last executing test programs: 1m46.769420014s ago: executing program 2 (id=1551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 1m46.768988005s ago: executing program 2 (id=1552): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xf47c34376c57618a}}]}}]}, 0x3c}}, 0x20004811) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m46.693524051s ago: executing program 2 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m46.657149124s ago: executing program 2 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m46.461580749s ago: executing program 2 (id=1562): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) 1m45.999906186s ago: executing program 2 (id=1571): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m45.967705389s ago: executing program 32 (id=1571): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m30.818641334s ago: executing program 5 (id=2080): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) modify_ldt$write(0x1, &(0x7f0000000640)={0x1, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000240)={0x40, 0x20100000, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x1, 0x1}, 0x10) 1m30.818110204s ago: executing program 5 (id=2081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x6, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 1m30.797735676s ago: executing program 5 (id=2082): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000b900dd030000000000000100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000d4}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1m30.767316438s ago: executing program 5 (id=2083): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 1m30.74746967s ago: executing program 5 (id=2084): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = getpid() r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 1m30.524796888s ago: executing program 5 (id=2089): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1m30.524648798s ago: executing program 33 (id=2089): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13.842988269s ago: executing program 0 (id=4516): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100fe0f00000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x4050) 13.751469566s ago: executing program 0 (id=4519): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000080)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 13.733382558s ago: executing program 0 (id=4520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13.197581801s ago: executing program 0 (id=4537): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21a5099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 13.140354295s ago: executing program 0 (id=4529): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0xffdd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = msgget$private(0x0, 0x100) msgsnd(r2, &(0x7f0000003900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x17}, 0x0, 0x0, 0x1, 0x1414, 0x10041, 0x4e, 0xffffffffffffffc9, 0x8, 0x8582, 0x6}) 12.908478894s ago: executing program 0 (id=4532): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) shutdown(r2, 0x1) 12.884248996s ago: executing program 34 (id=4532): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) shutdown(r2, 0x1) 1.802009025s ago: executing program 6 (id=4797): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 1.725919601s ago: executing program 6 (id=4798): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4e, 0x1, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.487914751s ago: executing program 6 (id=4803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) r4 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x2dd2, 0x10100, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4}, 0x1) 1.421979286s ago: executing program 6 (id=4807): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.24095731s ago: executing program 6 (id=4810): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) 1.111758311s ago: executing program 4 (id=4815): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.004022819s ago: executing program 4 (id=4819): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000fffff2ff000000000000000000000000fe8000000000000000000000000000bb000000400000300d0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000010000000a0000060000000000000000480002006362632861657329"], 0x184}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 945.545114ms ago: executing program 3 (id=4821): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 859.774961ms ago: executing program 6 (id=4826): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 858.282181ms ago: executing program 3 (id=4827): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 815.947655ms ago: executing program 1 (id=4828): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r1, 0x8153}, {r2, 0x8220}], 0x2, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) 774.771688ms ago: executing program 3 (id=4829): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x28101) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 695.256324ms ago: executing program 1 (id=4830): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 694.810344ms ago: executing program 4 (id=4831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) 623.52665ms ago: executing program 4 (id=4833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 594.452492ms ago: executing program 1 (id=4834): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 554.812825ms ago: executing program 3 (id=4835): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 552.454245ms ago: executing program 7 (id=4836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) close(r2) 524.272528ms ago: executing program 4 (id=4837): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000340), 0xffffff64) 475.900762ms ago: executing program 7 (id=4838): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000580)='syzkall\x1ar\x00\x88\xa3\xb4\xc2\xd8,\x0e\xc3\xff[\x1d9\xb1\xf2D\xb4g\x1f\xb0\xcd\x06\x9d\xc0\x10\x8c\xd3C\b\x00\xe6\xb8\xcen\xea\xbd\xb8\t\xccv\x8esV\x8c\x17\xa4f\xbe\xd2\xda\xc2\v\xce\x9eY[\x9a_k\xfbx\x91\xed\xdb\xbc\x86\xebf\xc2\x12_\x94\x0f\xacU\xbf\xb4\xc7:\xcd\a\xd0\x03\xe3\xba\xe4\xb5\x00\xc7\x89\xb3\x92$)\x01\xa7{\xf1^&oG\xde\x17X\xa2m/\x1c\xfdE\x1d\r\x03\x00\x00\x00\f8!\x1e\xcc\xbc\xe1\x8a\xe4\xbe\xc0\xca\xa3\xe2%\xffT\xfd_;\xda\x14GP\x92\x88\xb3\xb5\x97\xec\x84\xcel\x02qxD3\x98\xe5\f\x94k\xec\b0\x10\xfb\xbe\xd4^\xc2e\xfc[\xe3\x8chl\x19\\\xe8\xef\x98\xd6\xfeF\x00IsTT\xcb\x97\xa7\xc8\x8e\xb0\xbb\x7fx\xfe9S\xd8M>\x0e\x82\xe6+\xe2afl\x01\x04\rk\xb3^\x13^J\xdao\x84\x12\xb3\x13\xbb6\xd4fY\x94|M6\x97\x17\xdc\x1eiw\xcd\x00\xd3\xef\xc1e\x19w\xd4\x82t%\t\x14\xed\xd5%\xa3n\a\x00\x00\x00', &(0x7f00000000c0)='8\xbe\xf1\x95^\x9b b\x00\x00\x00\x00\x00\x00\x007\x9c\x93\xb4\xf1\xff\x9d\xccr\x8b\x8a\x12\x80\r\x97\xfa\x9d\x82\x91=+\r\xdf\xed\x82XH\x15\xf5\x98\xf7\x14', 0x0) close(r2) 463.183333ms ago: executing program 7 (id=4839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 433.925195ms ago: executing program 3 (id=4840): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xa7c, 0x7fffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1800, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 383.271209ms ago: executing program 7 (id=4841): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) 177.447615ms ago: executing program 3 (id=4842): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$inet6(0xa, 0x800, 0x10000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 176.684886ms ago: executing program 4 (id=4843): lremovexattr(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 116.523721ms ago: executing program 7 (id=4844): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 108.966071ms ago: executing program 1 (id=4845): r0 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r0, 0x0, 0x0) 106.952361ms ago: executing program 7 (id=4846): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 62.661725ms ago: executing program 1 (id=4847): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 0s ago: executing program 1 (id=4848): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x22c00) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[]) kernel console output (not intermixed with test programs): 017.050:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23b57f5ba7 code=0x7ffc0000 [ 96.820838][ T7953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.844188][ T29] audit: type=1326 audit(2000000017.050:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23b579add9 code=0x7ffc0000 [ 96.905907][ T29] audit: type=1326 audit(2000000017.050:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 96.929511][ T29] audit: type=1326 audit(2000000017.070:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23b57f5ba7 code=0x7ffc0000 [ 96.953033][ T29] audit: type=1326 audit(2000000017.070:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23b579add9 code=0x7ffc0000 [ 96.976446][ T29] audit: type=1326 audit(2000000017.070:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 97.000049][ T29] audit: type=1326 audit(2000000017.080:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23b57f5ba7 code=0x7ffc0000 [ 97.001182][ T7953] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 97.053440][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.060803][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.165443][ T8982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.180787][ T8982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.230333][ T8982] vxlan0: left promiscuous mode [ 97.246248][ T8999] netem: incorrect ge model size [ 97.251328][ T8999] netem: change failed [ 97.258168][ T4845] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.266630][ T4845] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.291402][ T4845] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.299938][ T4845] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.329048][ T4845] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.337544][ T4845] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.359639][ T4845] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.368155][ T4845] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.444058][ T9024] loop6: detected capacity change from 0 to 512 [ 97.501042][ T9024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.547494][ T9024] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.709987][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.752517][ T9059] netlink: 'syz.1.2207': attribute type 27 has an invalid length. [ 97.825000][ T9059] wg2: left promiscuous mode [ 97.829942][ T9059] wg2: left allmulticast mode [ 97.898130][ T9059] ip6tnl1: left promiscuous mode [ 97.903841][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2209'. [ 97.916378][ T31] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.925307][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.966621][ T9079] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2222'. [ 97.975464][ T31] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.984778][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.020315][ T31] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.029270][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.040744][ T31] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.049715][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.400914][ T9123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2235'. [ 98.410260][ T9123] netlink: 'syz.6.2235': attribute type 7 has an invalid length. [ 98.418147][ T9123] netlink: 'syz.6.2235': attribute type 8 has an invalid length. [ 98.425903][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2235'. [ 98.916948][ T9172] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.2254'. [ 98.926177][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2254'. [ 99.706311][ T9223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2279'. [ 99.781623][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 99.803209][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'. [ 99.864834][ T9209] Set syz1 is full, maxelem 65536 reached [ 99.901782][ T9238] loop6: detected capacity change from 0 to 128 [ 99.926720][ T9238] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.946003][ T9238] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.977171][ T9251] netlink: 'syz.4.2289': attribute type 27 has an invalid length. [ 100.007829][ T9238] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.111396][ T9272] sctp: [Deprecated]: syz.3.2293 (pid 9272) Use of int in max_burst socket option deprecated. [ 100.111396][ T9272] Use struct sctp_assoc_value instead [ 101.437313][ T9367] __nla_validate_parse: 5 callbacks suppressed [ 101.437333][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 101.453658][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2345'. [ 101.555433][ T9377] bridge0: port 1(macsec0) entered blocking state [ 101.562129][ T9377] bridge0: port 1(macsec0) entered disabled state [ 101.586389][ T9377] macsec0: entered allmulticast mode [ 101.591760][ T9377] bridge0: entered allmulticast mode [ 101.604608][ T9377] macsec0: left allmulticast mode [ 101.609951][ T9377] bridge0: left allmulticast mode [ 101.734842][ T9401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9401 comm=syz.4.2360 [ 101.815250][ T9403] rdma_op ffff8881047d6980 conn xmit_rdma 0000000000000000 [ 101.872682][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2370'. [ 101.901904][ T9422] x_tables: ip_tables: udp match: only valid for protocol 17 [ 101.993590][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 101.993623][ T29] audit: type=1326 audit(2000000022.320:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.027641][ T29] audit: type=1326 audit(2000000022.350:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.051117][ T29] audit: type=1326 audit(2000000022.350:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.074635][ T29] audit: type=1326 audit(2000000022.350:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.098159][ T29] audit: type=1326 audit(2000000022.350:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.121545][ T29] audit: type=1326 audit(2000000022.350:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.144962][ T29] audit: type=1326 audit(2000000022.350:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.168531][ T29] audit: type=1326 audit(2000000022.350:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.191929][ T29] audit: type=1326 audit(2000000022.350:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.215439][ T29] audit: type=1326 audit(2000000022.350:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 102.267439][ T9450] netlink: 'syz.1.2382': attribute type 2 has an invalid length. [ 102.275241][ T9450] netlink: 'syz.1.2382': attribute type 1 has an invalid length. [ 102.283034][ T9450] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2382'. [ 102.391903][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2390'. [ 102.412341][ T9465] x_tables: ip_tables: udp match: only valid for protocol 17 [ 102.618779][ T9514] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2412'. [ 102.967193][ T9547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2424'. [ 103.068877][ T9561] ip6gre1: entered allmulticast mode [ 103.276096][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2443'. [ 103.553936][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2452'. [ 103.722843][ T9633] loop0: detected capacity change from 0 to 1024 [ 104.363718][ T9682] loop0: detected capacity change from 0 to 128 [ 104.586029][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'. [ 104.607470][ T9710] team1: entered promiscuous mode [ 104.612553][ T9710] team1: entered allmulticast mode [ 104.761627][ T9727] netlink: 'syz.4.2497': attribute type 2 has an invalid length. [ 104.836092][ T9735] macvlan4: entered promiscuous mode [ 104.843283][ T9735] bond0: (slave macvlan4): Enslaving as an active interface with an up link [ 104.857006][ T9735] macvlan5: entered promiscuous mode [ 104.862623][ T9735] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 105.014269][ T9757] netlink: 'syz.1.2510': attribute type 5 has an invalid length. [ 105.350367][ T9795] geneve0: entered allmulticast mode [ 105.377911][ T9802] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000007 [ 105.513585][ T9819] loop0: detected capacity change from 0 to 1024 [ 105.524925][ T9819] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.531534][ T9819] EXT4-fs: Ignoring removed bh option [ 105.559231][ T9819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.664033][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.774735][ T9855] netlink: 'syz.0.2551': attribute type 2 has an invalid length. [ 105.861385][ T9872] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 105.878096][ T9872] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 106.033361][ T9885] netlink: 'syz.3.2564': attribute type 2 has an invalid length. [ 106.044627][ T9889] loop6: detected capacity change from 0 to 128 [ 106.059723][ T9889] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.088491][ T9889] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.142127][ T4842] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.434830][ T9917] macvlan2: entered promiscuous mode [ 106.443373][ T9917] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 106.471789][ T9917] macvlan3: entered promiscuous mode [ 106.484496][ T9917] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 106.507932][ T9915] geneve0: entered allmulticast mode [ 106.998120][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 106.998138][ T29] audit: type=1326 audit(2000000027.330:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd378e75ba7 code=0x7ffc0000 [ 107.027707][ T29] audit: type=1326 audit(2000000027.330:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd378e1add9 code=0x7ffc0000 [ 107.051136][ T29] audit: type=1326 audit(2000000027.330:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 107.074552][ T29] audit: type=1326 audit(2000000027.340:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd378e75ba7 code=0x7ffc0000 [ 107.097926][ T29] audit: type=1326 audit(2000000027.340:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd378e1add9 code=0x7ffc0000 [ 107.121307][ T29] audit: type=1326 audit(2000000027.340:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 107.144713][ T29] audit: type=1326 audit(2000000027.350:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd378e75ba7 code=0x7ffc0000 [ 107.168054][ T29] audit: type=1326 audit(2000000027.350:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd378e1add9 code=0x7ffc0000 [ 107.191422][ T29] audit: type=1326 audit(2000000027.350:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 107.217038][ T29] audit: type=1326 audit(2000000027.360:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd378e75ba7 code=0x7ffc0000 [ 108.308735][T10041] __nla_validate_parse: 10 callbacks suppressed [ 108.308753][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 108.324016][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 108.421852][T10053] tipc: Enabling of bearer rejected, already enabled [ 108.431315][T10053] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2635'. [ 108.653036][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2646'. [ 108.722594][T10085] tipc: Started in network mode [ 108.727587][T10085] tipc: Node identity ac14140f, cluster identity 4711 [ 108.734457][T10085] tipc: New replicast peer: 255.255.255.255 [ 108.740627][T10085] tipc: Enabled bearer , priority 10 [ 109.036020][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2654'. [ 109.114778][T10104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10104 comm=syz.3.2656 [ 109.178598][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2659'. [ 109.270623][T10102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2655'. [ 109.431277][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 109.474317][T10132] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2669'. [ 109.544639][T10144] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 109.544639][T10144] program syz.6.2673 not setting count and/or reply_len properly [ 109.672727][T10158] netlink: 'syz.6.2680': attribute type 4 has an invalid length. [ 109.680619][T10158] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2680'. [ 109.816853][ T2955] tipc: Node number set to 2886997007 [ 110.071201][T10194] syzkaller1: entered promiscuous mode [ 110.077309][T10194] syzkaller1: entered allmulticast mode [ 110.207162][T10206] sctp: [Deprecated]: syz.0.2700 (pid 10206) Use of int in max_burst socket option deprecated. [ 110.207162][T10206] Use struct sctp_assoc_value instead [ 110.919118][T10255] sd 0:0:1:0: device reset [ 111.236676][T10283] netlink: zone id is out of range [ 111.241852][T10283] netlink: zone id is out of range [ 111.247102][T10283] netlink: del zone limit has 8 unknown bytes [ 111.275592][T10289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10289 comm=syz.3.2734 [ 111.499345][T10308] ip6tnl1: entered promiscuous mode [ 111.504624][T10308] ip6tnl1: entered allmulticast mode [ 111.669668][T10318] loop0: detected capacity change from 0 to 8192 [ 111.760194][T10323] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.848370][T10323] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.922924][T10323] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.964291][T10323] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.069401][ T4842] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.096354][ T4845] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.155857][ T4845] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.186319][ T4845] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.475225][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 112.475310][ T29] audit: type=1400 audit(2000000032.800:3486): avc: denied { create } for pid=10388 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 112.579068][T10396] pim6reg: entered allmulticast mode [ 112.600312][T10396] pim6reg: left allmulticast mode [ 112.815819][ T29] audit: type=1326 audit(2000000033.140:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.3.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 112.839506][ T29] audit: type=1326 audit(2000000033.140:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.3.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 112.863340][ T29] audit: type=1326 audit(2000000033.140:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.3.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 112.891315][ T29] audit: type=1326 audit(2000000033.200:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.3.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 112.914928][ T29] audit: type=1326 audit(2000000033.220:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.3.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 112.938513][ T29] audit: type=1326 audit(2000000033.220:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.3.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 112.962070][ T29] audit: type=1326 audit(2000000033.220:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.3.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 113.115498][ T29] audit: type=1400 audit(2000000033.440:3494): avc: denied { mount } for pid=10429 comm="syz.4.2798" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.138291][ T29] audit: type=1400 audit(2000000033.440:3495): avc: denied { search } for pid=10429 comm="syz.4.2798" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 113.730427][T10444] bridge: RTM_NEWNEIGH with invalid ether address [ 113.756919][T10443] __nla_validate_parse: 10 callbacks suppressed [ 113.756937][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2805'. [ 113.893532][T10471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2816'. [ 113.946384][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2817'. [ 113.981278][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 114.131035][T10481] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2819'. [ 115.217920][T10533] Set syz1 is full, maxelem 65536 reached [ 115.385398][T10573] netlink: 'syz.0.2856': attribute type 39 has an invalid length. [ 115.424513][T10576] tipc: Started in network mode [ 115.429489][T10576] tipc: Node identity ac14140f, cluster identity 4711 [ 115.438158][T10577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10577 comm=syz.1.2860 [ 115.450827][T10577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10577 comm=syz.1.2860 [ 115.462639][T10576] tipc: New replicast peer: 255.28.0.84 [ 115.469061][T10576] tipc: Enabled bearer , priority 10 [ 115.559593][T10585] bridge: RTM_NEWNEIGH with invalid ether address [ 115.634311][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2869'. [ 115.672516][T10596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.691148][T10596] vlan0: entered allmulticast mode [ 115.696377][T10596] bond0: entered allmulticast mode [ 115.959432][T10624] tipc: Disabling bearer [ 116.019770][T10628] loop0: detected capacity change from 0 to 512 [ 116.077534][T10628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.112997][T10628] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.133444][T10628] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2883: bg 0: block 217: padding at end of block bitmap is not set [ 116.155480][T10638] netlink: 'syz.6.2886': attribute type 27 has an invalid length. [ 116.185502][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.243768][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.251061][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.480665][T10638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.524794][T10652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2891'. [ 116.534332][T10652] unsupported nlmsg_type 40 [ 116.542436][T10638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.590617][ T7953] tipc: Node number set to 2886997007 [ 116.743868][T10643] Set syz1 is full, maxelem 65536 reached [ 116.752034][ T4842] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.769383][ T4842] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.808479][ T4842] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.843113][ T4842] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.216640][T10681] syzkaller0: entered allmulticast mode [ 117.222536][T10681] syzkaller0: entered promiscuous mode [ 117.229443][T10681] syzkaller0 (unregistering): left allmulticast mode [ 117.236223][T10681] syzkaller0 (unregistering): left promiscuous mode [ 117.381861][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2907'. [ 117.390824][T10698] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 117.442435][T10705] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2914'. [ 117.485553][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2915'. [ 117.486130][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 117.486321][ T29] audit: type=1400 audit(2000000037.810:3611): avc: denied { read } for pid=10709 comm="syz.4.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.547679][ T29] audit: type=1326 audit(2000000037.880:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.1.2917" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c80c8ebe9 code=0x0 [ 117.594480][ T29] audit: type=1326 audit(2000000037.880:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 117.618184][ T29] audit: type=1326 audit(2000000037.880:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 117.641776][ T29] audit: type=1326 audit(2000000037.880:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 117.665280][ T29] audit: type=1326 audit(2000000037.880:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 117.688788][ T29] audit: type=1326 audit(2000000037.880:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 117.712364][ T29] audit: type=1326 audit(2000000037.880:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 117.735949][ T29] audit: type=1326 audit(2000000037.880:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 117.759492][ T29] audit: type=1326 audit(2000000037.880:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.0.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23b57febe9 code=0x7ffc0000 [ 117.842756][T10730] ip6gre1: entered allmulticast mode [ 117.871529][T10732] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 117.982709][T10738] loop0: detected capacity change from 0 to 128 [ 117.991260][T10738] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.003885][T10738] ext4 filesystem being mounted at /606/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.033213][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.052505][T10741] loop0: detected capacity change from 0 to 512 [ 118.059836][T10741] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.069775][T10741] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 118.080158][T10741] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.2930: inode #15: comm syz.0.2930: iget: illegal inode # [ 118.093302][T10741] EXT4-fs (loop0): Remounting filesystem read-only [ 118.100310][T10741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.125136][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.298373][T10755] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10755 comm=syz.0.2935 [ 118.688460][T10776] cgroup: Unknown subsys name 'cpuset' [ 118.780383][T10785] loop6: detected capacity change from 0 to 1024 [ 118.812443][T10785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.878219][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.964833][T10801] __nla_validate_parse: 2 callbacks suppressed [ 118.964849][T10801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2953'. [ 119.480495][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.507017][T10822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.663623][T10832] ip6gre1: entered allmulticast mode [ 119.865696][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'. [ 120.236343][T10858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10858 comm=syz.4.2978 [ 120.249165][T10858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10858 comm=syz.4.2978 [ 120.508363][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 120.534088][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 120.576632][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 120.594158][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 120.605063][T10880] usb usb8: usbfs: process 10880 (syz.0.2986) did not claim interface 0 before use [ 120.616592][T10884] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2991'. [ 120.653013][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2991'. [ 120.684839][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 120.696038][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 120.981718][T10928] vlan2: entered allmulticast mode [ 120.987113][T10928] : entered allmulticast mode [ 122.240820][T11050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.329182][T11055] ip6gre2: entered allmulticast mode [ 122.358752][T11057] loop0: detected capacity change from 0 to 512 [ 122.367074][T11057] EXT4-fs (loop0): orphan cleanup on readonly fs [ 122.382744][T11057] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3064: bad orphan inode 13 [ 122.394388][T11057] ext4_test_bit(bit=12, block=18) = 1 [ 122.399976][T11057] is_bad_inode(inode)=0 [ 122.404179][T11057] NEXT_ORPHAN(inode)=2130706432 [ 122.409085][T11057] max_ino=32 [ 122.412293][T11057] i_nlink=1 [ 122.418637][T11057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.467092][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.714898][T11074] vlan3: entered allmulticast mode [ 122.720215][T11074] bond0: entered allmulticast mode [ 122.725427][T11074] bond_slave_0: entered allmulticast mode [ 122.731217][T11074] vlan2: entered allmulticast mode [ 122.736364][T11074] team0: entered allmulticast mode [ 122.741544][T11074] C: entered allmulticast mode [ 122.746552][T11074] team_slave_1: entered allmulticast mode [ 122.752433][T11074] dummy0: entered allmulticast mode [ 122.757715][T11074] macvlan4: entered allmulticast mode [ 122.763289][T11074] veth1_vlan: entered allmulticast mode [ 122.886099][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 122.892398][ T29] audit: type=1326 audit(2000000555.211:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 122.933660][ T29] audit: type=1326 audit(2000000555.251:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 122.957330][ T29] audit: type=1326 audit(2000000555.251:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 122.980873][ T29] audit: type=1326 audit(2000000555.251:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 123.004371][ T29] audit: type=1326 audit(2000000555.251:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 123.028007][ T29] audit: type=1326 audit(2000000555.251:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd378e75ba7 code=0x7ffc0000 [ 123.051441][ T29] audit: type=1326 audit(2000000555.251:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd378e1add9 code=0x7ffc0000 [ 123.074953][ T29] audit: type=1326 audit(2000000555.251:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd378e75ba7 code=0x7ffc0000 [ 123.098380][ T29] audit: type=1326 audit(2000000555.251:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd378e1add9 code=0x7ffc0000 [ 123.121852][ T29] audit: type=1326 audit(2000000555.251:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd378e75ba7 code=0x7ffc0000 [ 123.742332][ T4860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.752877][ T4860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.903798][ T4860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.914215][ T4860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.019075][T11173] ip6gre1: entered allmulticast mode [ 124.030781][T11179] netem: change failed [ 124.068697][ T4860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.079049][ T4860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.185014][ T4860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.195594][ T4860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.354560][T11162] chnl_net:caif_netlink_parms(): no params data found [ 124.391425][T11203] __nla_validate_parse: 10 callbacks suppressed [ 124.391444][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3118'. [ 124.652656][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3128'. [ 124.808776][ T4860]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.818348][ T4860]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.828842][ T4860]  (unregistering): Released all slaves [ 124.837209][ T4860] bond1 (unregistering): Released all slaves [ 124.845814][ T4860] bond0 (unregistering): Released all slaves [ 124.877209][T11217] vxlan0: entered promiscuous mode [ 124.898478][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.905584][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.913009][T11162] bridge_slave_0: entered allmulticast mode [ 124.921788][T11162] bridge_slave_0: entered promiscuous mode [ 124.929559][T11162] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.936721][T11162] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.944312][T11162] bridge_slave_1: entered allmulticast mode [ 124.951062][T11162] bridge_slave_1: entered promiscuous mode [ 124.957556][ T4885] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.966728][ T4860] tipc: Left network mode [ 124.971562][ T4885] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.994444][T11162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.003642][ T4885] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.014426][ T4860] hsr_slave_0: left promiscuous mode [ 125.020417][ T4860] hsr_slave_1: left promiscuous mode [ 125.028976][ T4860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.036479][ T4860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.102539][ T4860] team0 (unregistering): Port device team_slave_1 removed [ 125.112379][ T4860] team0 (unregistering): Port device team_slave_0 removed [ 125.139131][ T4860] team0 (unregistering): Port device dummy0 removed [ 125.154644][T11162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.163868][ T4885] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.204295][T11162] team0: Port device team_slave_0 added [ 125.224346][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'. [ 125.225040][T11162] team0: Port device team_slave_1 added [ 125.233444][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'. [ 125.269430][T11162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.276482][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.302493][T11162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.320357][T11162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.327441][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.353520][T11162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.386743][T11162] hsr_slave_0: entered promiscuous mode [ 125.392911][T11162] hsr_slave_1: entered promiscuous mode [ 125.398823][T11162] debugfs: 'hsr0' already exists in 'hsr' [ 125.404564][T11162] Cannot create hsr debugfs directory [ 125.540138][ T4860] ------------[ cut here ]------------ [ 125.545738][ T4860] WARNING: CPU: 1 PID: 4860 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 125.555420][ T4860] Modules linked in: [ 125.559408][ T4860] CPU: 1 UID: 0 PID: 4860 Comm: kworker/u8:34 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 125.571865][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.582170][ T4860] Workqueue: netns cleanup_net [ 125.587119][ T4860] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 125.592737][ T4860] Code: 48 8d bb 30 0e 00 00 e8 72 3f bd fc 48 8b bb 30 0e 00 00 e8 a6 bf c9 fc 5b 41 5e 41 5f 5d e9 9b 92 b3 00 cc e8 f5 81 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 e7 81 a2 fc 90 0f 0b 90 4c 89 f7 e8 3b [ 125.612434][ T4860] RSP: 0018:ffffc9001049bc60 EFLAGS: 00010293 [ 125.618621][ T4860] RAX: ffffffff84b577cb RBX: ffff888109812f80 RCX: ffff88811a1b0000 [ 125.626695][ T4860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109813d80 [ 125.634747][ T4860] RBP: ffffffff86c8a4a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 125.642853][ T4860] R10: ffffc9001049bbe8 R11: 0001c9001049bbe8 R12: ffffffff86c8a4c0 [ 125.650929][ T4860] R13: ffff888109812fa8 R14: ffff888109813d80 R15: ffff888109812f80 [ 125.659076][ T4860] FS: 0000000000000000(0000) GS:ffff8882aef47000(0000) knlGS:0000000000000000 [ 125.668060][ T4860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.674734][ T4860] CR2: 0000200000002240 CR3: 00000001046fc000 CR4: 00000000003506f0 [ 125.682805][ T4860] Call Trace: [ 125.686092][ T4860] [ 125.689093][ T4860] xfrm_net_exit+0x2d/0x60 [ 125.693686][ T4860] ops_undo_list+0x27b/0x410 [ 125.698381][ T4860] cleanup_net+0x2de/0x4d0 [ 125.702941][ T4860] process_scheduled_works+0x4ce/0x9d0 [ 125.708629][ T4860] worker_thread+0x582/0x770 [ 125.713314][ T4860] kthread+0x486/0x510 [ 125.717427][ T4860] ? finish_task_switch+0xad/0x2b0 [ 125.722606][ T4860] ? __pfx_worker_thread+0x10/0x10 [ 125.727804][ T4860] ? __pfx_kthread+0x10/0x10 [ 125.732416][ T4860] ret_from_fork+0xda/0x150 [ 125.736961][ T4860] ? __pfx_kthread+0x10/0x10 [ 125.741584][ T4860] ret_from_fork_asm+0x1a/0x30 [ 125.746470][ T4860] [ 125.749610][ T4860] ---[ end trace 0000000000000000 ]--- [ 125.969252][T11162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.989141][T11162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.027823][T11162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.058689][T11162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.278720][T11162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.294571][T11162] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.307210][T11313] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3171'. [ 126.325970][T11313] hsr_slave_0: left promiscuous mode [ 126.336333][T11313] hsr_slave_1: left promiscuous mode [ 126.361134][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.368267][ T4885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.405871][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.413027][ T4885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.469087][T11328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11328 comm=syz.6.3178 [ 126.530034][T11162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.659522][T11356] loop6: detected capacity change from 0 to 512 [ 126.700457][T11356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.730196][T11356] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.731099][T11162] veth0_vlan: entered promiscuous mode [ 126.827787][T11162] veth1_vlan: entered promiscuous mode [ 126.855722][T11363] tipc: Started in network mode [ 126.860726][T11363] tipc: Node identity ac141413, cluster identity 4711 [ 126.870383][T11363] tipc: New replicast peer: 10.1.1.2 [ 126.875868][T11363] tipc: Enabled bearer , priority 10 [ 126.884723][T11162] veth0_macvtap: entered promiscuous mode [ 126.894760][T11162] veth1_macvtap: entered promiscuous mode [ 126.916306][T11162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.930864][T11162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.943898][ T4860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.960670][ T4860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.978873][ T4866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.999240][ T4866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.037072][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.278285][T11411] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 127.876341][ T3382] tipc: Node number set to 2886997011 [ 127.939195][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 127.939213][ T29] audit: type=1400 audit(2000000560.271:3878): avc: denied { bind } for pid=11470 comm="syz.0.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.989549][T11475] loop0: detected capacity change from 0 to 164 [ 127.996853][T11475] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 128.006084][T11475] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 128.040250][ T29] audit: type=1326 audit(2000000560.361:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.063878][ T29] audit: type=1326 audit(2000000560.361:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.087507][ T29] audit: type=1326 audit(2000000560.371:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.111246][ T29] audit: type=1326 audit(2000000560.371:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.119204][T11475] Symlink component flag not implemented [ 128.134855][ T29] audit: type=1326 audit(2000000560.371:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.134896][ T29] audit: type=1326 audit(2000000560.371:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.140579][T11475] Symlink component flag not implemented [ 128.142392][T11475] Symlink component flag not implemented (7) [ 128.164265][ T29] audit: type=1326 audit(2000000560.371:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.187832][T11475] Symlink component flag not implemented (116) [ 128.193476][ T29] audit: type=1326 audit(2000000560.371:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.252957][ T29] audit: type=1326 audit(2000000560.371:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.3.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 128.484909][T11521] 9pnet_fd: Insufficient options for proto=fd [ 128.635395][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3266'. [ 129.359121][T11638] netlink: '+}[@': attribute type 1 has an invalid length. [ 129.366473][T11638] netlink: 198116 bytes leftover after parsing attributes in process `+}[@'. [ 129.778667][T11664] loop0: detected capacity change from 0 to 256 [ 129.792870][T11664] FAT-fs (loop0): Directory bread(block 64) failed [ 129.801240][T11664] FAT-fs (loop0): Directory bread(block 65) failed [ 129.808088][T11664] FAT-fs (loop0): Directory bread(block 66) failed [ 129.815100][T11664] FAT-fs (loop0): Directory bread(block 67) failed [ 129.821826][T11664] FAT-fs (loop0): Directory bread(block 68) failed [ 129.828610][T11664] FAT-fs (loop0): Directory bread(block 69) failed [ 129.835166][T11664] FAT-fs (loop0): Directory bread(block 70) failed [ 129.841809][T11664] FAT-fs (loop0): Directory bread(block 71) failed [ 129.848428][T11664] FAT-fs (loop0): Directory bread(block 72) failed [ 129.854969][T11664] FAT-fs (loop0): Directory bread(block 73) failed [ 129.936252][T11664] loop0: detected capacity change from 256 to 0 [ 129.940642][T11667] syz.0.3312: attempt to access beyond end of device [ 129.940642][T11667] loop0: rw=0, sector=4, nr_sectors = 4 limit=0 [ 129.974171][T11162] syz-executor: attempt to access beyond end of device [ 129.974171][T11162] loop0: rw=0, sector=20, nr_sectors = 4 limit=0 [ 129.987834][T11162] syz-executor: attempt to access beyond end of device [ 129.987834][T11162] loop0: rw=0, sector=24, nr_sectors = 4 limit=0 [ 130.001204][T11162] syz-executor: attempt to access beyond end of device [ 130.001204][T11162] loop0: rw=0, sector=28, nr_sectors = 4 limit=0 [ 130.014635][T11162] syz-executor: attempt to access beyond end of device [ 130.014635][T11162] loop0: rw=0, sector=32, nr_sectors = 4 limit=0 [ 130.028133][T11162] syz-executor: attempt to access beyond end of device [ 130.028133][T11162] loop0: rw=0, sector=36, nr_sectors = 4 limit=0 [ 130.041613][T11162] syz-executor: attempt to access beyond end of device [ 130.041613][T11162] loop0: rw=0, sector=40, nr_sectors = 4 limit=0 [ 130.054886][T11162] syz-executor: attempt to access beyond end of device [ 130.054886][T11162] loop0: rw=0, sector=44, nr_sectors = 4 limit=0 [ 130.069889][T11162] syz-executor: attempt to access beyond end of device [ 130.069889][T11162] loop0: rw=0, sector=48, nr_sectors = 4 limit=0 [ 130.083254][T11162] syz-executor: attempt to access beyond end of device [ 130.083254][T11162] loop0: rw=0, sector=52, nr_sectors = 4 limit=0 [ 130.122006][ T4473] FAT-fs (loop0): unable to read inode block for updating (i_pos 327) [ 130.130679][T11162] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 130.245273][T11681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3323'. [ 130.367779][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3330'. [ 130.411776][T11701] loop6: detected capacity change from 0 to 512 [ 130.429106][T11701] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 130.440152][T11701] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.3333: iget: bad i_size value: 12154757448730 [ 130.453301][T11701] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3333: couldn't read orphan inode 13 (err -117) [ 130.466258][T11701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.482392][T11701] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 130.526653][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.564870][ T4885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.629493][ T4885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.679108][ T4885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.730002][ T4885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.782132][ T4885] bridge_slave_1: left allmulticast mode [ 130.787893][ T4885] bridge_slave_1: left promiscuous mode [ 130.793608][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.801562][ T4885] bridge_slave_0: left allmulticast mode [ 130.807360][ T4885] bridge_slave_0: left promiscuous mode [ 130.813071][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.908622][ T4885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.919052][ T4885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.928671][ T4885] bond0 (unregistering): Released all slaves [ 130.962286][ T4885] hsr_slave_0: left promiscuous mode [ 130.969250][ T4885] hsr_slave_1: left promiscuous mode [ 130.974855][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.982253][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.990117][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.997545][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.007513][ T4885] veth1_macvtap: left promiscuous mode [ 131.013024][ T4885] veth0_macvtap: left promiscuous mode [ 131.018675][ T4885] veth1_vlan: left promiscuous mode [ 131.023973][ T4885] veth0_vlan: left promiscuous mode [ 131.092742][ T4885] team0 (unregistering): Port device team_slave_1 removed [ 131.102991][ T4885] team0 (unregistering): Port device team_slave_0 removed [ 131.164541][T11711] chnl_net:caif_netlink_parms(): no params data found [ 131.257635][T11711] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.264804][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.278353][T11711] bridge_slave_0: entered allmulticast mode [ 131.292910][T11711] bridge_slave_0: entered promiscuous mode [ 131.307136][T11711] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.314356][T11711] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.321971][T11711] bridge_slave_1: entered allmulticast mode [ 131.329061][T11711] bridge_slave_1: entered promiscuous mode [ 131.352062][T11711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.362819][T11711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.386379][T11711] team0: Port device team_slave_0 added [ 131.393262][T11711] team0: Port device team_slave_1 added [ 131.410715][T11711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.417762][T11711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.444020][T11711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.457119][T11711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.464103][T11711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.490068][T11711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.570370][T11711] hsr_slave_0: entered promiscuous mode [ 131.583077][T11711] hsr_slave_1: entered promiscuous mode [ 131.603576][T11711] debugfs: 'hsr0' already exists in 'hsr' [ 131.609541][T11711] Cannot create hsr debugfs directory [ 131.871518][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3358'. [ 132.010029][T11711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.018992][T11711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.042410][T11711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.054092][T11711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.068949][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'. [ 132.091772][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3366'. [ 132.158003][T11711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.174462][T11711] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.202357][ T4866] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.209560][ T4866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.236546][T11810] IPVS: Error connecting to the multicast addr [ 132.254134][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.261333][ T4866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.346577][T11711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.421977][T11828] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3378'. [ 132.582738][T11711] veth0_vlan: entered promiscuous mode [ 132.594229][T11841] loop6: detected capacity change from 0 to 512 [ 132.609256][T11711] veth1_vlan: entered promiscuous mode [ 132.626748][T11841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.648231][T11711] veth0_macvtap: entered promiscuous mode [ 132.655838][T11711] veth1_macvtap: entered promiscuous mode [ 132.667488][T11711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.686709][T11711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.701419][ T4857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.727975][ T4857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.737319][ T4885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.770537][ T4885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.779879][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.089948][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3397'. [ 133.134604][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'. [ 134.620179][T11987] netlink: 'syz.0.3443': attribute type 13 has an invalid length. [ 134.717152][T11987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.890983][T12015] netlink: 'syz.1.3455': attribute type 1 has an invalid length. [ 134.898975][T12015] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.3455'. [ 134.946780][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 134.946796][ T29] audit: type=1326 audit(2000000567.281:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.3.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 134.976542][ T29] audit: type=1326 audit(2000000567.281:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.3.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.059249][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3460'. [ 135.064236][ T29] audit: type=1326 audit(2000000567.331:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.3.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.091773][ T29] audit: type=1326 audit(2000000567.331:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.3.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.115506][ T29] audit: type=1326 audit(2000000567.331:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.3.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.216565][T12029] bridge1: entered allmulticast mode [ 135.263336][ T29] audit: type=1326 audit(2000000567.591:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.287084][ T29] audit: type=1326 audit(2000000567.591:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.313446][ T29] audit: type=1326 audit(2000000567.601:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.337005][ T29] audit: type=1326 audit(2000000567.601:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.360611][ T29] audit: type=1326 audit(2000000567.601:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.3.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 135.509607][T12057] loop0: detected capacity change from 0 to 512 [ 135.521160][T12057] EXT4-fs: Ignoring removed oldalloc option [ 135.527225][T12057] EXT4-fs: inline encryption not supported [ 135.533221][T12057] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.543659][T12057] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.565031][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3479'. [ 135.598414][T12068] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 135.599662][T12057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3473: bg 0: block 64: padding at end of block bitmap is not set [ 135.650503][T12057] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3473: Failed to acquire dquot type 0 [ 135.669159][T12057] EXT4-fs (loop0): 1 truncate cleaned up [ 135.678312][T12057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.695986][T12088] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 135.718444][T11711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.050983][T12125] netlink: 'syz.1.3503': attribute type 13 has an invalid length. [ 136.099565][T12125] 8021q: adding VLAN 0 to HW filter on device  [ 136.109786][T12125] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.123628][T12125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.379340][T12139] netlink: 'syz.3.3509': attribute type 10 has an invalid length. [ 136.387655][T12139] team0: Device hsr_slave_0 failed to register rx_handler [ 136.507638][T12149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12149 comm=syz.3.3514 [ 136.541527][T12151] netlink: 'syz.3.3515': attribute type 13 has an invalid length. [ 136.572776][T12151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.611573][T12151] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.643203][T12151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.988407][T12181] blktrace: Concurrent blktraces are not allowed on loop3 [ 137.019846][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'. [ 137.029687][T12187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3530'. [ 137.209463][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3542'. [ 137.550471][T12234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3553'. [ 137.595011][T12234] sch_tbf: burst 88 is lower than device veth21 mtu (1514) ! [ 137.649744][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3559'. [ 137.824520][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3570'. [ 137.867972][T12273] syz_tun: entered allmulticast mode [ 137.873519][T12269] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 137.943699][T12285] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 137.965798][T12285] SELinux: failed to load policy [ 138.058673][T12282] syzkaller0: entered promiscuous mode [ 138.064266][T12282] syzkaller0: entered allmulticast mode [ 138.123987][T12306] netlink: 'syz.0.3586': attribute type 7 has an invalid length. [ 138.131831][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3586'. [ 138.230141][T12318] syz_tun: entered allmulticast mode [ 138.272313][T12320] bond_slave_1: mtu less than device minimum [ 138.615132][T12346] 8021q: VLANs not supported on gre0 [ 138.633015][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3603'. [ 138.649579][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.663600][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.681702][T12348] syz_tun: entered allmulticast mode [ 139.363504][T12386] loop0: detected capacity change from 0 to 512 [ 139.380318][T12386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 139.398187][T12386] System zones: 1-12 [ 139.407132][T12386] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3623: error while reading EA inode 32 err=-116 [ 139.431905][T12386] EXT4-fs (loop0): Remounting filesystem read-only [ 139.438513][T12386] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 139.469278][T12386] EXT4-fs (loop0): 1 orphan inode deleted [ 139.477369][T12386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.640868][T12399] netlink: 'syz.3.3627': attribute type 1 has an invalid length. [ 139.648720][T12399] netlink: 'syz.3.3627': attribute type 4 has an invalid length. [ 139.656543][T12399] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3627'. [ 139.667864][T12399] netlink: 'syz.3.3627': attribute type 1 has an invalid length. [ 139.675644][T12399] netlink: 'syz.3.3627': attribute type 4 has an invalid length. [ 140.191441][T11711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.333324][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 140.333345][ T29] audit: type=1326 audit(2000000572.651:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 140.363166][ T29] audit: type=1326 audit(2000000572.651:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 140.386795][ T29] audit: type=1326 audit(2000000572.651:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 140.410664][ T29] audit: type=1326 audit(2000000572.651:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 140.434237][ T29] audit: type=1326 audit(2000000572.651:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 140.457863][ T29] audit: type=1326 audit(2000000572.661:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 140.481399][ T29] audit: type=1326 audit(2000000572.661:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 140.661457][ T29] audit: type=1326 audit(2000000572.991:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 140.685146][ T29] audit: type=1326 audit(2000000572.991:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 140.708868][ T29] audit: type=1326 audit(2000000572.991:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 140.814977][T12458] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12458 comm=syz.1.3649 [ 140.827754][T12458] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12458 comm=syz.1.3649 [ 140.955218][T12473] __nla_validate_parse: 2 callbacks suppressed [ 140.955262][T12473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3657'. [ 141.165513][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 141.175148][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 141.184409][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 141.193598][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 141.504151][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3678'. [ 141.536203][T12522] bond3: left allmulticast mode [ 141.541135][T12522] bond3: left promiscuous mode [ 141.546081][T12522] bridge0: port 4(bond3) entered disabled state [ 141.583947][T12522] batadv1: left allmulticast mode [ 141.589095][T12522] batadv1: left promiscuous mode [ 141.594190][T12522] bridge0: port 3(batadv1) entered disabled state [ 141.631593][T12522] bridge_slave_1: left allmulticast mode [ 141.637359][T12522] bridge_slave_1: left promiscuous mode [ 141.643073][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.687202][T12522] bridge_slave_0: left allmulticast mode [ 141.693000][T12522] bridge_slave_0: left promiscuous mode [ 141.698748][T12522] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.865276][T12531] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 142.530914][T12590] syzkaller0: entered promiscuous mode [ 142.536565][T12590] syzkaller0: entered allmulticast mode [ 143.060183][T12638] netlink: 'syz.6.3729': attribute type 13 has an invalid length. [ 143.107863][ T2652] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.136460][ T2652] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.144918][ T2652] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.153421][ T2652] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.587675][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3736'. [ 143.654722][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3737'. [ 143.663796][T12661] bridge_slave_1: left allmulticast mode [ 143.669579][T12661] bridge_slave_1: left promiscuous mode [ 143.675500][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.691799][T12661] bridge_slave_0: left allmulticast mode [ 143.697578][T12661] bridge_slave_0: left promiscuous mode [ 143.703397][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.161864][T12710] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 144.705358][T12731] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3768'. [ 145.374157][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3772'. [ 145.385381][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 145.385395][ T29] audit: type=1326 audit(2000000577.711:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.444904][ T29] audit: type=1326 audit(2000000577.741:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.468701][ T29] audit: type=1326 audit(2000000577.741:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.492570][ T29] audit: type=1326 audit(2000000577.741:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.516184][ T29] audit: type=1326 audit(2000000577.751:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.539737][ T29] audit: type=1326 audit(2000000577.751:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.563386][ T29] audit: type=1326 audit(2000000577.751:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.587004][ T29] audit: type=1326 audit(2000000577.751:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.610588][ T29] audit: type=1326 audit(2000000577.751:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 145.634155][ T29] audit: type=1326 audit(2000000577.751:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.1.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3c80c8ebe9 code=0x7ffc0000 [ 146.142763][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3796'. [ 146.151918][T12800] netlink: 'syz.6.3796': attribute type 19 has an invalid length. [ 146.167599][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3796'. [ 146.176672][T12800] netlink: 'syz.6.3796': attribute type 19 has an invalid length. [ 146.263085][T12813] netlink: 'syz.0.3802': attribute type 1 has an invalid length. [ 146.297127][T12813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.320285][T12821] vlan2: entered allmulticast mode [ 146.325541][T12821] bond1: entered allmulticast mode [ 146.556794][T12837] netlink: zone id is out of range [ 146.614664][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3812'. [ 146.893391][T12857] geneve2: entered promiscuous mode [ 146.898730][T12857] geneve2: entered allmulticast mode [ 146.960247][T12861] loop0: detected capacity change from 0 to 2048 [ 146.998817][T12861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.141904][T11711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.577502][T12929] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3848'. [ 147.776925][T12955] netlink: 'syz.4.3860': attribute type 3 has an invalid length. [ 147.929447][T12969] tipc: Enabling of bearer rejected, failed to enable media [ 147.992239][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3870'. [ 148.067522][T12986] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 148.137793][T12997] 9pnet: p9_errstr2errno: server reported unknown error @c0xffffffffffffffff [ 148.284088][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3884'. [ 148.391680][T13023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3891'. [ 148.429943][T13023] netlink: 5448 bytes leftover after parsing attributes in process `syz.4.3891'. [ 148.654949][T13047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13047 comm=syz.3.3901 [ 148.761326][T13061] netlink: 'syz.4.3909': attribute type 13 has an invalid length. [ 148.792619][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3910'. [ 148.801806][T13061] veth1_vlan: left allmulticast mode [ 148.820124][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3910'. [ 149.501704][T13128] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.837587][T13156] tipc: Enabling of bearer rejected, failed to enable media [ 149.966136][T13163] C: renamed from team_slave_0 [ 149.981314][T13163] netlink: 'syz.6.3956': attribute type 1 has an invalid length. [ 149.989124][T13163] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.033413][T13169] netlink: 'syz.6.3958': attribute type 1 has an invalid length. [ 150.050036][T13169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.067375][T13169] vlan2: entered allmulticast mode [ 150.072550][T13169] bond1: entered allmulticast mode [ 150.168911][T13179] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 150.234893][T13188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13188 comm=syz.3.3963 [ 150.419159][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 150.419173][ T29] audit: type=1400 audit(2000000582.751:4754): avc: denied { map } for pid=13201 comm="syz.3.3972" path="socket:[39024]" dev="sockfs" ino=39024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.448834][ T29] audit: type=1400 audit(2000000582.751:4755): avc: denied { read accept } for pid=13201 comm="syz.3.3972" path="socket:[39024]" dev="sockfs" ino=39024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.613574][T13206] loop0: detected capacity change from 0 to 8192 [ 150.877335][T13233] veth0: entered promiscuous mode [ 151.219281][ T29] audit: type=1326 audit(2000000583.541:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.0.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4050ebe9 code=0x7ffc0000 [ 151.242891][ T29] audit: type=1326 audit(2000000583.541:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.0.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4050ebe9 code=0x7ffc0000 [ 151.266525][ T29] audit: type=1326 audit(2000000583.541:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.0.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd4050ebe9 code=0x7ffc0000 [ 151.290148][ T29] audit: type=1326 audit(2000000583.541:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.0.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4050ebe9 code=0x7ffc0000 [ 151.313755][ T29] audit: type=1326 audit(2000000583.541:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.0.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd4050ebe9 code=0x7ffc0000 [ 151.348533][ T29] audit: type=1326 audit(2000000583.601:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.0.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4050ebe9 code=0x7ffc0000 [ 151.372294][ T29] audit: type=1326 audit(2000000583.601:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.0.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4050ebe9 code=0x7ffc0000 [ 151.395833][ T29] audit: type=1326 audit(2000000583.671:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.0.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcd4050ebe9 code=0x7ffc0000 [ 151.978608][T13305] IPVS: Error connecting to the multicast addr [ 152.028965][T13308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13308 comm=syz.6.4020 [ 152.338705][T13321] __nla_validate_parse: 5 callbacks suppressed [ 152.338727][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4026'. [ 153.107011][T13412] netlink: 'syz.4.4051': attribute type 29 has an invalid length. [ 153.138857][T13412] netlink: 'syz.4.4051': attribute type 29 has an invalid length. [ 153.157360][T13412] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4051'. [ 153.231034][T13424] netlink: 'syz.4.4054': attribute type 1 has an invalid length. [ 153.266722][T13424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.361233][T13424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.392192][T13424] bond2: (slave batadv0): making interface the new active one [ 153.487687][T13424] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 153.589350][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'. [ 153.607236][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4058'. [ 153.691738][T13477] netlink: 'syz.4.4062': attribute type 3 has an invalid length. [ 153.740336][T13480] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4063'. [ 154.129079][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 154.140341][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 154.733274][T13548] ip6gre2: entered allmulticast mode [ 154.816290][T13552] netlink: 'syz.3.4093': attribute type 10 has an invalid length. [ 154.824190][T13552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4093'. [ 154.861677][T13552] dummy0: entered promiscuous mode [ 155.525170][T13609] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4119'. [ 155.577114][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4121'. [ 155.858477][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 155.858495][ T29] audit: type=1400 audit(2000000588.191:4876): avc: denied { map } for pid=13630 comm="syz.0.4129" path="/143/file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 156.158647][ T29] audit: type=1326 audit(2000000588.491:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.206781][ T29] audit: type=1326 audit(2000000588.491:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.230369][ T29] audit: type=1326 audit(2000000588.491:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.253890][ T29] audit: type=1326 audit(2000000588.491:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.277615][ T29] audit: type=1326 audit(2000000588.491:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.301236][ T29] audit: type=1326 audit(2000000588.491:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.324855][ T29] audit: type=1326 audit(2000000588.491:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.348475][ T29] audit: type=1326 audit(2000000588.491:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.372021][ T29] audit: type=1326 audit(2000000588.491:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13647 comm="syz.3.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 156.716039][T13671] serio: Serial port ptm0 [ 156.793600][T13682] netlink: 'syz.6.4149': attribute type 1 has an invalid length. [ 156.809427][T13682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.838411][T13682] bond2: (slave veth11): Enslaving as an active interface with a down link [ 156.858638][T13682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.865844][T13682] bond2: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 157.069081][T13703] $H: renamed from bond0 (while UP) [ 157.088911][T13703] $H: entered promiscuous mode [ 157.094063][T13703] bond_slave_0: entered promiscuous mode [ 157.099949][T13703] bond_slave_1: entered promiscuous mode [ 157.306789][T13712] loop0: detected capacity change from 0 to 512 [ 157.336400][T13712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.367414][T13712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 157.381707][T13712] System zones: 0-2, 18-18, 34-34 [ 157.410391][T13712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.424815][T13712] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.605438][T13712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.615189][T13733] __nla_validate_parse: 7 callbacks suppressed [ 157.615207][T13733] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4169'. [ 157.645847][T13733] batadv0: entered promiscuous mode [ 157.651509][T13733] batadv0: entered allmulticast mode [ 157.681822][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'. [ 157.691092][T13739] netlink: 'syz.0.4172': attribute type 30 has an invalid length. [ 157.706844][ T4463] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.723421][ T4463] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.733778][ T4463] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.747294][ T4463] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.915087][T13763] netlink: 'syz.0.4183': attribute type 1 has an invalid length. [ 157.969604][T13763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.977079][T13770] netlink: 'syz.4.4186': attribute type 10 has an invalid length. [ 157.993539][T13770] netlink: 'syz.4.4186': attribute type 10 has an invalid length. [ 158.043257][T13773] bond0: (slave veth1): Enslaving as an active interface with a down link [ 158.061316][T13763] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.069915][T13763] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 158.143462][T13770] dummy0: left allmulticast mode [ 158.173704][T13770] team0: Port device dummy0 removed [ 158.202198][T13770] dummy0: entered allmulticast mode [ 158.226014][T13770] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.471674][T13802] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4199'. [ 158.488128][T13804] netlink: 'syz.1.4200': attribute type 1 has an invalid length. [ 158.513320][T13804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.587213][T13802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.666464][T13802] bond_slave_0: left allmulticast mode [ 158.681381][T13802] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 158.734943][T13802] vlan2: left allmulticast mode [ 158.739878][T13802] team0: left allmulticast mode [ 158.744754][T13802] C: left allmulticast mode [ 158.749313][T13802] team_slave_1: left allmulticast mode [ 158.760401][T13802] bond0 (unregistering): (slave macvlan4): Releasing backup interface [ 158.770546][T13802] macvlan4: left allmulticast mode [ 158.779200][T13802] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 158.789598][T13802] dummy0: left allmulticast mode [ 158.805926][T13802] bond0 (unregistering): Released all slaves [ 158.822812][T13806] vlan2: entered allmulticast mode [ 158.828023][T13806] bond0: entered allmulticast mode [ 159.370022][T13857] netlink: 'syz.4.4224': attribute type 4 has an invalid length. [ 159.618510][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4235'. [ 159.657220][T13887] tipc: Started in network mode [ 159.662181][T13887] tipc: Node identity ac14140f, cluster identity 4711 [ 159.675206][T13887] tipc: New replicast peer: 255.255.255.83 [ 159.681310][T13887] tipc: Enabled bearer , priority 10 [ 159.779382][T13902] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 159.786041][T13902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.793736][T13902] vhci_hcd vhci_hcd.0: Device attached [ 159.817899][T13903] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 159.825536][ T4844] vhci_hcd: stop threads [ 159.829923][ T4844] vhci_hcd: release socket [ 159.834388][ T4844] vhci_hcd: disconnect device [ 160.061835][T13937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4258'. [ 160.313964][T13943] netlink: 4104 bytes leftover after parsing attributes in process `syz.4.4261'. [ 160.323331][T13943] netlink: zone id is out of range [ 160.328567][T13943] netlink: set zone limit has 4 unknown bytes [ 160.433785][T13968] netem: incorrect gi model size [ 160.438809][T13968] netem: change failed [ 160.532860][T13980] netlink: 'syz.4.4276': attribute type 1 has an invalid length. [ 160.553102][T13978] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4273'. [ 160.555228][T13980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.595396][T13980] macvlan5: entered promiscuous mode [ 160.600829][T13980] macvlan5: entered allmulticast mode [ 160.607763][T13980] bond0: entered promiscuous mode [ 160.613250][T13980] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 160.621817][T13989] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 160.628391][T13989] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.636061][T13989] vhci_hcd vhci_hcd.0: Device attached [ 160.642945][T13990] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 160.650270][ T4856] vhci_hcd: stop threads [ 160.654589][ T4856] vhci_hcd: release socket [ 160.659100][ T4856] vhci_hcd: disconnect device [ 160.663956][T13980] bond0: left promiscuous mode [ 160.678078][ T7953] tipc: Node number set to 2886997007 [ 161.627029][T14058] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4299'. [ 161.742633][T14058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.768608][T14058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.787789][T14058] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 161.810474][T14058] bond0 (unregistering): Released all slaves [ 161.983940][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 161.983960][ T29] audit: type=1400 audit(2000000594.311:5066): avc: denied { execmod } for pid=14093 comm="syz.4.4305" path="/955/blkio.bfq.io_merged" dev="tmpfs" ino=4955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.037241][ T29] audit: type=1326 audit(2000000594.361:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.060835][ T29] audit: type=1326 audit(2000000594.361:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.104975][ T29] audit: type=1326 audit(2000000594.371:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.128683][ T29] audit: type=1326 audit(2000000594.371:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.152426][ T29] audit: type=1326 audit(2000000594.371:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.176131][ T29] audit: type=1326 audit(2000000594.371:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.199738][ T29] audit: type=1326 audit(2000000594.371:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.223334][ T29] audit: type=1326 audit(2000000594.431:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.481073][ T29] audit: type=1326 audit(2000000594.431:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14097 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe02436ebe9 code=0x7ffc0000 [ 162.731118][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4317'. [ 162.745562][T14162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4317'. [ 163.155018][T14204] vlan3: entered allmulticast mode [ 163.228196][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4340'. [ 163.238087][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4340'. [ 163.359142][T14230] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 163.468033][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4354'. [ 163.477500][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4354'. [ 163.711467][T14249] netlink: 'syz.3.4356': attribute type 21 has an invalid length. [ 163.886162][T14262] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4361'. [ 163.900502][T14262]  (unregistering): Released all slaves [ 163.990958][T14274] loop0: detected capacity change from 0 to 1024 [ 163.998068][T14274] EXT4-fs: Ignoring removed orlov option [ 164.010217][T14274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.333855][T14284] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 164.410726][T11711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.694666][T14306] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4379'. [ 164.840212][T14313] vlan3: entered allmulticast mode [ 164.845497][T14313] bridge_slave_0: entered allmulticast mode [ 165.070231][T14330] netlink: 'syz.6.4390': attribute type 2 has an invalid length. [ 165.198838][T14340] netlink: 'syz.4.4395': attribute type 30 has an invalid length. [ 165.347663][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4400'. [ 165.357485][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4400'. [ 165.420385][T14360] loop0: detected capacity change from 0 to 512 [ 165.430654][T14360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.448295][T14360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.477025][T14360] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.514336][T11711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.604650][T14384] netlink: 'syz.3.4414': attribute type 3 has an invalid length. [ 165.615442][T14384] netlink: 'syz.3.4414': attribute type 3 has an invalid length. [ 166.731186][T14436] netlink: 'syz.1.4434': attribute type 21 has an invalid length. [ 166.935830][T14450] netlink: 'syz.1.4439': attribute type 2 has an invalid length. [ 167.123653][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 167.123674][ T29] audit: type=1400 audit(2000000599.451:5360): avc: denied { create } for pid=14455 comm="syz.0.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.166064][ T29] audit: type=1400 audit(2000000599.481:5361): avc: denied { ioctl } for pid=14455 comm="syz.0.4441" path="socket:[41710]" dev="sockfs" ino=41710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.191165][ T29] audit: type=1400 audit(2000000599.481:5362): avc: denied { bind } for pid=14455 comm="syz.0.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.253394][T14462] wireguard0: entered promiscuous mode [ 167.552878][T14470] 9pnet: p9_errstr2errno: server reported unknown error [ 167.555224][T14467] macvlan2: entered promiscuous mode [ 167.565502][T14467] macvlan2: entered allmulticast mode [ 167.571806][T14467] bond1: (slave macvlan2): Opening slave failed [ 167.783937][T14482] __nla_validate_parse: 1 callbacks suppressed [ 167.783954][T14482] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4452'. [ 167.786370][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4453'. [ 167.844047][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4453'. [ 167.854954][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4456'. [ 167.869857][ T29] audit: type=1400 audit(2000000600.201:5363): avc: denied { watch } for pid=14494 comm="syz.4.4457" path="/986/file0" dev="tmpfs" ino=5119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.901929][ T29] audit: type=1400 audit(2000000600.231:5364): avc: denied { bind } for pid=14496 comm="syz.4.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.949286][ T29] audit: type=1400 audit(2000000600.231:5365): avc: denied { setopt } for pid=14496 comm="syz.4.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.095454][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4464'. [ 168.115129][ T29] audit: type=1326 audit(2000000600.441:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14501 comm="syz.6.4460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f7f2c265ba7 code=0x0 [ 168.153273][T14516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.160611][T14516] IPv6: NLM_F_CREATE should be set when creating new route [ 168.829591][T14546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4470'. [ 168.963932][T14553] netlink: 'syz.0.4472': attribute type 21 has an invalid length. [ 169.144343][ T29] audit: type=1400 audit(2000000601.471:5367): avc: denied { listen } for pid=14573 comm="syz.6.4477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.296494][ T29] audit: type=1400 audit(2000000601.481:5368): avc: denied { accept } for pid=14575 comm="syz.0.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.316209][ T29] audit: type=1400 audit(2000000601.511:5369): avc: denied { connect } for pid=14577 comm="syz.0.4479" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.736873][T14655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14655 comm=syz.1.4495 [ 169.925407][T14673] vlan2: entered allmulticast mode [ 169.930744][T14673] bridge_slave_0: entered allmulticast mode [ 170.022623][T14682] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4506'. [ 170.281314][T14703] vlan2: entered allmulticast mode [ 171.012679][T12387] syz_tun (unregistering): left allmulticast mode [ 171.169513][ T4873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.180060][ T4873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.299225][ T4873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.309781][ T4873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.409255][ T4873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.419624][ T4873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.493153][ T4873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.503590][ T4873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.594128][ T4873] bridge_slave_1: left allmulticast mode [ 171.599960][ T4873] bridge_slave_1: left promiscuous mode [ 171.605789][ T4873] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.639422][ T4873] bridge_slave_0: left promiscuous mode [ 171.645226][ T4873] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.022644][ T4873] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.053316][ T4873] bond_slave_0: left promiscuous mode [ 172.064018][ T4873] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.078856][ T4873] bond_slave_1: left promiscuous mode [ 172.115921][ T4873] $H (unregistering): Released all slaves [ 172.131305][ T4873] bond1 (unregistering): Released all slaves [ 172.151850][ T4873] bond0 (unregistering): (slave veth1): Releasing active interface [ 172.160983][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 172.160997][ T29] audit: type=1400 audit(2000000604.491:5739): avc: denied { create } for pid=14764 comm="syz.6.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.192729][ T29] audit: type=1400 audit(2000000604.521:5740): avc: denied { write } for pid=14764 comm="syz.6.4539" name="config" dev="proc" ino=4026533615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 172.215826][ T29] audit: type=1400 audit(2000000604.521:5741): avc: denied { write } for pid=14764 comm="syz.6.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.238982][ T4873] bond0 (unregistering): Released all slaves [ 172.318110][ T4873] tipc: Disabling bearer [ 172.323320][ T4873] tipc: Left network mode [ 172.346463][ T4873] hsr_slave_0: left promiscuous mode [ 172.352288][ T4873] hsr_slave_1: left promiscuous mode [ 172.358514][ T4873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.365951][ T4873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.384505][ T4873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.392378][ T4873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.404880][ T4873] veth1_macvtap: left promiscuous mode [ 172.413583][ T4873] veth0_macvtap: left promiscuous mode [ 172.484419][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4546'. [ 172.525747][ T29] audit: type=1400 audit(2000000604.851:5742): avc: denied { cmd } for pid=14780 comm="syz.3.4544" path="socket:[43291]" dev="sockfs" ino=43291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 172.549386][ T4873] veth1_vlan: left promiscuous mode [ 172.554751][ T4873] veth0_vlan: left promiscuous mode [ 172.651137][ T4873] team0 (unregistering): Port device team_slave_1 removed [ 172.681270][ T4873] team0 (unregistering): Port device team_slave_0 removed [ 172.715837][T14789] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4549'. [ 172.735847][T14781] syz_tun (unregistering): left allmulticast mode [ 172.767123][T14789] dummy0: left promiscuous mode [ 172.780158][T14789] macvlan2: left promiscuous mode [ 172.788439][T14789] ip6gre2: left allmulticast mode [ 172.911157][ T29] audit: type=1400 audit(2000000605.241:5743): avc: denied { name_bind } for pid=14795 comm="syz.3.4551" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 172.933430][T14799] geneve2: entered promiscuous mode [ 172.939116][T14799] geneve2: entered allmulticast mode [ 172.988959][T14744] chnl_net:caif_netlink_parms(): no params data found [ 173.025941][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4554'. [ 173.035151][T14805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4554'. [ 173.044213][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4554'. [ 173.068369][T14805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4554'. [ 173.077540][T14805] netlink: 'syz.4.4554': attribute type 6 has an invalid length. [ 173.127652][ T29] audit: type=1400 audit(2000000605.451:5744): avc: denied { bind } for pid=14817 comm="syz.1.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.148372][ T29] audit: type=1400 audit(2000000605.451:5745): avc: denied { setopt } for pid=14817 comm="syz.1.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.188672][T14744] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.195786][T14744] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.203201][T14744] bridge_slave_0: entered allmulticast mode [ 173.217249][T14744] bridge_slave_0: entered promiscuous mode [ 173.233645][T14744] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.240913][T14744] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.248302][T14744] bridge_slave_1: entered allmulticast mode [ 173.253462][ T29] audit: type=1400 audit(2000000605.581:5746): avc: denied { bind } for pid=14824 comm="syz.1.4561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 173.254915][T14744] bridge_slave_1: entered promiscuous mode [ 173.376682][ T29] audit: type=1326 audit(2000000605.711:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14831 comm="syz.3.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 173.418582][T14744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.431406][T14744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.454715][ T29] audit: type=1326 audit(2000000605.711:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14831 comm="syz.3.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd378e7ebe9 code=0x7ffc0000 [ 173.521049][T14744] team0: Port device team_slave_0 added [ 173.535163][T14744] team0: Port device team_slave_1 added [ 173.543490][T14838] loop6: detected capacity change from 0 to 512 [ 173.557599][T14838] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.4566: invalid block [ 173.578453][T14838] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4566: invalid indirect mapped block 4294967295 (level 1) [ 173.594461][T14744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.601523][T14744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.627582][T14744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.639666][T14744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.642708][T14838] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4566: invalid indirect mapped block 4294967295 (level 1) [ 173.646664][T14744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.686915][T14744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.714429][T14838] EXT4-fs (loop6): 2 truncates cleaned up [ 173.727203][T14838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.749310][T14744] hsr_slave_0: entered promiscuous mode [ 173.755529][T14744] hsr_slave_1: entered promiscuous mode [ 173.761485][T14744] debugfs: 'hsr0' already exists in 'hsr' [ 173.767306][T14744] Cannot create hsr debugfs directory [ 173.930783][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.961017][T14744] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 173.970460][T14744] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 173.989557][T14744] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.005121][T14873] sctp: [Deprecated]: syz.3.4577 (pid 14873) Use of int in max_burst socket option. [ 174.005121][T14873] Use struct sctp_assoc_value instead [ 174.020793][T14744] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.031539][T14874] ref_ctr increment failed for inode: 0x1472 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811a14f8c0 [ 174.033309][T14875] netlink: 'syz.6.4578': attribute type 7 has an invalid length. [ 174.043476][T14870] uprobe: syz.4.4579:14870 failed to unregister, leaking uprobe [ 174.050544][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4578'. [ 174.107287][T14744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.123582][T14744] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.134382][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.141524][ T4873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.165150][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.172283][ T4873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.232676][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4582'. [ 174.253677][T14744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.297232][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 174.439958][T14744] veth0_vlan: entered promiscuous mode [ 174.448885][T14744] veth1_vlan: entered promiscuous mode [ 174.468197][T14744] veth0_macvtap: entered promiscuous mode [ 174.476015][T14744] veth1_macvtap: entered promiscuous mode [ 174.490415][T14744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.504766][T14744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.519636][ T4860] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.533263][ T4860] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.558798][ T4860] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.571130][ T4860] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.623644][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4588'. [ 174.635476][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4588'. [ 174.638398][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4589'. [ 175.790946][T14992] netlink: 'syz.1.4615': attribute type 1 has an invalid length. [ 176.260177][T15015] ip6gre1: left allmulticast mode [ 176.265343][T15015] vxlan0: left promiscuous mode [ 176.518811][T15027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.947182][T15044] loop6: detected capacity change from 0 to 8192 [ 177.011747][T15044] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.172490][T15060] netlink: 'syz.3.4646': attribute type 1 has an invalid length. [ 177.192714][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 177.192733][ T29] audit: type=1326 audit(2000000609.521:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.233763][ T29] audit: type=1326 audit(2000000609.521:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.257416][ T29] audit: type=1326 audit(2000000609.561:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.281096][ T29] audit: type=1326 audit(2000000609.561:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.304688][ T29] audit: type=1326 audit(2000000609.561:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.328233][ T29] audit: type=1326 audit(2000000609.561:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.351798][ T29] audit: type=1326 audit(2000000609.561:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.375382][ T29] audit: type=1326 audit(2000000609.561:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.398968][ T29] audit: type=1326 audit(2000000609.561:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.399221][T15065] loop6: detected capacity change from 0 to 1024 [ 177.422484][ T29] audit: type=1326 audit(2000000609.561:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.7.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab6debe9 code=0x7ffc0000 [ 177.476169][T15065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.501592][T15065] netlink: 'syz.6.4647': attribute type 1 has an invalid length. [ 177.525426][T15075] sd 0:0:1:0: device reset [ 177.566399][T15079] loop7: detected capacity change from 0 to 2048 [ 177.573663][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.617017][T15079] loop7: p1 < > p3 p4 [ 177.624083][T15079] loop7: p3 start 922746880 is beyond EOD, truncated [ 177.630927][T15079] loop7: p4 size 8388608 extends beyond EOD, truncated [ 177.720588][T15093] loop6: detected capacity change from 0 to 2048 [ 177.755240][T15093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.770991][T15100] netlink: 'syz.7.4662': attribute type 4 has an invalid length. [ 177.955389][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.199647][T15140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15140 comm=syz.7.4681 [ 178.359992][T15155] __nla_validate_parse: 6 callbacks suppressed [ 178.360012][T15155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4696'. [ 178.375292][T15155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4696'. [ 178.437152][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.7.4688 [ 178.916535][T15175] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4692'. [ 178.986909][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4692'. [ 179.322630][T15196] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4700'. [ 179.427492][T15206] netlink: 'syz.6.4706': attribute type 1 has an invalid length. [ 179.550693][T15217] netlink: 'syz.1.4710': attribute type 83 has an invalid length. [ 179.951055][T15249] loop7: detected capacity change from 0 to 512 [ 179.999398][T15249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.026250][T15249] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.105693][T14744] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.189280][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4732'. [ 180.255220][T15268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.284771][T15276] macvlan2: entered promiscuous mode [ 180.290337][T15276] bond2: entered promiscuous mode [ 180.295530][T15276] macvlan2: entered allmulticast mode [ 180.300979][T15276] bond2: entered allmulticast mode [ 180.308722][T15276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.322508][T15276] bond2: left allmulticast mode [ 180.325079][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4740'. [ 180.327587][T15276] bond2: left promiscuous mode [ 180.328642][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4739'. [ 181.504961][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4764'. [ 181.596990][T15351] macvlan1: entered promiscuous mode [ 181.603012][T15351] ipvlan0: entered promiscuous mode [ 181.609043][T15351] ipvlan0: left promiscuous mode [ 181.614140][T15351] macvlan1: left promiscuous mode [ 181.746933][T15359] 9pnet_fd: Insufficient options for proto=fd [ 181.961444][T15381] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4774'. [ 182.103594][T15396] loop6: detected capacity change from 0 to 512 [ 182.117750][T15396] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4786: casefold flag without casefold feature [ 182.146314][T15396] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4786: couldn't read orphan inode 15 (err -117) [ 182.160280][T15396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.211639][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.238162][T15411] wg2: entered promiscuous mode [ 182.243101][T15411] wg2: entered allmulticast mode [ 182.318475][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 182.318494][ T29] audit: type=1400 audit(2000000002.370:6398): avc: denied { bind } for pid=15423 comm="syz.6.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.344447][ T29] audit: type=1400 audit(2000000002.370:6399): avc: denied { name_bind } for pid=15423 comm="syz.6.4797" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 182.365288][ T29] audit: type=1400 audit(2000000002.370:6400): avc: denied { node_bind } for pid=15423 comm="syz.6.4797" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 182.388934][ T29] audit: type=1326 audit(2000000002.370:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c26ebe9 code=0x7ffc0000 [ 182.412743][ T29] audit: type=1326 audit(2000000002.370:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c26ebe9 code=0x7ffc0000 [ 182.436642][ T29] audit: type=1326 audit(2000000002.370:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2c26ebe9 code=0x7ffc0000 [ 182.460385][ T29] audit: type=1326 audit(2000000002.370:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c26ebe9 code=0x7ffc0000 [ 182.483956][ T29] audit: type=1326 audit(2000000002.370:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f2c26ebe9 code=0x7ffc0000 [ 182.507496][ T29] audit: type=1326 audit(2000000002.370:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c26ebe9 code=0x7ffc0000 [ 182.531112][ T29] audit: type=1326 audit(2000000002.370:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f2c26ebe9 code=0x7ffc0000 [ 182.803596][T15450] sctp: [Deprecated]: syz.1.4808 (pid 15450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.803596][T15450] Use struct sctp_sack_info instead [ 182.854505][T15453] sctp: [Deprecated]: syz.1.4808 (pid 15453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.854505][T15453] Use struct sctp_sack_info instead [ 183.035084][T15463] loop6: detected capacity change from 0 to 164 [ 183.051203][T15463] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 183.062328][T15463] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 183.080962][T15463] Symlink component flag not implemented [ 183.086949][T15463] Symlink component flag not implemented [ 183.119475][T15463] Symlink component flag not implemented (7) [ 183.125538][T15463] Symlink component flag not implemented (116) [ 183.260777][T15501] loop6: detected capacity change from 0 to 512 [ 183.278242][T15501] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 183.312262][T15501] EXT4-fs (loop6): 1 truncate cleaned up [ 183.322740][T15501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.049750][T15556] __nla_validate_parse: 3 callbacks suppressed [ 184.049772][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4842'. [ 184.120682][T15501] ================================================================== [ 184.128836][T15501] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 184.135992][T15501] [ 184.138328][T15501] write to 0xffff888118c4b6ac of 4 bytes by task 15515 on cpu 1: [ 184.146067][T15501] xas_set_mark+0x12b/0x140 [ 184.150608][T15501] __folio_start_writeback+0x1dd/0x440 [ 184.156111][T15501] ext4_bio_write_folio+0x5ad/0x9f0 [ 184.161353][T15501] mpage_process_page_bufs+0x4a1/0x620 [ 184.166844][T15501] mpage_prepare_extent_to_map+0x786/0xc00 [ 184.172686][T15501] ext4_do_writepages+0xa05/0x2750 [ 184.177956][T15501] ext4_writepages+0x176/0x300 [ 184.182789][T15501] do_writepages+0x1c6/0x310 [ 184.187499][T15501] filemap_write_and_wait_range+0x144/0x340 [ 184.193452][T15501] ext4_file_write_iter+0xe04/0xf00 [ 184.198691][T15501] iter_file_splice_write+0x5f2/0x970 [ 184.204172][T15501] direct_splice_actor+0x153/0x2a0 [ 184.209298][T15501] splice_direct_to_actor+0x30f/0x680 [ 184.214684][T15501] do_splice_direct+0xda/0x150 [ 184.219463][T15501] do_sendfile+0x380/0x650 [ 184.223904][T15501] __x64_sys_sendfile64+0x105/0x150 [ 184.229124][T15501] x64_sys_call+0x2bb0/0x2ff0 [ 184.233825][T15501] do_syscall_64+0xd2/0x200 [ 184.238360][T15501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.244269][T15501] [ 184.246600][T15501] read to 0xffff888118c4b6ac of 4 bytes by task 15501 on cpu 0: [ 184.254238][T15501] xas_find_marked+0x5dc/0x620 [ 184.259023][T15501] find_get_entry+0x5d/0x380 [ 184.264162][T15501] filemap_get_folios_tag+0x92/0x210 [ 184.269454][T15501] mpage_prepare_extent_to_map+0x320/0xc00 [ 184.275283][T15501] ext4_do_writepages+0xa05/0x2750 [ 184.280430][T15501] ext4_writepages+0x176/0x300 [ 184.285217][T15501] do_writepages+0x1c6/0x310 [ 184.289837][T15501] file_write_and_wait_range+0x156/0x2c0 [ 184.295707][T15501] generic_buffers_fsync_noflush+0x45/0x120 [ 184.301647][T15501] ext4_sync_file+0x1ab/0x690 [ 184.306369][T15501] vfs_fsync_range+0x10d/0x130 [ 184.311152][T15501] ext4_buffered_write_iter+0x34f/0x3c0 [ 184.316823][T15501] ext4_file_write_iter+0xdbf/0xf00 [ 184.322055][T15501] iter_file_splice_write+0x5f2/0x970 [ 184.327447][T15501] direct_splice_actor+0x153/0x2a0 [ 184.332622][T15501] splice_direct_to_actor+0x30f/0x680 [ 184.338018][T15501] do_splice_direct+0xda/0x150 [ 184.342808][T15501] do_sendfile+0x380/0x650 [ 184.347251][T15501] __x64_sys_sendfile64+0x105/0x150 [ 184.352467][T15501] x64_sys_call+0x2bb0/0x2ff0 [ 184.357157][T15501] do_syscall_64+0xd2/0x200 [ 184.361690][T15501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.367597][T15501] [ 184.369921][T15501] value changed: 0x0a000021 -> 0x04000021 [ 184.375694][T15501] [ 184.378031][T15501] Reported by Kernel Concurrency Sanitizer on: [ 184.384233][T15501] CPU: 0 UID: 0 PID: 15501 Comm: syz.6.4826 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 184.397969][T15501] Tainted: [W]=WARN [ 184.401774][T15501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.411847][T15501] ================================================================== [ 184.546553][ T8752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.