting to 1000 [ 152.816792][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.938107][ T8774] __nla_validate_parse: 1 callbacks suppressed [ 152.938129][ T8774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'. [ 152.953415][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 153.205449][ T8784] loop4: detected capacity change from 0 to 512 [ 153.559216][ T8784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 153.665618][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1970'. [ 153.875473][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 153.875492][ T29] audit: type=1400 audit(153.855:21973): avc: denied { append } for pid=8824 comm="syz.1.1979" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 153.941176][ T29] audit: type=1400 audit(153.925:21974): avc: denied { override_creds } for pid=8827 comm="syz.2.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.055056][ T8832] netlink: 'syz.1.1981': attribute type 1 has an invalid length. [ 154.068905][ T8832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.082504][ T8832] vlan0: entered allmulticast mode [ 154.087804][ T8832] geneve1: entered allmulticast mode [ 154.094434][ T8832] bond4: (slave vlan0): Opening slave failed [ 154.620913][ T8845] netlink: 'syz.3.1986': attribute type 1 has an invalid length. [ 154.675879][ T8845] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.703687][ T8847] vlan0: entered allmulticast mode [ 154.708948][ T8847] geneve1: entered allmulticast mode [ 154.837173][ T8847] bond6: (slave vlan0): making interface the new active one [ 154.861578][ T8847] bond6: (slave vlan0): Enslaving as an active interface with an up link [ 155.082697][ T8853] lo speed is unknown, defaulting to 1000 [ 155.124346][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1989'. [ 155.354128][ T29] audit: type=1400 audit(155.335:21975): avc: denied { setattr } for pid=8858 comm="syz.1.1990" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.412004][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 155.470864][ T8853] lo speed is unknown, defaulting to 1000 [ 155.474085][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 155.607619][ T29] audit: type=1400 audit(155.585:21976): avc: denied { setopt } for pid=8866 comm="syz.3.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.786230][ T8878] tipc: Enabled bearer , priority 0 [ 155.801002][ T8877] tipc: Resetting bearer [ 155.831182][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 155.868598][ T8877] tipc: Disabling bearer [ 155.881231][ T8882] tipc: Bearer : already 2 bearers with priority 10 [ 155.888756][ T8882] tipc: Bearer : trying with adjusted priority [ 155.896001][ T8882] tipc: Enabling of bearer rejected, failed to enable media [ 155.907666][ T8886] syz_tun: entered promiscuous mode [ 155.913154][ T8886] macvtap1: entered promiscuous mode [ 155.918652][ T8886] macvtap1: entered allmulticast mode [ 155.924144][ T8886] syz_tun: entered allmulticast mode [ 155.953751][ T29] audit: type=1400 audit(155.935:21977): avc: denied { connect } for pid=8893 comm="syz.1.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.004331][ T29] audit: type=1400 audit(155.955:21978): avc: denied { write } for pid=8893 comm="syz.1.2004" path="socket:[26382]" dev="sockfs" ino=26382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.082933][ T8905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8905 comm=syz.2.2009 [ 156.115236][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'. [ 156.168981][ T8906] hsr_slave_0 (unregistering): left promiscuous mode [ 156.182422][ T8910] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 156.360440][ T29] audit: type=1400 audit(156.335:21979): avc: denied { mounton } for pid=8916 comm="syz.3.2014" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 156.387359][ T8921] netlink: 'syz.0.2016': attribute type 1 has an invalid length. [ 156.395467][ T8921] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2016'. [ 156.713614][ T8939] lo speed is unknown, defaulting to 1000 [ 156.760801][ T8939] lo speed is unknown, defaulting to 1000 [ 157.020476][ T8964] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2031'. [ 157.030735][ T8964] netlink: 'syz.3.2031': attribute type 4 has an invalid length. [ 157.492201][ T8970] lo speed is unknown, defaulting to 1000 [ 157.717632][ T8977] pim6reg1: entered promiscuous mode [ 157.723080][ T8977] pim6reg1: entered allmulticast mode [ 157.793529][ T8980] syz_tun: entered allmulticast mode [ 157.800740][ T8980] syz_tun: left allmulticast mode [ 157.821680][ T8982] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.831635][ T8982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.901530][ T8982] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.911402][ T8982] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.032208][ T8982] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.042136][ T8982] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.142144][ T8982] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.152052][ T8982] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.364419][ T8982] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.372845][ T8982] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.485221][ T8982] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.493605][ T8982] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.513742][ T8982] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.522132][ T8982] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.593685][ T8982] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.601993][ T8982] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.643697][ T8970] lo speed is unknown, defaulting to 1000 [ 158.673441][ T9000] loop2: detected capacity change from 0 to 512 [ 158.681516][ T9000] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 158.861315][ T9013] bridge0: entered promiscuous mode [ 158.868858][ T9013] bridge0: port 1(macsec0) entered blocking state [ 158.875480][ T9013] bridge0: port 1(macsec0) entered disabled state [ 158.882530][ T9013] macsec0: entered allmulticast mode [ 158.887868][ T9013] bridge0: entered allmulticast mode [ 158.895430][ T9013] macsec0: left allmulticast mode [ 158.900569][ T9013] bridge0: left allmulticast mode [ 158.906907][ T9013] bridge0: left promiscuous mode [ 158.914647][ T9017] xt_hashlimit: size too large, truncated to 1048576 [ 159.227576][ T29] audit: type=1400 audit(159.205:21980): avc: denied { relabelfrom } for pid=9010 comm="syz.2.2049" name="NETLINK" dev="sockfs" ino=27837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.253087][ T29] audit: type=1400 audit(159.205:21981): avc: denied { relabelto } for pid=9010 comm="syz.2.2049" name="NETLINK" dev="sockfs" ino=27837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 159.367638][ T9027] __nla_validate_parse: 1 callbacks suppressed [ 159.367656][ T9027] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 159.423626][ T9029] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 159.436275][ T29] audit: type=1400 audit(159.415:21982): avc: denied { create } for pid=9030 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.476151][ T9034] futex_wake_op: syz.0.2055 tries to shift op by -1; fix this program [ 159.484561][ T29] audit: type=1400 audit(159.455:21983): avc: denied { write } for pid=9030 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.503685][ T29] audit: type=1400 audit(159.455:21984): avc: denied { read } for pid=9030 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.704428][ T9042] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 159.713135][ T9042] tipc: Enabled bearer , priority 10 [ 159.765169][ T9048] loop4: detected capacity change from 0 to 512 [ 159.784983][ T9048] EXT4-fs (loop4): orphan cleanup on readonly fs [ 159.803461][ T9048] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2060: bg 0: block 248: padding at end of block bitmap is not set [ 159.858698][ T9048] Quota error (device loop4): write_blk: dquota write failed [ 159.866275][ T9048] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 159.876289][ T9048] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2060: Failed to acquire dquot type 1 [ 159.930210][ T9048] EXT4-fs (loop4): 1 truncate cleaned up [ 159.936812][ T9048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.034890][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.118304][ T9066] xt_hashlimit: size too large, truncated to 1048576 [ 160.368851][ T9084] netlink: 'syz.0.2067': attribute type 1 has an invalid length. [ 160.390338][ T9084] bond1: (slave gretap1): making interface the new active one [ 160.398282][ T9084] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 160.416083][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2067'. [ 160.467883][ T9084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.043061][ T9151] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 161.060798][ T29] audit: type=1400 audit(161.045:21985): avc: denied { read } for pid=9152 comm="syz.4.2082" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 161.062738][ T9153] siw: device registration error -23 [ 161.112737][ T29] audit: type=1400 audit(161.045:21986): avc: denied { open } for pid=9152 comm="syz.4.2082" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 161.137093][ T29] audit: type=1400 audit(161.045:21987): avc: denied { write } for pid=9152 comm="syz.4.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.285275][ T9165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.293874][ T9165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.346199][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 161.353684][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'. [ 161.365416][ T9168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.392458][ T9169] can0: slcan on ttyS3. [ 161.406817][ T9168] vlan0: entered allmulticast mode [ 161.412076][ T9168] bond2: entered allmulticast mode [ 161.431575][ T9169] can0 (unregistered): slcan off ttyS3. [ 161.571938][ T9178] : renamed from bond0 (while UP) [ 161.811635][ T9183] tipc: Started in network mode [ 161.816569][ T9183] tipc: Node identity 4, cluster identity 4711 [ 161.822839][ T9183] tipc: Node number set to 4 [ 161.834394][ T9185] lo speed is unknown, defaulting to 1000 [ 161.890302][ T9187] netlink: 'syz.0.2095': attribute type 25 has an invalid length. [ 161.898216][ T9187] netlink: 'syz.0.2095': attribute type 8 has an invalid length. [ 161.929434][ T9185] lo speed is unknown, defaulting to 1000 [ 161.941641][ T9188] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2095'. [ 162.007309][ T9188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2095'. [ 162.205646][ T9206] loop4: detected capacity change from 0 to 512 [ 162.216001][ T9206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 162.224655][ T9206] System zones: 1-12 [ 162.234769][ T9206] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2101: error while reading EA inode 32 err=-116 [ 162.248158][ T9206] EXT4-fs (loop4): Remounting filesystem read-only [ 162.254792][ T9206] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 162.266264][ T9206] EXT4-fs (loop4): 1 orphan inode deleted [ 162.272673][ T9206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.352368][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.725738][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.735542][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.746011][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2109'. [ 162.840993][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 162.850046][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 162.909189][ T9232] siw: device registration error -23 [ 162.947494][ T9235] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.957393][ T9235] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.992389][ T9235] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.002261][ T9235] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.181136][ T9235] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.191141][ T9235] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.251093][ T9235] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.261043][ T9235] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.349875][ T9235] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.358181][ T9235] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.387407][ T9235] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.395793][ T9235] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.438426][ T9235] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.446755][ T9235] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.546825][ T9235] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.555111][ T9235] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.610507][ T9245] loop2: detected capacity change from 0 to 512 [ 163.636544][ T9245] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2114: Failed to acquire dquot type 1 [ 163.789869][ T9245] EXT4-fs (loop2): 1 truncate cleaned up [ 163.796075][ T9245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.918626][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.953643][ T9254] loop4: detected capacity change from 0 to 256 [ 163.972694][ T9256] bridge0: port 3(macsec1) entered blocking state [ 163.979186][ T9256] bridge0: port 3(macsec1) entered disabled state [ 163.991406][ T9256] macsec1: entered allmulticast mode [ 163.996819][ T9256] bridge0: entered allmulticast mode [ 164.034588][ T9256] macsec1: left allmulticast mode [ 164.039727][ T9256] bridge0: left allmulticast mode [ 164.255198][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 164.255215][ T29] audit: type=1326 audit(165.232:22085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.284916][ T29] audit: type=1326 audit(165.232:22086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.343187][ T29] audit: type=1326 audit(165.232:22087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.366510][ T29] audit: type=1326 audit(165.232:22088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.389453][ T29] audit: type=1326 audit(165.232:22089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.412516][ T29] audit: type=1326 audit(165.242:22090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.435510][ T29] audit: type=1326 audit(165.242:22091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.458657][ T29] audit: type=1326 audit(165.242:22092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.481699][ T29] audit: type=1326 audit(165.252:22093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.504675][ T29] audit: type=1326 audit(165.252:22094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.2.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 164.549236][ T9278] __nla_validate_parse: 1 callbacks suppressed [ 164.549255][ T9278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2127'. [ 164.570843][ T9278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2127'. [ 164.731442][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 164.749139][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 165.376279][ T9321] loop4: detected capacity change from 0 to 512 [ 165.388156][ T9323] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20002 [ 165.585002][ T9339] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2150'. [ 165.594560][ T9339] C: renamed from team_slave_0 [ 165.833928][ T9353] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 165.853050][ T9353] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.899279][ T9353] bond5: (slave veth9): Enslaving as an active interface with a down link [ 165.998413][ T9353] vlan0: entered allmulticast mode [ 166.003853][ T9353] bond5: entered allmulticast mode [ 166.026687][ T9353] bond5: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 166.158870][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 166.194762][ T9378] netlink: 'syz.3.2164': attribute type 21 has an invalid length. [ 166.198515][ T9373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.252555][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2164'. [ 166.274690][ T9379] vlan0: entered allmulticast mode [ 166.279915][ T9379] bond5: entered allmulticast mode [ 166.325015][ T9383] loop4: detected capacity change from 0 to 2048 [ 166.411561][ T9383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.899731][ T9400] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.909677][ T9400] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.971672][ T9400] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.981734][ T9400] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.033721][ T9400] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.043595][ T9400] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.171040][ T9400] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.180950][ T9400] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.248984][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.306339][ T9400] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.314649][ T9400] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.330238][ T9400] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.338669][ T9400] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.353001][ T9400] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.361475][ T9400] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.375081][ T9400] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.383433][ T9400] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.408780][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'. [ 167.439205][ T9411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.460588][ T9411] vlan2: entered allmulticast mode [ 167.465854][ T9411] bond3: entered allmulticast mode [ 167.716579][ T9431] random: crng reseeded on system resumption [ 168.263129][ T9461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9461 comm=syz.3.2193 [ 168.442756][ T9466] netlink: 'syz.1.2195': attribute type 21 has an invalid length. [ 168.469481][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'. [ 168.490104][ T9468] lo speed is unknown, defaulting to 1000 [ 168.631574][ T9468] lo speed is unknown, defaulting to 1000 [ 169.080254][ T9481] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2202'. [ 169.150752][ T9484] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.160722][ T9484] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.203928][ T9495] netlink: 'syz.0.2208': attribute type 4 has an invalid length. [ 169.215092][ T9495] netlink: 'syz.0.2208': attribute type 4 has an invalid length. [ 169.232978][ T9484] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.242814][ T9484] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.291054][ T1042] lo speed is unknown, defaulting to 1000 [ 169.296924][ T1042] syz0: Port: 1 Link ACTIVE [ 169.344496][ T9484] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.354445][ T9484] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.388953][ T9506] IPVS: Error connecting to the multicast addr [ 169.446267][ T9484] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.456139][ T9484] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.507826][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 169.507845][ T29] audit: type=1400 audit(170.482:22605): avc: denied { create } for pid=9517 comm="syz.3.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.584523][ T9484] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.592886][ T9484] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.631527][ T29] audit: type=1400 audit(170.612:22606): avc: denied { execute_no_trans } for pid=9521 comm="syz.0.2217" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.687311][ T9484] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.695735][ T9484] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.796964][ T9484] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.805460][ T9484] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.817644][ T9530] netlink: 'syz.0.2221': attribute type 10 has an invalid length. [ 169.825784][ T9530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2221'. [ 169.846989][ T9484] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.855423][ T9484] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.879962][ T9530] dummy0: entered promiscuous mode [ 169.886125][ T9530] bridge0: port 3(dummy0) entered blocking state [ 169.892578][ T9530] bridge0: port 3(dummy0) entered disabled state [ 169.899562][ T9530] dummy0: entered allmulticast mode [ 170.088712][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2234'. [ 170.098728][ T9538] netlink: 'syz.1.2224': attribute type 4 has an invalid length. [ 170.122485][ T9538] netlink: 'syz.1.2224': attribute type 4 has an invalid length. [ 170.145893][ T29] audit: type=1400 audit(171.122:22607): avc: denied { write } for pid=9533 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 170.166820][ T10] lo speed is unknown, defaulting to 1000 [ 170.172635][ T10] syz2: Port: 1 Link DOWN [ 170.178694][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2234'. [ 170.215581][ T10] lo speed is unknown, defaulting to 1000 [ 170.221496][ T10] syz2: Port: 1 Link ACTIVE [ 170.402000][ T9553] macvlan2: entered promiscuous mode [ 170.407369][ T9553] bond0: entered promiscuous mode [ 170.412716][ T9553] macvlan2: entered allmulticast mode [ 170.448316][ T9553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.459203][ T9553] bond0: left promiscuous mode [ 170.675025][ T29] audit: type=1326 audit(171.652:22608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511e6e9a9 code=0x7ffc0000 [ 170.675247][ T9554] lo speed is unknown, defaulting to 1000 [ 170.722963][ T29] audit: type=1326 audit(171.682:22609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff511e6e9a9 code=0x7ffc0000 [ 170.745906][ T29] audit: type=1326 audit(171.682:22610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511e6e9a9 code=0x7ffc0000 [ 170.769010][ T29] audit: type=1326 audit(171.682:22611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff511e6e9a9 code=0x7ffc0000 [ 170.791943][ T29] audit: type=1326 audit(171.682:22612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511e6e9a9 code=0x7ffc0000 [ 170.814977][ T29] audit: type=1326 audit(171.682:22613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff511e6e9a9 code=0x7ffc0000 [ 170.837963][ T29] audit: type=1326 audit(171.682:22614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511e6e9a9 code=0x7ffc0000 [ 170.906198][ T9558] syzkaller0: entered promiscuous mode [ 170.912060][ T9558] syzkaller0: entered allmulticast mode [ 170.989404][ T9562] team0: Mode changed to "activebackup" [ 170.996660][ T9562] team0: Failed to send options change via netlink (err -105) [ 171.005168][ T9562] team0: Failed to send options change via netlink (err -105) [ 171.012856][ T9562] team0: Mode changed to "loadbalance" [ 171.181832][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2238'. [ 171.395584][ T9593] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2247'. [ 171.406321][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 171.596839][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2249'. [ 171.798705][ T9554] lo speed is unknown, defaulting to 1000 [ 171.810001][ T9608] lo speed is unknown, defaulting to 1000 [ 171.860992][ T9608] lo speed is unknown, defaulting to 1000 [ 172.501865][ T9629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2261'. [ 172.753008][ T9636] netlink: 'syz.0.2274': attribute type 4 has an invalid length. [ 172.760963][ T9636] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2274'. [ 172.903723][ T9654] netlink: 33912 bytes leftover after parsing attributes in process `syz.3.2270'. [ 173.154706][ T9672] netlink: 'syz.4.2279': attribute type 4 has an invalid length. [ 173.166263][ T9672] netlink: 'syz.4.2279': attribute type 4 has an invalid length. [ 173.365182][ T9681] loop4: detected capacity change from 0 to 2048 [ 173.392838][ T9681] xt_hashlimit: size too large, truncated to 1048576 [ 173.674582][ T9690] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 173.691880][ T9690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.702408][ T9691] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.712283][ T9691] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.738721][ T9690] bond4: (slave veth1): Enslaving as an active interface with a down link [ 173.762567][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.770779][ T9690] bond4: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 173.793654][ T9691] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.803656][ T9691] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.851771][ T9691] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.861661][ T9691] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.926854][ T9691] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.936764][ T9691] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.972225][ T9697] loop4: detected capacity change from 0 to 1024 [ 173.994552][ T9697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.018159][ T9691] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.026553][ T9691] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.038822][ T9691] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.047201][ T9691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.060550][ T9691] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.068816][ T9691] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.081451][ T9691] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.089775][ T9691] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.139540][ T9702] lo speed is unknown, defaulting to 1000 [ 174.249112][ T9697] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2288: Allocating blocks 481-513 which overlap fs metadata [ 174.270196][ T1042] lo speed is unknown, defaulting to 1000 [ 174.275990][ T1042] syz0: Port: 1 Link DOWN [ 174.303720][ T9697] EXT4-fs (loop4): pa ffff88810699d5b0: logic 352, phys. 465, len 3 [ 174.306535][ T9702] lo speed is unknown, defaulting to 1000 [ 174.312231][ T9697] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 2 [ 174.343489][ T9713] bond_slave_0: entered promiscuous mode [ 174.349306][ T9713] bond_slave_1: entered promiscuous mode [ 174.355035][ T9713] dummy0: entered promiscuous mode [ 174.361749][ T9713] macvlan0: entered promiscuous mode [ 174.367132][ T9713] bond0: entered promiscuous mode [ 174.372951][ T9713] macvlan0: entered allmulticast mode [ 174.378583][ T9713] bond0: entered allmulticast mode [ 174.383913][ T9713] bond_slave_0: entered allmulticast mode [ 174.389779][ T9713] bond_slave_1: entered allmulticast mode [ 174.395552][ T9713] dummy0: entered allmulticast mode [ 174.396943][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.403046][ T9713] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 174.423878][ T9713] bond0: left allmulticast mode [ 174.428849][ T9713] bond_slave_0: left allmulticast mode [ 174.434566][ T9713] bond_slave_1: left allmulticast mode [ 174.443844][ T9713] dummy0: left allmulticast mode [ 174.448869][ T9713] bond0: left promiscuous mode [ 174.454427][ T9713] bond_slave_0: left promiscuous mode [ 174.459970][ T9713] bond_slave_1: left promiscuous mode [ 174.465400][ T9713] dummy0: left promiscuous mode [ 174.686307][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 174.686325][ T29] audit: type=1400 audit(175.662:22695): avc: denied { bind } for pid=9730 comm="syz.1.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.732161][ T29] audit: type=1326 audit(175.672:22696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.755315][ T29] audit: type=1326 audit(175.672:22697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.778476][ T29] audit: type=1326 audit(175.672:22698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.801492][ T29] audit: type=1326 audit(175.672:22699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.824645][ T29] audit: type=1326 audit(175.672:22700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.847812][ T29] audit: type=1326 audit(175.682:22701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.870909][ T29] audit: type=1326 audit(175.682:22702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.893864][ T29] audit: type=1326 audit(175.682:22703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.916883][ T29] audit: type=1326 audit(175.682:22704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.4.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 174.990401][ T9740] vlan2: entered allmulticast mode [ 175.014222][ T9742] xt_hashlimit: size too large, truncated to 1048576 [ 175.203231][ T9749] blktrace: Concurrent blktraces are not allowed on loop9 [ 175.225591][ T9752] sch_fq: defrate 4294967295 ignored. [ 175.297714][ T9756] macvlan3: entered promiscuous mode [ 175.303223][ T9756] bond0: entered promiscuous mode [ 175.308305][ T9756] geneve2: entered promiscuous mode [ 175.313719][ T9756] macvlan3: entered allmulticast mode [ 175.319135][ T9756] bond0: entered allmulticast mode [ 175.324385][ T9756] geneve2: entered allmulticast mode [ 175.330260][ T9756] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 175.339285][ T9756] bond0: left allmulticast mode [ 175.344232][ T9756] geneve2: left allmulticast mode [ 175.349292][ T9756] bond0: left promiscuous mode [ 175.354493][ T9756] geneve2: left promiscuous mode [ 175.401782][ T9760] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 175.456558][ T9760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.470899][ T9762] netlink: 'syz.3.2312': attribute type 7 has an invalid length. [ 175.478701][ T9762] __nla_validate_parse: 5 callbacks suppressed [ 175.478719][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 175.495655][ T9766] 9pnet: p9_errstr2errno: server reported unknown error [ 175.526906][ T9764] bond5: (slave veth7): Enslaving as an active interface with a down link [ 175.564209][ T9760] vlan2: entered allmulticast mode [ 175.569452][ T9760] bond5: entered allmulticast mode [ 175.601052][ T9760] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 175.726788][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2317'. [ 175.746650][ T9780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.767450][ T9780] vlan2: entered allmulticast mode [ 175.772764][ T9780] bond6: entered allmulticast mode [ 176.115837][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2322'. [ 176.923500][ T9803] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 176.980620][ T9803] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.034476][ T9807] bond6: (slave veth7): Enslaving as an active interface with a down link [ 177.066802][ T9803] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 177.116090][ T9803] bond6: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 177.576457][ T9832] 8021q: VLANs not supported on ip6gre0 [ 177.857367][ T9840] netlink: 'syz.1.2341': attribute type 7 has an invalid length. [ 177.865226][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 177.877365][ T9842] netlink: 'syz.0.2342': attribute type 10 has an invalid length. [ 177.887284][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 177.898185][ T9842] dummy0: left allmulticast mode [ 177.909327][ T9842] bridge0: port 3(dummy0) entered disabled state [ 177.919016][ T9842] bridge_slave_1: left promiscuous mode [ 177.924849][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.933883][ T9842] bridge_slave_0: left allmulticast mode [ 177.939788][ T9842] bridge_slave_0: left promiscuous mode [ 177.945776][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.093240][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2345'. [ 178.117192][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.165039][ T9849] vlan0: entered allmulticast mode [ 178.170344][ T9849] bond0: entered allmulticast mode [ 178.312867][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2348'. [ 178.322007][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'. [ 178.434558][ T9858] loop4: detected capacity change from 0 to 8192 [ 178.443438][ T9858] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 178.476064][ T9875] netlink: 'syz.0.2355': attribute type 13 has an invalid length. [ 178.515419][ T9858] netlink: 'syz.4.2349': attribute type 3 has an invalid length. [ 178.523440][ T9858] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 178.534009][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 178.543377][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 178.554091][ T9875] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.570507][ T9878] netlink: 'syz.3.2357': attribute type 4 has an invalid length. [ 178.581358][ T9875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.598018][ T3394] lo speed is unknown, defaulting to 1000 [ 178.604030][ T3394] syz0: Port: 1 Link ACTIVE [ 178.652150][ T9878] netlink: 'syz.3.2357': attribute type 4 has an invalid length. [ 178.691589][ T9880] lo speed is unknown, defaulting to 1000 [ 178.699860][ T9888] netlink: 'syz.4.2358': attribute type 4 has an invalid length. [ 178.723530][ T9888] netlink: 'syz.4.2358': attribute type 4 has an invalid length. [ 178.765397][ T9880] lo speed is unknown, defaulting to 1000 [ 178.819861][ T9896] loop4: detected capacity change from 0 to 512 [ 178.832495][ T9896] journal_path: Lookup failure for './file0/../file0' [ 178.839554][ T9896] EXT4-fs: error: could not find journal device path [ 178.947169][ T9910] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 178.985944][ T9910] 8021q: adding VLAN 0 to HW filter on device bond6 [ 179.011767][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.032900][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.064079][ T9915] bond6: (slave veth11): Enslaving as an active interface with a down link [ 179.085461][ T9910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.100246][ T9910] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 179.330971][ T9896] loop4: detected capacity change from 0 to 32768 [ 179.390278][ T9896] loop4: p1 p3 < p5 p6 > [ 179.468551][ T9] lo speed is unknown, defaulting to 1000 [ 179.474530][ T9] syz0: Port: 1 Link DOWN [ 179.500450][ T9] lo speed is unknown, defaulting to 1000 [ 179.506431][ T9] syz0: Port: 1 Link ACTIVE [ 179.638005][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.657162][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.672659][ T9952] pim6reg1: entered promiscuous mode [ 179.678117][ T9952] pim6reg1: entered allmulticast mode [ 179.769966][ T9951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.231605][ T1042] lo speed is unknown, defaulting to 1000 [ 180.237397][ T1042] syz2: Port: 1 Link DOWN [ 180.250695][ T3369] lo speed is unknown, defaulting to 1000 [ 180.256552][ T3369] syz2: Port: 1 Link ACTIVE [ 180.436411][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 180.436427][ T29] audit: type=1326 audit(181.412:23120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 180.443105][ T9991] loop2: detected capacity change from 0 to 256 [ 180.466017][ T29] audit: type=1326 audit(181.412:23121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 180.498486][ T29] audit: type=1326 audit(181.412:23122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe8f264e9a9 code=0x7ffc0000 [ 180.522086][ T29] audit: type=1326 audit(181.412:23123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8f264e9e3 code=0x7ffc0000 [ 180.545022][ T29] audit: type=1326 audit(181.412:23124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe8f264d45f code=0x7ffc0000 [ 180.568136][ T29] audit: type=1326 audit(181.412:23125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe8f264ea37 code=0x7ffc0000 [ 180.591119][ T29] audit: type=1326 audit(181.422:23126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8f264d310 code=0x7ffc0000 [ 180.614201][ T29] audit: type=1326 audit(181.422:23127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8f264e5ab code=0x7ffc0000 [ 180.637146][ T29] audit: type=1326 audit(181.452:23128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe8f264d60a code=0x7ffc0000 [ 180.659995][ T29] audit: type=1326 audit(181.452:23129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe8f264d60a code=0x7ffc0000 [ 180.831380][T10001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.860930][T10001] __nla_validate_parse: 5 callbacks suppressed [ 180.860950][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 180.877031][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 180.901264][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 180.911494][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 180.948013][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 180.958183][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 181.004205][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2403'. [ 181.212129][T10025] lo speed is unknown, defaulting to 1000 [ 181.222943][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2412'. [ 181.286399][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 181.335453][T10025] lo speed is unknown, defaulting to 1000 [ 181.341808][T10034] vlan0: entered allmulticast mode [ 181.356578][T10034] dummy0: entered allmulticast mode [ 181.382159][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'. [ 181.445622][T10043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10043 comm=syz.1.2416 [ 181.555395][T10047] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.565518][T10047] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.627163][T10047] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.637157][T10047] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.736573][T10047] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.746604][T10047] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.801267][T10047] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.811124][T10047] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.907439][T10047] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.915792][T10047] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.936458][T10047] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.945029][T10047] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.984524][T10047] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.992941][T10047] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.005678][T10047] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.014276][T10047] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.023923][T10081] pim6reg1: entered promiscuous mode [ 182.029640][T10081] pim6reg1: entered allmulticast mode [ 182.574686][T10116] lo speed is unknown, defaulting to 1000 [ 182.678404][T10116] lo speed is unknown, defaulting to 1000 [ 182.754359][ T9867] syz_tun (unregistering): left allmulticast mode [ 182.916304][ T5874] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.926274][ T5874] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.121329][ T5874] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.131293][ T5874] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.232777][ T5874] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.242798][ T5874] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.286267][T10137] lo speed is unknown, defaulting to 1000 [ 183.295465][ T5874] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.305336][ T5874] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.348029][T10137] lo speed is unknown, defaulting to 1000 [ 183.395484][ T5874] bridge_slave_1: left allmulticast mode [ 183.401308][ T5874] bridge_slave_1: left promiscuous mode [ 183.407048][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.416016][ T5874] bridge_slave_0: left allmulticast mode [ 183.421738][ T5874] bridge_slave_0: left promiscuous mode [ 183.427536][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.496174][ T5874] bond1 (unregistering): (slave geneve2): Releasing active interface [ 183.581026][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 183.588525][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 183.596053][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 183.605692][ T3415] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 183.632655][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.643945][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.654522][ T5874] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 183.675376][ T5874] bond0 (unregistering): Released all slaves [ 183.685465][ T5874] bond1 (unregistering): Released all slaves [ 183.705903][ T5874] bond2 (unregistering): Released all slaves [ 183.723907][ T5874] bond3 (unregistering): Released all slaves [ 183.742980][ T5874] bond4 (unregistering): (slave batadv1): Releasing active interface [ 183.808246][ T5874] bond4 (unregistering): Released all slaves [ 183.822717][ T5874] bond5 (unregistering): Released all slaves [ 183.851617][ T5874] bond6 (unregistering): (slave veth7): Releasing active interface [ 183.863360][ T5874] bond6 (unregistering): Released all slaves [ 183.940154][T10137] chnl_net:caif_netlink_parms(): no params data found [ 183.967990][T10175] loop4: detected capacity change from 0 to 2048 [ 183.985555][ T5874] tipc: Left network mode [ 183.997256][T10181] pim6reg1: entered promiscuous mode [ 184.001938][T10175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.002748][T10181] pim6reg1: entered allmulticast mode [ 184.073045][ T5874] hsr_slave_0: left promiscuous mode [ 184.079022][ T5874] hsr_slave_1: left promiscuous mode [ 184.085252][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.092728][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.101916][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.109437][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.133743][ T5874] veth1_macvtap: left promiscuous mode [ 184.139595][ T5874] veth0_macvtap: left promiscuous mode [ 184.202603][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.271139][T10199] loop4: detected capacity change from 0 to 512 [ 184.284472][T10199] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2470: iget: bad extended attribute block 1 [ 184.315770][T10199] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2470: couldn't read orphan inode 15 (err -117) [ 184.345961][T10199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.391427][T10137] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.398569][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.417054][T10137] bridge_slave_0: entered allmulticast mode [ 184.424328][T10137] bridge_slave_0: entered promiscuous mode [ 184.432217][T10137] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.439336][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.451778][T10199] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 13: comm syz.4.2470: lblock 0 mapped to illegal pblock 13 (length 1) [ 184.467116][T10137] bridge_slave_1: entered allmulticast mode [ 184.474238][T10137] bridge_slave_1: entered promiscuous mode [ 184.502668][T10209] validate_nla: 10 callbacks suppressed [ 184.502687][T10209] netlink: 'syz.3.2472': attribute type 10 has an invalid length. [ 184.523914][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.534589][T10209] team0: Failed to send options change via netlink (err -105) [ 184.542145][T10209] team0: Port device dummy0 added [ 184.550668][T10209] netlink: 'syz.3.2472': attribute type 10 has an invalid length. [ 184.561692][T10209] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.579210][T10209] team0: Failed to send options change via netlink (err -105) [ 184.595774][T10209] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.605224][T10209] team0: Port device dummy0 removed [ 184.614105][T10209] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 184.628510][T10137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.653204][T10137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.703471][T10137] team0: Port device team_slave_0 added [ 184.711838][T10137] team0: Port device team_slave_1 added [ 184.737114][T10137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.744272][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.770396][T10137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.786013][T10137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.793105][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.819174][T10137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.872230][T10137] hsr_slave_0: entered promiscuous mode [ 184.878648][T10137] hsr_slave_1: entered promiscuous mode [ 185.083647][T10241] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.110981][T10241] vlan3: entered allmulticast mode [ 185.116209][T10241] bond7: entered allmulticast mode [ 185.187603][T10247] netlink: 'syz.3.2492': attribute type 27 has an invalid length. [ 185.238049][T10247] 0ªî{X¹¦: left allmulticast mode [ 185.390006][T10247] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.398441][T10247] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.407146][T10247] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.415796][T10247] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.468219][T10247] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.476786][T10247] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.485283][T10247] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.493809][T10247] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.521512][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 185.521533][ T29] audit: type=1326 audit(186.502:23307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.551726][T10247] vxlan0: left promiscuous mode [ 185.575845][ T29] audit: type=1326 audit(186.502:23308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.600572][ T29] audit: type=1326 audit(186.532:23309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.623733][ T29] audit: type=1326 audit(186.532:23310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.646908][ T29] audit: type=1326 audit(186.532:23311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.669978][ T29] audit: type=1326 audit(186.532:23312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.693434][ T29] audit: type=1326 audit(186.532:23313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.716640][ T29] audit: type=1326 audit(186.532:23314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.739683][ T29] audit: type=1326 audit(186.532:23315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.762962][ T29] audit: type=1326 audit(186.532:23316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de1c2e9a9 code=0x7ffc0000 [ 185.848364][T10247] bond3: left promiscuous mode [ 185.858114][T10247] batadv1: left promiscuous mode [ 185.863872][T10247] batadv1: left allmulticast mode [ 185.920833][T10247] vlan0: left allmulticast mode [ 185.925830][T10247] geneve1: left allmulticast mode [ 185.983736][T10248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.006767][T10248] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.044118][T10248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.074132][ T3393] syz1: Port: 1 Link DOWN [ 186.142148][T10137] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.171248][T10137] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.190338][T10137] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.219311][T10261] lo speed is unknown, defaulting to 1000 [ 186.225634][T10137] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.293560][T10261] lo speed is unknown, defaulting to 1000 [ 186.353635][T10137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.377257][T10137] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.386970][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.394178][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.407117][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.414304][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.434195][T10137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.444632][T10137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.507815][T10137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.574473][T10137] veth0_vlan: entered promiscuous mode [ 186.582312][T10137] veth1_vlan: entered promiscuous mode [ 186.596941][T10137] veth0_macvtap: entered promiscuous mode [ 186.604970][T10137] veth1_macvtap: entered promiscuous mode [ 186.615685][T10137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.627646][T10137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.637147][T10137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.646096][T10137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.654980][T10137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.663791][T10137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.734668][T10287] loop2: detected capacity change from 0 to 512 [ 186.747283][T10287] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2498: iget: bad extended attribute block 1 [ 186.762260][T10287] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2498: couldn't read orphan inode 15 (err -117) [ 186.766900][T10285] lo speed is unknown, defaulting to 1000 [ 186.775482][T10287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.854150][T10287] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.2498: lblock 0 mapped to illegal pblock 13 (length 1) [ 186.886892][T10285] lo speed is unknown, defaulting to 1000 [ 186.917089][T10137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.122488][T10317] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 187.130827][T10317] tipc: Enabled bearer , priority 10 [ 187.188990][T10321] loop4: detected capacity change from 0 to 1024 [ 187.196754][T10319] loop2: detected capacity change from 0 to 8192 [ 187.201344][T10321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.218852][T10319] vfat: Unknown parameter '0xffffffffffffffff' [ 187.245752][T10319] __nla_validate_parse: 9 callbacks suppressed [ 187.245767][T10319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2513'. [ 187.264746][ T5882] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 15) [ 187.295983][ T5882] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 187.308763][ T5882] EXT4-fs (loop4): This should not happen!! Data will be lost [ 187.308763][ T5882] [ 187.339528][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.394886][T10336] loop4: detected capacity change from 0 to 256 [ 187.422122][T10336] FAT-fs (loop4): Directory bread(block 64) failed [ 187.441479][T10336] FAT-fs (loop4): Directory bread(block 65) failed [ 187.448596][T10336] FAT-fs (loop4): Directory bread(block 66) failed [ 187.457044][T10336] FAT-fs (loop4): Directory bread(block 67) failed [ 187.472827][T10336] FAT-fs (loop4): Directory bread(block 68) failed [ 187.482745][T10336] FAT-fs (loop4): Directory bread(block 69) failed [ 187.492468][T10336] FAT-fs (loop4): Directory bread(block 70) failed [ 187.501117][T10336] FAT-fs (loop4): Directory bread(block 71) failed [ 187.508616][T10336] FAT-fs (loop4): Directory bread(block 72) failed [ 187.517313][T10336] FAT-fs (loop4): Directory bread(block 73) failed [ 187.621634][T10359] pim6reg: entered allmulticast mode [ 187.627957][T10359] pim6reg: left allmulticast mode [ 187.912309][T10376] netlink: 'syz.4.2536': attribute type 4 has an invalid length. [ 188.211345][T10391] lo speed is unknown, defaulting to 1000 [ 188.269219][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 188.322304][T10391] lo speed is unknown, defaulting to 1000 [ 188.374738][T10401] netlink: 'syz.2.2546': attribute type 3 has an invalid length. [ 188.386642][T10401] netlink: 'syz.2.2546': attribute type 3 has an invalid length. [ 188.466990][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.496529][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.507789][T10407] netlink: 'syz.2.2549': attribute type 27 has an invalid length. [ 188.522928][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2550'. [ 188.569906][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.577237][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.673535][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.696811][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.745705][T10407] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.754765][T10407] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.763984][T10407] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.773005][T10407] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.833704][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'. [ 188.845998][T10410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.854316][T10410] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.875056][T10410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.879032][T10416] random: crng reseeded on system resumption [ 189.374884][T10458] netlink: 'syz.3.2570': attribute type 4 has an invalid length. [ 189.413486][T10462] lo speed is unknown, defaulting to 1000 [ 189.443315][T10466] loop2: detected capacity change from 0 to 128 [ 189.452361][T10462] lo speed is unknown, defaulting to 1000 [ 189.452358][T10466] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.501674][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 189.562660][T10137] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.609089][T10478] lo speed is unknown, defaulting to 1000 [ 189.681672][T10481] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 189.691668][T10478] lo speed is unknown, defaulting to 1000 [ 189.697541][ T1042] IPVS: starting estimator thread 0... [ 189.771686][T10488] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2580'. [ 189.789438][T10485] IPVS: using max 2016 ests per chain, 100800 per kthread [ 189.838311][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 189.859275][T10490] random: crng reseeded on system resumption [ 190.226598][T10506] netlink: 'syz.2.2588': attribute type 2 has an invalid length. [ 190.226620][T10506] netlink: 'syz.2.2588': attribute type 1 has an invalid length. [ 190.226700][T10506] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2588'. [ 190.374164][T10512] lo speed is unknown, defaulting to 1000 [ 190.416387][T10512] lo speed is unknown, defaulting to 1000 [ 190.444303][T10514] loop4: detected capacity change from 0 to 512 [ 190.457516][T10514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.481416][T10514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.498415][T10514] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2592: corrupted xattr block 19: overlapping e_value [ 190.498641][T10514] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 190.498689][T10514] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2592: corrupted xattr block 19: overlapping e_value [ 190.501117][T10514] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 190.501220][T10514] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2592: corrupted xattr block 19: overlapping e_value [ 190.530582][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.638924][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 190.638942][ T29] audit: type=1326 audit(191.612:23687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.639078][ T29] audit: type=1326 audit(191.612:23688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.639323][ T29] audit: type=1326 audit(191.612:23689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.643605][ T29] audit: type=1326 audit(191.622:23690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.643639][ T29] audit: type=1326 audit(191.622:23691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.643677][ T29] audit: type=1326 audit(191.622:23692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.643760][ T29] audit: type=1326 audit(191.622:23693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.643907][ T29] audit: type=1326 audit(191.622:23694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.643944][ T29] audit: type=1326 audit(191.622:23695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.644329][ T29] audit: type=1326 audit(191.622:23696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 190.848050][T10541] loop4: detected capacity change from 0 to 128 [ 190.851608][T10541] FAT-fs (loop4): Directory bread(block 162) failed [ 190.851641][T10541] FAT-fs (loop4): Directory bread(block 163) failed [ 190.851667][T10541] FAT-fs (loop4): Directory bread(block 164) failed [ 190.851692][T10541] FAT-fs (loop4): Directory bread(block 165) failed [ 190.851716][T10541] FAT-fs (loop4): Directory bread(block 166) failed [ 190.851806][T10541] FAT-fs (loop4): Directory bread(block 167) failed [ 190.851831][T10541] FAT-fs (loop4): Directory bread(block 168) failed [ 190.851855][T10541] FAT-fs (loop4): Directory bread(block 169) failed [ 190.882411][T10541] FAT-fs (loop4): Directory bread(block 162) failed [ 190.882496][T10541] FAT-fs (loop4): Directory bread(block 163) failed [ 190.883138][T10541] syz.4.2601: attempt to access beyond end of device [ 190.883138][T10541] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 190.883175][T10541] syz.4.2601: attempt to access beyond end of device [ 190.883175][T10541] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 191.043103][T10545] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2603'. [ 191.128022][T10543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2602'. [ 191.253563][T10546] loop4: detected capacity change from 0 to 8192 [ 191.422541][T10563] netlink: 'syz.0.2609': attribute type 39 has an invalid length. [ 191.452433][T10566] ref_ctr_offset mismatch. inode: 0xa96 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 191.577332][T10572] loop4: detected capacity change from 0 to 128 [ 191.612366][T10572] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 191.616421][T10570] lo speed is unknown, defaulting to 1000 [ 191.643682][T10575] bridge0: port 1(team0) entered blocking state [ 191.650099][T10575] bridge0: port 1(team0) entered disabled state [ 191.675111][T10575] team0: entered allmulticast mode [ 191.690922][T10575] team_slave_0: entered allmulticast mode [ 191.696755][T10575] team_slave_1: entered allmulticast mode [ 191.706725][T10575] team0: entered promiscuous mode [ 191.721983][T10575] team_slave_0: entered promiscuous mode [ 191.727769][T10575] team_slave_1: entered promiscuous mode [ 191.784066][T10581] netlink: 'syz.2.2617': attribute type 1 has an invalid length. [ 191.883877][T10570] lo speed is unknown, defaulting to 1000 [ 191.981222][T10591] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.289670][T10602] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.302490][T10602] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 192.702392][T10608] loop2: detected capacity change from 0 to 128 [ 192.713132][T10608] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 193.036867][T10637] lo speed is unknown, defaulting to 1000 [ 193.134909][T10637] lo speed is unknown, defaulting to 1000 [ 193.342054][T10648] lo speed is unknown, defaulting to 1000 [ 193.361245][T10651] bridge0: port 3(team0) entered blocking state [ 193.367631][T10651] bridge0: port 3(team0) entered disabled state [ 193.376380][T10651] team0: entered allmulticast mode [ 193.381752][T10651] team_slave_0: entered allmulticast mode [ 193.387546][T10651] team_slave_1: entered allmulticast mode [ 193.432421][T10651] team0: entered promiscuous mode [ 193.442827][T10651] team_slave_0: entered promiscuous mode [ 193.448685][T10651] team_slave_1: entered promiscuous mode [ 193.518781][T10648] lo speed is unknown, defaulting to 1000 [ 193.606306][T10668] __nla_validate_parse: 2 callbacks suppressed [ 193.606327][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2652'. [ 193.663484][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 193.767268][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2657'. [ 193.776779][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 193.788444][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2657'. [ 193.802661][T10680] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.811032][T10680] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.819253][T10680] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.827827][T10680] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.838542][T10680] vxlan0: entered promiscuous mode [ 194.146154][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 194.155330][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 194.165010][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 194.174174][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 194.261252][T10706] lo speed is unknown, defaulting to 1000 [ 194.299244][T10706] lo speed is unknown, defaulting to 1000 [ 194.675661][T10734] hub 9-0:1.0: USB hub found [ 194.680648][T10734] hub 9-0:1.0: 8 ports detected [ 194.741524][T10741] loop4: detected capacity change from 0 to 2048 [ 194.770209][T10741] loop4: p1 < > p4 [ 194.774748][T10741] loop4: p4 size 8388608 extends beyond EOD, truncated [ 194.834673][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 194.917303][T10751] random: crng reseeded on system resumption [ 195.557905][T10780] netlink: 'syz.2.2696': attribute type 14 has an invalid length. [ 195.620452][T10784] block device autoloading is deprecated and will be removed. [ 195.790120][T10793] netlink: '+}[@': attribute type 13 has an invalid length. [ 195.824686][T10797] ref_ctr_offset mismatch. inode: 0xb92 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 195.842349][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 195.842364][ T29] audit: type=1400 audit(196.822:23992): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop1" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.871468][ T29] audit: type=1400 audit(196.822:23993): avc: denied { open } for pid=3306 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.894279][ T29] audit: type=1400 audit(196.822:23994): avc: denied { ioctl } for pid=3306 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=869 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 196.044013][T10801] wireguard0: entered promiscuous mode [ 196.049661][T10801] wireguard0: entered allmulticast mode [ 196.131435][T10809] tipc: Enabled bearer , priority 0 [ 196.140511][T10808] tipc: Resetting bearer [ 196.164812][T10808] tipc: Disabling bearer [ 196.262964][T10816] xt_CONNSECMARK: invalid mode: 0 [ 196.410234][T10820] loop4: detected capacity change from 0 to 2048 [ 196.446490][T10820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.732480][T10832] loop1: detected capacity change from 0 to 512 [ 196.764510][T10832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.822709][T10832] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.2715: iget: bad i_size value: 2533274857506816 [ 196.924776][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.951096][T10825] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 196.982115][T10836] lo speed is unknown, defaulting to 1000 [ 196.999527][T10825] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 197.012219][T10825] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.012219][T10825] [ 197.021919][T10825] EXT4-fs (loop4): Total free blocks count 0 [ 197.027952][T10825] EXT4-fs (loop4): Free/Dirty block details [ 197.033931][T10825] EXT4-fs (loop4): free_blocks=2415919104 [ 197.039712][T10825] EXT4-fs (loop4): dirty_blocks=8208 [ 197.045036][T10825] EXT4-fs (loop4): Block reservation details [ 197.051082][T10825] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 197.083991][T10836] lo speed is unknown, defaulting to 1000 [ 197.255306][ T5899] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 197.273337][T10850] loop2: detected capacity change from 0 to 128 [ 197.282282][T10848] loop1: detected capacity change from 0 to 128 [ 197.295840][T10848] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.323050][T10853] tipc: Enabling of bearer rejected, failed to enable media [ 197.375411][ T29] audit: type=1400 audit(198.352:23995): avc: denied { remount } for pid=10849 comm="syz.2.2724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 197.484123][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.804790][ T29] audit: type=1326 audit(198.782:23996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb798e9a9 code=0x7ffc0000 [ 197.828026][ T29] audit: type=1326 audit(198.782:23997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb798e9a9 code=0x7ffc0000 [ 197.851098][ T29] audit: type=1326 audit(198.782:23998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb798e9a9 code=0x7ffc0000 [ 197.874247][ T29] audit: type=1326 audit(198.782:23999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb798e9a9 code=0x7ffc0000 [ 197.897338][ T29] audit: type=1326 audit(198.782:24000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb798e9a9 code=0x7ffc0000 [ 197.920493][ T29] audit: type=1326 audit(198.782:24001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb798e9a9 code=0x7ffc0000 [ 198.082036][T10900] lo speed is unknown, defaulting to 1000 [ 198.125105][T10903] bridge0: port 1(team0) entered blocking state [ 198.131514][T10903] bridge0: port 1(team0) entered disabled state [ 198.153967][T10903] team0: entered allmulticast mode [ 198.160221][T10903] team0: entered promiscuous mode [ 198.170337][T10900] lo speed is unknown, defaulting to 1000 [ 198.206231][T10907] loop1: detected capacity change from 0 to 1024 [ 198.232222][T10907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.328778][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.480961][T10912] loop1: detected capacity change from 0 to 8192 [ 198.503656][T10912] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.663963][T10925] lo speed is unknown, defaulting to 1000 [ 198.754163][T10925] lo speed is unknown, defaulting to 1000 [ 199.115919][T10942] team0: Port device C removed [ 199.122994][T10942] team0: Port device team_slave_1 removed [ 199.130249][T10942] bond1: (slave gretap1): Releasing active interface [ 199.177947][T10942] team0: Mode changed to "activebackup" [ 199.242731][T10944] lo speed is unknown, defaulting to 1000 [ 199.311842][T10944] lo speed is unknown, defaulting to 1000 [ 199.599926][T10953] lo speed is unknown, defaulting to 1000 [ 199.736523][T10953] lo speed is unknown, defaulting to 1000 [ 199.796000][T10965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10965 comm=syz.2.2766 [ 199.833188][T10880] loop4: detected capacity change from 0 to 2048 [ 199.925373][T10880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.135746][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.216134][T10976] loop4: detected capacity change from 0 to 1024 [ 200.254087][T10976] EXT4-fs: inline encryption not supported [ 200.270364][T10976] EXT4-fs: Ignoring removed bh option [ 200.278189][T10976] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 200.313329][T10976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.398363][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.625762][T10992] loop4: detected capacity change from 0 to 512 [ 200.644319][T10992] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.674368][T10992] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2775: bad orphan inode 11 [ 200.705697][T10992] ext4_test_bit(bit=10, block=4) = 1 [ 200.711244][T10992] is_bad_inode(inode)=0 [ 200.715560][T10992] NEXT_ORPHAN(inode)=2080374784 [ 200.720591][T10992] max_ino=32 [ 200.723815][T10992] i_nlink=0 [ 200.747258][T10992] EXT4-fs (loop4): 1 truncate cleaned up [ 200.757727][T10992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.772484][T10997] __nla_validate_parse: 4 callbacks suppressed [ 200.772505][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2778'. [ 200.805627][T10992] lo speed is unknown, defaulting to 1000 [ 200.846358][T10992] lo speed is unknown, defaulting to 1000 [ 200.989905][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.093066][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 201.492427][T11044] program syz.1.2796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.520649][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 201.520668][ T29] audit: type=1326 audit(202.502:24158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 201.592455][T11047] loop4: detected capacity change from 0 to 512 [ 201.629763][T11047] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 201.632068][ T29] audit: type=1326 audit(202.502:24159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 201.660983][ T29] audit: type=1326 audit(202.502:24160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 201.684284][ T29] audit: type=1326 audit(202.502:24161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 201.707316][ T29] audit: type=1326 audit(202.502:24162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f873f11e9e3 code=0x7ffc0000 [ 201.730248][ T29] audit: type=1326 audit(202.502:24163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f873f11d45f code=0x7ffc0000 [ 201.753158][ T29] audit: type=1326 audit(202.512:24164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f873f11ea37 code=0x7ffc0000 [ 201.776195][ T29] audit: type=1326 audit(202.562:24165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f873f11d310 code=0x7ffc0000 [ 201.799266][ T29] audit: type=1326 audit(202.562:24166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f873f11e5ab code=0x7ffc0000 [ 201.822203][ T29] audit: type=1326 audit(202.602:24167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f873f11d60a code=0x7ffc0000 [ 201.861664][T11047] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2798: invalid indirect mapped block 2683928664 (level 1) [ 201.888485][T11047] EXT4-fs (loop4): Remounting filesystem read-only [ 201.908457][T11047] EXT4-fs (loop4): 1 truncate cleaned up [ 201.920379][T11047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.005858][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.567840][T11083] loop1: detected capacity change from 0 to 128 [ 202.593613][T11083] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.739142][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.891926][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.909985][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.972847][T11092] loop1: detected capacity change from 0 to 128 [ 203.139909][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 203.154800][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 203.201263][T11125] loop1: detected capacity change from 0 to 1024 [ 203.288006][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 203.301045][T11137] ip6gre1: entered allmulticast mode [ 203.393305][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2838'. [ 203.412530][T11153] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 203.414760][T11151] team0: entered promiscuous mode [ 203.426302][T11151] team0: entered allmulticast mode [ 203.503300][T11160] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2843'. [ 203.530167][T11160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.537437][T11160] IPv6: NLM_F_CREATE should be set when creating new route [ 203.637485][T11173] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 203.767215][T11189] pim6reg1: entered promiscuous mode [ 203.772768][T11189] pim6reg1: entered allmulticast mode [ 203.795245][T11196] loop1: detected capacity change from 0 to 512 [ 203.829000][T11196] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2856: Failed to acquire dquot type 1 [ 203.832406][T11203] tipc: New replicast peer: 10.1.1.2 [ 203.845279][T11196] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2856: corrupted inode contents [ 203.845764][T11203] tipc: Enabled bearer , priority 10 [ 203.857708][T11196] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.2856: mark_inode_dirty error [ 203.876068][T11196] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2856: corrupted inode contents [ 203.888489][T11196] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2856: mark_inode_dirty error [ 203.900883][T11196] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2856: corrupted inode contents [ 203.925085][T11196] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 203.937921][T11205] xt_CT: No such helper "pptp" [ 203.939445][T11196] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2856: corrupted inode contents [ 203.960594][T11196] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.2856: mark_inode_dirty error [ 203.980594][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 203.991939][T11196] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 204.021301][T11196] EXT4-fs (loop1): 1 truncate cleaned up [ 204.033003][T11196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.062700][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.146163][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2868'. [ 204.432135][T11252] loop2: detected capacity change from 0 to 4096 [ 204.447621][T11252] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.462036][T11252] ext4: Bad value for 'resgid' [ 204.466897][T11252] ext4: Bad value for 'resgid' [ 204.492339][T11252] loop2: detected capacity change from 0 to 1024 [ 204.576657][T11261] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 204.587371][T11261] 8021q: adding VLAN 0 to HW filter on device bond8 [ 205.132733][T11305] syzkaller0: entered promiscuous mode [ 205.138309][T11305] syzkaller0: entered allmulticast mode [ 205.311090][T11324] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.342091][T11324] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.350362][T11324] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 205.363811][T11324] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 205.392279][T11331] macvlan0: entered promiscuous mode [ 205.397671][T11331] macvlan0: entered allmulticast mode [ 205.404435][T11331] bond7: (slave macvlan0): Error -98 calling set_mac_address [ 205.611079][T11352] netlink: 'syz.3.2920': attribute type 13 has an invalid length. [ 205.779979][T11354] __nla_validate_parse: 3 callbacks suppressed [ 205.779994][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2921'. [ 206.131436][T11360] loop4: detected capacity change from 0 to 512 [ 206.141674][T11360] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2923: Failed to acquire dquot type 1 [ 206.155852][T11360] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.2923: corrupted inode contents [ 206.168502][T11360] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.2923: mark_inode_dirty error [ 206.180704][T11360] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.2923: corrupted inode contents [ 206.195310][T11364] bridge: RTM_NEWNEIGH with invalid ether address [ 206.202910][T11360] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2923: mark_inode_dirty error [ 206.220545][T11360] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.2923: corrupted inode contents [ 206.233066][T11360] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 206.245912][T11360] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.2923: corrupted inode contents [ 206.268984][T11360] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.2923: mark_inode_dirty error [ 206.287044][T11360] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 206.299033][T11360] EXT4-fs (loop4): 1 truncate cleaned up [ 206.305735][T11360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.343290][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.601846][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 206.601866][ T29] audit: type=1326 audit(207.582:24848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.705451][ T29] audit: type=1326 audit(207.582:24849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.728601][ T29] audit: type=1326 audit(207.612:24850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.751701][ T29] audit: type=1326 audit(207.612:24851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.774740][ T29] audit: type=1326 audit(207.612:24852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.798599][ T29] audit: type=1326 audit(207.612:24853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.821958][ T29] audit: type=1326 audit(207.612:24854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.845043][ T29] audit: type=1326 audit(207.612:24855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.868067][ T29] audit: type=1326 audit(207.612:24856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 206.891292][ T29] audit: type=1326 audit(207.612:24857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 207.044283][T11416] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 207.077563][T11416] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 207.170710][T11450] loop4: detected capacity change from 0 to 512 [ 207.182193][T11450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2960: bg 0: block 248: padding at end of block bitmap is not set [ 207.197969][T11450] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2960: Failed to acquire dquot type 1 [ 207.210956][T11450] EXT4-fs (loop4): 1 truncate cleaned up [ 207.217012][T11450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.296352][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.382043][T11469] lo speed is unknown, defaulting to 1000 [ 207.434960][T11473] loop4: detected capacity change from 0 to 256 [ 207.514874][T11469] lo speed is unknown, defaulting to 1000 [ 207.586602][T11473] FAT-fs (loop4): bogus number of FAT sectors [ 207.592999][T11473] FAT-fs (loop4): Can't find a valid FAT filesystem [ 208.080705][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2972'. [ 208.181251][T11483] netlink: 'syz.2.2971': attribute type 10 has an invalid length. [ 208.195332][T11483] dummy0: entered promiscuous mode [ 208.200659][T11483] dummy0: entered allmulticast mode [ 208.206350][T11483] team0: Port device dummy0 added [ 208.213713][ T5882] bridge0: port 3(team0) entered blocking state [ 208.220070][ T5882] bridge0: port 3(team0) entered forwarding state [ 208.231772][T11483] netlink: 'syz.2.2971': attribute type 10 has an invalid length. [ 208.259662][T11483] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 208.280151][T11483] dummy0: left promiscuous mode [ 208.285137][T11483] dummy0: left allmulticast mode [ 208.310219][T11483] team0: Failed to send options change via netlink (err -105) [ 208.322193][T11483] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 208.336172][T11483] team0: Port device dummy0 removed [ 208.345657][T11483] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 208.355233][ T5911] bridge0: port 3(team0) entered disabled state [ 208.372451][T11491] wireguard0: entered promiscuous mode [ 208.377981][T11491] wireguard0: entered allmulticast mode [ 208.390015][T11500] netlink: 'syz.4.2976': attribute type 7 has an invalid length. [ 208.397905][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 208.427903][T11503] netlink: 'syz.2.2978': attribute type 1 has an invalid length. [ 208.481572][T11503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.504858][T11508] vlan2: entered allmulticast mode [ 208.510099][T11508] bond1: entered allmulticast mode [ 208.662987][T11524] ref_ctr_offset mismatch. inode: 0xc6b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 208.741102][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2991'. [ 208.912535][T11550] loop4: detected capacity change from 0 to 128 [ 209.075068][T11565] random: crng reseeded on system resumption [ 209.093736][T11567] loop4: detected capacity change from 0 to 512 [ 209.100516][T11567] EXT4-fs: Ignoring removed i_version option [ 209.106906][T11567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.119556][T11567] EXT4-fs (loop4): 1 truncate cleaned up [ 209.125838][T11567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.156034][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.495051][T11578] xt_CONNSECMARK: invalid mode: 0 [ 209.629188][T11592] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3012'. [ 209.648610][T11592] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3012'. [ 210.285245][T11625] netlink: 'syz.0.3034': attribute type 10 has an invalid length. [ 210.293177][T11625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3034'. [ 210.329452][T11629] tipc: Enabling of bearer rejected, failed to enable media [ 210.358802][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 210.367869][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3028'. [ 210.406004][T11633] tipc: Started in network mode [ 210.411579][T11633] tipc: Node identity 0e9fcff23e89, cluster identity 4711 [ 210.418814][T11633] tipc: Enabled bearer , priority 0 [ 210.427064][T11632] tipc: Resetting bearer [ 210.439715][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 210.449821][T11632] tipc: Disabling bearer [ 210.502560][T11641] wireguard0: entered promiscuous mode [ 210.508081][T11641] wireguard0: entered allmulticast mode [ 210.517381][T11642] netlink: 'syz.0.3032': attribute type 7 has an invalid length. [ 210.821124][T11673] __nla_validate_parse: 4 callbacks suppressed [ 210.821140][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 210.836366][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'. [ 210.870227][T11673] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.879094][T11673] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.888591][T11673] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.897375][T11673] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.909198][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 210.909683][T11671] netlink: 'syz.1.3046': attribute type 7 has an invalid length. [ 210.919019][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'. [ 210.925884][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 210.985354][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3047'. [ 211.025731][T11681] wireguard0: entered promiscuous mode [ 211.031565][T11681] wireguard0: entered allmulticast mode [ 211.066825][T11688] sit0: entered allmulticast mode [ 211.145482][T11688] sit0: entered promiscuous mode [ 211.300281][T11704] netlink: 'syz.4.3057': attribute type 13 has an invalid length. [ 211.308724][T11707] tmpfs: Bad value for 'mpol' [ 211.327403][T11709] sit0: entered allmulticast mode [ 211.614601][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 211.614707][ T29] audit: type=1326 audit(212.592:25319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f873f115967 code=0x7ffc0000 [ 211.646309][ T29] audit: type=1326 audit(212.592:25320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f873f0bab89 code=0x7ffc0000 [ 211.670219][ T29] audit: type=1326 audit(212.592:25321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 211.693270][ T29] audit: type=1326 audit(212.602:25322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f873f115967 code=0x7ffc0000 [ 211.716992][ T29] audit: type=1326 audit(212.602:25323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f873f0bab89 code=0x7ffc0000 [ 211.740661][ T29] audit: type=1326 audit(212.602:25324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 211.763907][ T29] audit: type=1326 audit(212.612:25325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f873f115967 code=0x7ffc0000 [ 211.787612][ T29] audit: type=1326 audit(212.612:25326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f873f0bab89 code=0x7ffc0000 [ 211.811653][ T29] audit: type=1326 audit(212.612:25327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f873f11e9a9 code=0x7ffc0000 [ 211.834681][ T29] audit: type=1326 audit(212.622:25328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f873f115967 code=0x7ffc0000 [ 212.013447][T11721] netlink: 'syz.0.3063': attribute type 1 has an invalid length. [ 212.029023][T11721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.036435][T11719] loop2: detected capacity change from 0 to 4096 [ 212.046638][T11719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.049281][T11721] vlan0: entered allmulticast mode [ 212.065261][T11721] bond3: entered allmulticast mode [ 212.065565][T11719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3064'. [ 212.095470][T10137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.226735][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 212.300534][T11739] sit0: entered allmulticast mode [ 212.332561][T11743] loop4: detected capacity change from 0 to 512 [ 212.358129][T11743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.375373][T11744] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3069'. [ 212.387135][T11742] netlink: 'syz.1.3072': attribute type 3 has an invalid length. [ 212.396159][T11743] EXT4-fs (loop4): 1 truncate cleaned up [ 212.402649][T11743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.404952][T11739] sit0: entered promiscuous mode [ 212.438677][T11744] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3069'. [ 212.504381][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.752337][T11757] loop2: detected capacity change from 0 to 512 [ 212.798323][T11762] netlink: 'syz.4.3078': attribute type 10 has an invalid length. [ 212.832928][T11762] netlink: 'syz.4.3078': attribute type 10 has an invalid length. [ 212.874529][T11757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.891606][T11757] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3077: iget: bad i_size value: 2533274857506816 [ 212.990682][T10137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.041427][T11783] loop4: detected capacity change from 0 to 128 [ 213.048583][T11783] EXT4-fs: Ignoring removed nobh option [ 213.063916][T11783] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.181827][ T3369] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.191186][ T3369] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.218212][T11797] ref_ctr_offset mismatch. inode: 0xceb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 213.409094][T11814] batadv_slave_0: entered promiscuous mode [ 213.421663][T11814] batadv_slave_0 (unregistering): left promiscuous mode [ 213.428816][T11814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.520982][T11820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.539810][T11820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.552704][T11820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.621708][T11827] lo speed is unknown, defaulting to 1000 [ 213.668974][T11837] loop2: detected capacity change from 0 to 256 [ 213.685751][T11827] lo speed is unknown, defaulting to 1000 [ 213.687828][T11837] FAT-fs (loop2): bogus number of FAT sectors [ 213.697797][T11837] FAT-fs (loop2): Can't find a valid FAT filesystem [ 213.893517][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.933523][T11850] tipc: Enabled bearer , priority 0 [ 213.946298][T11849] tipc: Resetting bearer [ 213.979269][T11849] tipc: Disabling bearer [ 213.998634][T11857] netlink: 'syz.0.3115': attribute type 13 has an invalid length. [ 214.218536][T11871] loop2: detected capacity change from 0 to 1024 [ 214.243144][T11871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.278909][T11871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.393562][T10137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.595755][T11880] lo speed is unknown, defaulting to 1000 [ 214.652430][T11886] loop2: detected capacity change from 0 to 128 [ 214.652913][T11880] lo speed is unknown, defaulting to 1000 [ 214.659311][T11886] EXT4-fs: Ignoring removed nobh option [ 214.686557][T11886] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.797388][ T3394] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.811568][ T3394] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.240608][T11904] ================================================================== [ 215.248758][T11904] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 215.256093][T11904] [ 215.258443][T11904] read to 0xffff88811b34ec88 of 4 bytes by task 11902 on cpu 0: [ 215.266096][T11904] atime_needs_update+0x25f/0x3e0 [ 215.271153][T11904] touch_atime+0x4a/0x340 [ 215.275514][T11904] shmem_file_read_iter+0x477/0x540 [ 215.280738][T11904] copy_splice_read+0x3c4/0x5f0 [ 215.285626][T11904] splice_direct_to_actor+0x290/0x680 [ 215.291051][T11904] do_splice_direct+0xda/0x150 [ 215.295857][T11904] do_sendfile+0x380/0x650 [ 215.300308][T11904] __x64_sys_sendfile64+0x105/0x150 [ 215.305547][T11904] x64_sys_call+0xb39/0x2fb0 [ 215.310177][T11904] do_syscall_64+0xd2/0x200 [ 215.314722][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.320640][T11904] [ 215.322993][T11904] write to 0xffff88811b34ec88 of 4 bytes by task 11904 on cpu 1: [ 215.330741][T11904] touch_atime+0x1e8/0x340 [ 215.335198][T11904] shmem_file_read_iter+0x477/0x540 [ 215.340417][T11904] copy_splice_read+0x3c4/0x5f0 [ 215.345313][T11904] splice_direct_to_actor+0x290/0x680 [ 215.350730][T11904] do_splice_direct+0xda/0x150 [ 215.356059][T11904] do_sendfile+0x380/0x650 [ 215.360517][T11904] __x64_sys_sendfile64+0x105/0x150 [ 215.365747][T11904] x64_sys_call+0xb39/0x2fb0 [ 215.370371][T11904] do_syscall_64+0xd2/0x200 [ 215.374900][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.380818][T11904] [ 215.383166][T11904] value changed: 0x0ca92ac6 -> 0x0d41c146 [ 215.388892][T11904] [ 215.391232][T11904] Reported by Kernel Concurrency Sanitizer on: [ 215.397420][T11904] CPU: 1 UID: 0 PID: 11904 Comm: syz.3.3130 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 215.409968][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.420062][T11904] ================================================================== [ 215.487349][T10137] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.069442][ T4439] page_pool_release_retry() stalled pool shutdown: id 90, 1 inflight 60 sec [ 221.269472][ T4439] page_pool_release_retry() stalled pool shutdown: id 91, 1 inflight 60 sec