last executing test programs: 1m22.487806505s ago: executing program 4 (id=2643): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) 1m21.785457047s ago: executing program 4 (id=2668): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 1m21.460978722s ago: executing program 4 (id=2672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m21.201895286s ago: executing program 4 (id=2674): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m20.828765762s ago: executing program 4 (id=2676): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a801800048014"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m20.672853574s ago: executing program 4 (id=2678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) 1m20.631440485s ago: executing program 32 (id=2678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) 54.264659615s ago: executing program 5 (id=3484): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x2962, &(0x7f0000000380)={0x0, 0xa99f, 0x2, 0x0, 0x3d7}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x9001}, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 54.234706846s ago: executing program 5 (id=3486): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = gettid() r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 53.37017276s ago: executing program 5 (id=3516): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 53.202606272s ago: executing program 5 (id=3520): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 52.856158868s ago: executing program 5 (id=3523): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) close_range(r1, 0xffffffffffffffff, 0x0) 52.499695373s ago: executing program 5 (id=3532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = eventfd(0x0) read$eventfd(r2, &(0x7f0000000240), 0x8) writev(r2, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) 52.456360024s ago: executing program 33 (id=3532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = eventfd(0x0) read$eventfd(r2, &(0x7f0000000240), 0x8) writev(r2, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) 1.623294234s ago: executing program 2 (id=5265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.622810994s ago: executing program 6 (id=5266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.584432154s ago: executing program 6 (id=5267): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71021000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.500843066s ago: executing program 6 (id=5268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast1, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.474317706s ago: executing program 6 (id=5269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.448400067s ago: executing program 2 (id=5270): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) close(r0) 1.199727471s ago: executing program 3 (id=5274): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 1.124048132s ago: executing program 2 (id=5275): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x514, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x7}, 0xb008, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xc88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r0) 1.011942844s ago: executing program 2 (id=5278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r3, 0x0, 0x6}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 907.676706ms ago: executing program 2 (id=5281): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}]) 795.808207ms ago: executing program 2 (id=5284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000900)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000c40)={0x2007}) 773.079208ms ago: executing program 3 (id=5285): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r3, 0x9}, 0x8) 718.924798ms ago: executing program 3 (id=5287): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 649.70516ms ago: executing program 0 (id=5288): r0 = syz_io_uring_setup(0x5e4b, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x20, 0xfffffbfc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 626.43222ms ago: executing program 3 (id=5289): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x514, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x7}, 0xb008, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xc88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r0) 531.406681ms ago: executing program 6 (id=5291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 504.868022ms ago: executing program 0 (id=5292): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x6e22, 0x40000, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, 0x1c) listen(r2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81006e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 458.129663ms ago: executing program 0 (id=5294): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 448.327933ms ago: executing program 3 (id=5295): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) vmsplice(r0, &(0x7f0000000200), 0x3af, 0x2) 396.559903ms ago: executing program 6 (id=5296): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 354.198004ms ago: executing program 1 (id=5297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x22000400) fsmount(r1, 0x0, 0x0) 351.247254ms ago: executing program 0 (id=5298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 308.417235ms ago: executing program 1 (id=5299): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tkill(0x0, 0x12) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket(0x2, 0x80805, 0x0) r1 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x80000000, 0x0) 226.017996ms ago: executing program 1 (id=5300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000280), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 225.521936ms ago: executing program 0 (id=5301): socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 176.755187ms ago: executing program 0 (id=5302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 131.317738ms ago: executing program 1 (id=5303): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xd85d, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@local, 0x59, r1}) 77.872529ms ago: executing program 1 (id=5304): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x100}}}}}}}}}, 0x4a) 6.0135ms ago: executing program 3 (id=5305): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = io_uring_setup(0x7c4, &(0x7f0000000080)={0x0, 0x4075, 0x40, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 1 (id=5306): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 0: port 3(batadv1) entered disabled state [ 115.963557][ T9446] batadv1: entered allmulticast mode [ 115.969771][ T9446] batadv1: entered promiscuous mode [ 116.014600][ T9450] xt_NFQUEUE: number of total queues is 0 [ 116.379172][ T9478] sctp: [Deprecated]: syz.1.2368 (pid 9478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.379172][ T9478] Use struct sctp_sack_info instead [ 116.443568][ T4413] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 116.454061][ T4413] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 116.510351][ T9483] bridge0: port 4(batadv1) entered blocking state [ 116.517644][ T9483] bridge0: port 4(batadv1) entered disabled state [ 116.526897][ T9483] batadv1: entered allmulticast mode [ 116.532998][ T9483] batadv1: entered promiscuous mode [ 116.593635][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 116.677486][ T9494] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 116.915461][ T9516] netlink: 'syz.3.2384': attribute type 4 has an invalid length. [ 116.926519][ T9516] : renamed from bond0 [ 117.030753][ T4384] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 117.040305][ T4384] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 117.051262][ T9528] openvswitch: netlink: Message has 6 unknown bytes. [ 117.150109][ T9537] netem: incorrect gi model size [ 117.156368][ T9537] netem: change failed [ 117.244754][ T9549] xt_bpf: check failed: parse error [ 117.495987][ T9571] loop4: detected capacity change from 0 to 8192 [ 117.502787][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 117.502803][ T29] audit: type=1326 audit(1753771149.641:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3712bd60a code=0x7ffc0000 [ 117.535327][ T9571] vfat: Unknown parameter '' [ 117.559438][ T29] audit: type=1326 audit(1753771149.671:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3712bd60a code=0x7ffc0000 [ 117.583101][ T29] audit: type=1326 audit(1753771149.671:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe3712bd217 code=0x7ffc0000 [ 117.606736][ T29] audit: type=1326 audit(1753771149.671:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe3712c014a code=0x7ffc0000 [ 117.630491][ T29] audit: type=1326 audit(1753771149.681:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3712bd310 code=0x7ffc0000 [ 117.654939][ T29] audit: type=1326 audit(1753771149.681:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3712be5ab code=0x7ffc0000 [ 117.679357][ T29] audit: type=1326 audit(1753771149.681:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3712bd60a code=0x7ffc0000 [ 117.703800][ T29] audit: type=1326 audit(1753771149.691:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 117.728192][ T29] audit: type=1326 audit(1753771149.691:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 117.753811][ T29] audit: type=1326 audit(1753771149.741:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9570 comm="syz.4.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 117.806059][ T9594] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 117.815129][ T9594] netlink: 'syz.2.2419': attribute type 2 has an invalid length. [ 117.919612][ T7388] IPVS: starting estimator thread 0... [ 118.011950][ T9608] IPVS: using max 2208 ests per chain, 110400 per kthread [ 118.454416][ T9669] __nla_validate_parse: 3 callbacks suppressed [ 118.454436][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2453'. [ 118.469994][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2453'. [ 118.669924][ T9678] : renamed from bond0 (while UP) [ 118.993312][ T9724] netlink: 'syz.4.2477': attribute type 27 has an invalid length. [ 119.027972][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.035951][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.091851][ T9724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.105296][ T9724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.136903][ T9724] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.147900][ T9724] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.157190][ T9724] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.168449][ T9724] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.185201][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 119.194825][ T9726] netlink: 'syz.0.2478': attribute type 29 has an invalid length. [ 119.202857][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 119.234350][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.246845][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.282696][ T9728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.512426][ T9742] 0ªX¹¦D: left allmulticast mode [ 119.562427][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.589637][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.613170][ T9742] dummy0: left promiscuous mode [ 119.620053][ T9742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.128861][ T9781] netlink: 'syz.0.2502': attribute type 2 has an invalid length. [ 120.136779][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 120.363072][ T9794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2508'. [ 120.372557][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'. [ 120.427477][ T9798] SELinux: Context system_u:object_r:inetd_child_exec_t:s0 is not valid (left unmapped). [ 120.897127][ T9855] netlink: 'syz.1.2533': attribute type 10 has an invalid length. [ 120.911249][ T9855] vlan0: entered allmulticast mode [ 120.916824][ T9855] veth0_vlan: entered allmulticast mode [ 121.037029][ T9869] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2545'. [ 121.074830][ T9875] 9pnet_fd: Insufficient options for proto=fd [ 121.115694][ T9882] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2550'. [ 121.705043][ T9926] capability: warning: `syz.1.2567' uses 32-bit capabilities (legacy support in use) [ 121.885465][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2573'. [ 122.685806][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 122.685824][ T29] audit: type=1400 audit(1753771154.821:4234): avc: denied { listen } for pid=10010 comm="syz.4.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.712629][ T29] audit: type=1400 audit(1753771154.821:4235): avc: denied { ioctl } for pid=10010 comm="syz.4.2601" path="socket:[24004]" dev="sockfs" ino=24004 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.744727][T10012] netlink: 'syz.2.2599': attribute type 10 has an invalid length. [ 122.763542][T10012] vlan0: entered allmulticast mode [ 122.768798][T10012] veth0_vlan: entered allmulticast mode [ 122.794148][ T29] audit: type=1326 audit(1753771154.931:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.4.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 122.822693][ T29] audit: type=1326 audit(1753771154.931:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.4.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 122.834650][T10012] team0: Port device vlan0 added [ 122.846597][ T29] audit: type=1326 audit(1753771154.931:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.4.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 122.875926][ T29] audit: type=1326 audit(1753771154.931:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.4.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 122.899800][ T29] audit: type=1326 audit(1753771154.931:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.4.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 122.927480][ T29] audit: type=1326 audit(1753771154.981:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.4.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3712be9a9 code=0x7ffc0000 [ 123.185201][ T29] audit: type=1400 audit(1753771155.321:4242): avc: denied { write } for pid=10026 comm="syz.0.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.141884][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2635'. [ 124.150989][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2635'. [ 124.162049][ T29] audit: type=1326 audit(1753771156.271:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.4.2621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3712be9a9 code=0x0 [ 124.619542][T10092] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2634'. [ 124.663591][T10096] netlink: 'syz.0.2636': attribute type 27 has an invalid length. [ 124.742371][T10096] bond1: left promiscuous mode [ 124.747227][T10096] bond1: left allmulticast mode [ 124.792984][T10103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.815643][T10103] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.858749][T10103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.430260][T10146] netem: change failed [ 125.517572][T10155] netlink: 'syz.0.2662': attribute type 4 has an invalid length. [ 125.525651][T10155] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2662'. [ 125.558162][T10155] : renamed from bond0 (while UP) [ 125.784463][T10173] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2668'. [ 125.812069][T10169] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2668'. [ 125.892169][T10176] netlink: 'syz.0.2670': attribute type 13 has an invalid length. [ 126.974377][T10201] netlink: 'syz.3.2681': attribute type 27 has an invalid length. [ 126.986486][T10201] bridge0: left allmulticast mode [ 127.016299][T10201] 0ªX¹¦À: left allmulticast mode [ 127.034052][T10201] vlan2: left allmulticast mode [ 127.042889][T10201] bond1: left promiscuous mode [ 127.047798][T10201] bond1: left allmulticast mode [ 127.089124][T10201] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.098375][T10201] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.108352][T10201] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.117408][T10201] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.149321][T10204] 8021q: adding VLAN 0 to HW filter on device  [ 127.157779][T10204] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.185523][T10204] bridge0: port 4(dummy0) entered blocking state [ 127.192254][T10204] bridge0: port 4(dummy0) entered forwarding state [ 127.203832][T10204] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 127.429927][T10197] chnl_net:caif_netlink_parms(): no params data found [ 127.538441][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.546067][T10197] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.610115][T10197] bridge_slave_0: entered allmulticast mode [ 127.628090][T10197] bridge_slave_0: entered promiscuous mode [ 127.657461][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.664929][T10197] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.681378][T10197] bridge_slave_1: entered allmulticast mode [ 127.689706][T10197] bridge_slave_1: entered promiscuous mode [ 127.713756][T10197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.724662][T10197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.758781][T10197] team0: Port device team_slave_0 added [ 127.767672][T10197] team0: Port device team_slave_1 added [ 127.787410][T10197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.795239][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.821577][T10197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.834867][T10197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.842317][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.869608][T10197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.882209][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 127.882228][ T29] audit: type=1400 audit(1753771160.021:4420): avc: denied { ioctl } for pid=10255 comm="syz.1.2700" path="socket:[25143]" dev="sockfs" ino=25143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.983974][T10197] hsr_slave_0: entered promiscuous mode [ 127.990499][T10197] hsr_slave_1: entered promiscuous mode [ 127.994193][T10264] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2704'. [ 127.996271][ T29] audit: type=1400 audit(1753771160.131:4421): avc: denied { nlmsg_read } for pid=10263 comm="syz.1.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.027572][T10197] debugfs: 'hsr0' already exists in 'hsr' [ 128.033569][T10197] Cannot create hsr debugfs directory [ 128.181159][T10280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.201272][T10197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.211347][T10278] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.218889][ T29] audit: type=1400 audit(1753771160.351:4422): avc: denied { shutdown } for pid=10283 comm="syz.1.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.242778][T10197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.257302][T10197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.276150][T10288] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.283760][T10197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.358926][T10197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.387031][T10197] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.397585][T10306] tipc: Started in network mode [ 128.402858][T10306] tipc: Node identity ac141413, cluster identity 4711 [ 128.416502][T10306] tipc: New replicast peer: 10.1.1.2 [ 128.422086][T10306] tipc: Enabled bearer , priority 10 [ 128.436354][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.443951][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.463410][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.470600][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.485024][T10312] geneve2: entered promiscuous mode [ 128.566884][T10321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2727'. [ 128.603489][T10197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.631264][ T29] audit: type=1401 audit(1753771160.761:4423): op=setxattr invalid_context="" [ 128.691865][ T29] audit: type=1400 audit(1753771160.821:4424): avc: denied { mount } for pid=10337 comm="syz.3.2733" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.929970][T10197] veth0_vlan: entered promiscuous mode [ 128.950108][T10352] : (slave netdevsim1): Releasing backup interface [ 128.970967][T10197] veth1_vlan: entered promiscuous mode [ 129.016299][T10197] veth0_macvtap: entered promiscuous mode [ 129.036830][T10197] veth1_macvtap: entered promiscuous mode [ 129.086494][T10197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.109555][T10197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.134535][T10197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.144215][T10197] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.152987][T10197] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.161995][T10197] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.322561][ T29] audit: type=1400 audit(1753771161.431:4425): avc: denied { mounton } for pid=10197 comm="syz-executor" path="/root/syzkaller.iYHpny/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 129.347260][ T29] audit: type=1400 audit(1753771161.431:4426): avc: denied { mounton } for pid=10197 comm="syz-executor" path="/root/syzkaller.iYHpny/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 129.374990][ T29] audit: type=1400 audit(1753771161.431:4427): avc: denied { mounton } for pid=10197 comm="syz-executor" path="/root/syzkaller.iYHpny/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 129.403793][ T29] audit: type=1400 audit(1753771161.451:4428): avc: denied { mounton } for pid=10197 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 129.426895][ T29] audit: type=1400 audit(1753771161.451:4429): avc: denied { mount } for pid=10197 comm="syz-executor" name="/" dev="gadgetfs" ino=3538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 129.431724][ T7372] tipc: Node number set to 2886997011 [ 129.488052][T10366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.566528][T10366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.629432][T10366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.726232][T10380] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 129.763553][T10366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.861467][T10366] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.874215][T10366] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.886839][T10366] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.909415][T10366] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.982839][T10378] loop5: detected capacity change from 0 to 1024 [ 129.994255][T10378] EXT4-fs: Ignoring removed oldalloc option [ 130.000316][T10378] EXT4-fs: Ignoring removed bh option [ 130.180381][T10378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.797912][T10197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.665969][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 131.690866][T10478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2788'. [ 131.960356][T10499] netlink: 'syz.0.2798': attribute type 1 has an invalid length. [ 132.010261][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.038479][T10504] bond0: (slave gretap0): making interface the new active one [ 132.089267][T10504] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 132.184143][T10517] netlink: 'syz.1.2806': attribute type 13 has an invalid length. [ 132.320161][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.327568][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.435569][T10517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.450977][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 132.452582][T10517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.531521][T10517] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.540835][T10517] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.549332][T10517] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.557754][T10517] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.571210][T10525] batadv_slave_0: entered promiscuous mode [ 132.579973][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.637313][T10534] batadv_slave_0 (unregistering): left promiscuous mode [ 132.645954][T10534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.823928][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 132.841117][T10544] loop5: detected capacity change from 0 to 512 [ 132.871742][T10544] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 132.905763][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 132.905816][ T29] audit: type=1326 audit(1753771165.041:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 132.979462][ T29] audit: type=1326 audit(1753771165.071:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 132.987026][T10544] EXT4-fs (loop5): 1 truncate cleaned up [ 133.003172][ T29] audit: type=1326 audit(1753771165.071:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 133.003245][ T29] audit: type=1326 audit(1753771165.071:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 133.003279][ T29] audit: type=1326 audit(1753771165.071:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 133.003371][ T29] audit: type=1326 audit(1753771165.071:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 133.003416][ T29] audit: type=1326 audit(1753771165.071:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 133.003451][ T29] audit: type=1326 audit(1753771165.071:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 133.003485][ T29] audit: type=1326 audit(1753771165.081:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 133.003586][ T29] audit: type=1326 audit(1753771165.081:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 133.213074][T10544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.281194][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 133.321952][T10197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.387698][T10564] netlink: 'syz.2.2824': attribute type 13 has an invalid length. [ 133.493725][T10564] bridge0: port 3(dummy0) entered disabled state [ 133.500240][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.507668][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.674034][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.748818][T10579] loop5: detected capacity change from 0 to 1024 [ 133.777368][T10564] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.786630][T10564] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.796264][T10564] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.805521][T10564] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.871820][ T7394] syz1: Port: 1 Link DOWN [ 133.884711][T10583] smc: net device bond0 applied user defined pnetid SYZ2 [ 133.903207][T10583] smc: net device bond0 erased user defined pnetid SYZ2 [ 134.125804][T10600] loop5: detected capacity change from 0 to 512 [ 134.162052][T10600] EXT4-fs: inline encryption not supported [ 134.191909][T10600] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.217261][T10600] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 134.230649][T10600] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2839: attempt to clear invalid blocks 2 len 1 [ 134.259047][T10600] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 134.284000][T10600] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2839: invalid indirect mapped block 1819239214 (level 0) [ 134.314750][T10600] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2839: invalid indirect mapped block 1819239214 (level 1) [ 134.376221][T10600] EXT4-fs (loop5): 1 truncate cleaned up [ 134.412014][T10600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.465883][T10600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.852204][T10626] netlink: 'syz.3.2849': attribute type 13 has an invalid length. [ 134.913931][T10626] bridge0: port 4(dummy0) entered disabled state [ 136.027928][T10722] netlink: 'syz.5.2893': attribute type 298 has an invalid length. [ 136.280546][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 137.053114][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2924'. [ 137.342601][ T7374] page_pool_release_retry() stalled pool shutdown: id 46, 1 inflight 60 sec [ 137.472677][T10817] xt_hashlimit: size too large, truncated to 1048576 [ 137.819352][T10830] netlink: 'syz.1.2939': attribute type 21 has an invalid length. [ 137.835032][T10830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2939'. [ 137.955577][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2943'. [ 137.979502][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 137.979519][ T29] audit: type=1400 audit(137.957:4533): avc: denied { lock } for pid=10843 comm="syz.2.2945" path="socket:[27488]" dev="sockfs" ino=27488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 138.027226][T10846] loop5: detected capacity change from 0 to 512 [ 138.056218][T10846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.294067][ T4401] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 138.329765][ T4401] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28 [ 138.343184][ T4401] EXT4-fs (loop5): This should not happen!! Data will be lost [ 138.343184][ T4401] [ 138.353029][ T4401] EXT4-fs (loop5): Total free blocks count 0 [ 138.359118][ T4401] EXT4-fs (loop5): Free/Dirty block details [ 138.365124][ T4401] EXT4-fs (loop5): free_blocks=65280 [ 138.371063][ T4401] EXT4-fs (loop5): dirty_blocks=1025 [ 138.377165][ T4401] EXT4-fs (loop5): Block reservation details [ 138.383523][ T4401] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 138.394901][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2956'. [ 138.419240][T10870] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2957'. [ 138.442807][T10197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.462539][T10872] @: renamed from vlan0 [ 138.775532][ T29] audit: type=1326 audit(138.757:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b27965967 code=0x7ffc0000 [ 138.798760][ T29] audit: type=1326 audit(138.757:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2790ab89 code=0x7ffc0000 [ 138.821825][ T29] audit: type=1326 audit(138.757:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b27965967 code=0x7ffc0000 [ 138.844772][ T29] audit: type=1326 audit(138.757:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b2790ab89 code=0x7ffc0000 [ 138.867766][ T29] audit: type=1326 audit(138.757:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 138.890722][ T29] audit: type=1326 audit(138.757:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 139.002107][T10898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2970'. [ 139.051664][ T29] audit: type=1326 audit(138.837:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 139.074780][ T29] audit: type=1326 audit(138.837:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 139.097962][ T29] audit: type=1326 audit(138.837:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 140.142313][T10933] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10933 comm=syz.1.2986 [ 140.162574][T10935] netlink: 'syz.3.2988': attribute type 1 has an invalid length. [ 140.219337][T10935] bond0: (slave gretap1): making interface the new active one [ 140.227523][T10935] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 140.730391][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 140.741037][T10980] dummy0 (unregistering): left allmulticast mode [ 140.747509][T10980] dummy0 (unregistering): left promiscuous mode [ 140.754850][T10980] bridge0: port 4(dummy0) entered disabled state [ 140.986474][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'. [ 140.996873][T10998] smc: net device bond0 applied user defined pnetid RYZ2 [ 141.375655][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3039'. [ 141.385469][T11047] netlink: 'syz.1.3039': attribute type 15 has an invalid length. [ 141.437795][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3039'. [ 141.447793][T11047] netlink: 'syz.1.3039': attribute type 15 has an invalid length. [ 141.577527][T11062] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 141.676653][T11075] ÿÿÿÿÿÿ: renamed from vlan1 [ 141.954113][T11112] netlink: 'syz.0.3065': attribute type 1 has an invalid length. [ 142.416084][T11153] __nla_validate_parse: 3 callbacks suppressed [ 142.416103][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3086'. [ 142.433318][T11153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.446139][T11153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.757057][T11175] loop5: detected capacity change from 0 to 2048 [ 142.784901][T11175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.856212][T10197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.051617][T11205] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3112'. [ 143.114968][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 143.114984][ T29] audit: type=1326 audit(143.098:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.181327][ T29] audit: type=1326 audit(143.128:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.205138][ T29] audit: type=1326 audit(143.138:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.228132][ T29] audit: type=1326 audit(143.138:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.252152][ T29] audit: type=1326 audit(143.138:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.275599][ T29] audit: type=1326 audit(143.138:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.299174][ T29] audit: type=1326 audit(143.138:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.322952][ T29] audit: type=1326 audit(143.138:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.346000][ T29] audit: type=1326 audit(143.138:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.369837][ T29] audit: type=1326 audit(143.138:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 143.664569][T11234] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3124'. [ 143.739185][T11241] loop5: detected capacity change from 0 to 512 [ 143.795668][T11241] EXT4-fs: Ignoring removed oldalloc option [ 143.849953][T11241] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3128: Parent and EA inode have the same ino 15 [ 143.891946][T11241] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3128: Parent and EA inode have the same ino 15 [ 143.904745][T11241] EXT4-fs (loop5): 1 orphan inode deleted [ 143.911237][T11241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.214609][T10197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.227990][T11356] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3180'. [ 145.644028][T11416] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3194'. [ 146.925381][T11536] netlink: 304 bytes leftover after parsing attributes in process `syz.0.3238'. [ 146.937298][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 146.981733][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3243'. [ 146.990757][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3243'. [ 147.194845][T11580] IPVS: Error connecting to the multicast addr [ 147.226118][T11584] netlink: 'syz.0.3258': attribute type 1 has an invalid length. [ 147.514717][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 147.539740][T11606] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 147.924027][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3278'. [ 147.974356][T11633] tipc: New replicast peer: 255.255.255.83 [ 147.980265][T11633] tipc: Enabled bearer , priority 10 [ 148.085295][T11642] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3284'. [ 148.166171][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3290'. [ 148.254947][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3298'. [ 148.330215][T11673] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.345650][T11675] loop5: detected capacity change from 0 to 1024 [ 148.355495][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 148.355510][ T29] audit: type=1400 audit(148.338:4970): avc: denied { ioctl } for pid=11676 comm="syz.2.3301" path="socket:[29713]" dev="sockfs" ino=29713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.433111][T11675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.476760][T11675] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 148.503589][ T29] audit: type=1107 audit(148.448:4971): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 148.515981][T11675] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 148.529588][T11675] EXT4-fs (loop5): This should not happen!! Data will be lost [ 148.529588][T11675] [ 148.539435][T11675] EXT4-fs (loop5): Total free blocks count 0 [ 148.545853][T11675] EXT4-fs (loop5): Free/Dirty block details [ 148.552493][T11675] EXT4-fs (loop5): free_blocks=4293918720 [ 148.558268][T11675] EXT4-fs (loop5): dirty_blocks=48 [ 148.563540][T11675] EXT4-fs (loop5): Block reservation details [ 148.569610][T11675] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 148.612209][T10197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.651070][ T29] audit: type=1400 audit(148.628:4972): avc: denied { setopt } for pid=11717 comm="syz.2.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.699328][T11726] IPVS: Error connecting to the multicast addr [ 148.711884][ T29] audit: type=1326 audit(148.688:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 148.734950][ T29] audit: type=1326 audit(148.688:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 148.757918][ T29] audit: type=1326 audit(148.688:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 148.831685][ T29] audit: type=1326 audit(148.748:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 148.835767][T11734] loop5: detected capacity change from 0 to 1024 [ 148.854691][ T29] audit: type=1326 audit(148.748:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.3321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 148.898644][T11739] netlink: 'syz.2.3327': attribute type 3 has an invalid length. [ 148.929131][ T29] audit: type=1326 audit(148.908:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.0.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 148.952858][ T29] audit: type=1326 audit(148.908:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11741 comm="syz.0.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 148.980263][T11734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.020494][T11734] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 149.033719][T11734] EXT4-fs (loop5): This should not happen!! Data will be lost [ 149.033719][T11734] [ 149.043654][T11734] EXT4-fs (loop5): Total free blocks count 0 [ 149.049667][T11734] EXT4-fs (loop5): Free/Dirty block details [ 149.055774][T11734] EXT4-fs (loop5): free_blocks=0 [ 149.060736][T11734] EXT4-fs (loop5): dirty_blocks=0 [ 149.066624][T11734] EXT4-fs (loop5): Block reservation details [ 149.072781][T11734] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 149.099757][T10197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.332367][T11780] netlink: 'syz.1.3345': attribute type 10 has an invalid length. [ 149.340272][T11780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3345'. [ 149.340561][T11768] loop5: detected capacity change from 0 to 8192 [ 149.350499][T11780] batman_adv: batadv0: Adding interface: macvlan0 [ 149.362273][T11780] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.403790][T11780] batman_adv: batadv0: Interface activated: macvlan0 [ 149.620851][T11804] netlink: 'syz.3.3356': attribute type 10 has an invalid length. [ 149.637261][T11804] : (slave bridge0): Enslaving as an active interface with an up link [ 149.656034][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 149.668332][T11804] batadv1: left allmulticast mode [ 149.673432][T11804] batadv1: left promiscuous mode [ 149.678627][T11804] bridge0: port 3(batadv1) entered disabled state [ 149.694790][T11804] bridge_slave_1: left allmulticast mode [ 149.700487][T11804] bridge_slave_1: left promiscuous mode [ 149.706252][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.718733][T11804] bridge_slave_0: left allmulticast mode [ 149.724497][T11804] bridge_slave_0: left promiscuous mode [ 149.730217][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.758899][T11804] : (slave bridge0): Releasing backup interface [ 149.820782][T11821] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3364'. [ 149.844943][T11821] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3364'. [ 150.548822][T11859] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3381'. [ 150.748180][T11869] loop5: detected capacity change from 0 to 512 [ 150.769941][T11869] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 150.808363][T11869] System zones: 0-2, 18-18, 34-34 [ 150.841838][T11869] EXT4-fs (loop5): orphan cleanup on readonly fs [ 150.850411][T11869] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.3386: bad orphan inode 13 [ 150.885080][T11869] ext4_test_bit(bit=12, block=18) = 1 [ 150.890526][T11869] is_bad_inode(inode)=0 [ 150.894783][T11869] NEXT_ORPHAN(inode)=2130706432 [ 150.899747][T11869] max_ino=32 [ 150.903057][T11869] i_nlink=1 [ 150.950337][T11869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.997486][T11869] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 151.008830][T11869] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 151.057743][T11869] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 151.116221][T10197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.205801][T11906] pim6reg1: entered promiscuous mode [ 151.211174][T11906] pim6reg1: entered allmulticast mode [ 151.371089][T11927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.829632][T11974] netem: change failed [ 151.978889][T11978] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 152.106509][T11987] netlink: 'syz.3.3440': attribute type 6 has an invalid length. [ 152.924705][T12057] netlink: 'syz.0.3468': attribute type 3 has an invalid length. [ 153.197862][T12094] rdma_op ffff888124666d80 conn xmit_rdma 0000000000000000 [ 153.596055][T12138] __nla_validate_parse: 8 callbacks suppressed [ 153.596072][T12138] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3502'. [ 154.040067][T12166] syzkaller0: entered promiscuous mode [ 154.045696][T12166] syzkaller0: entered allmulticast mode [ 154.298248][T12187] loop5: detected capacity change from 0 to 128 [ 154.345997][T12187] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.382047][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 154.382062][ T29] audit: type=1400 audit(154.368:5101): avc: denied { mounton } for pid=12186 comm="syz.5.3520" path="/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 154.482035][T12187] loop5: detected capacity change from 128 to 64 [ 154.494751][T12193] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6250: Out of memory [ 154.506228][T12193] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6250: Out of memory [ 154.517556][T12193] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #13: comm syz.5.3520: mark_inode_dirty error [ 154.545672][T12193] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 154.724827][T10716] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.804522][T12199] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 154.986310][ T4379] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.065363][ T4379] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.126157][ T4379] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.176611][ T4379] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.296850][ T4379] bridge_slave_1: left allmulticast mode [ 155.303354][ T4379] bridge_slave_1: left promiscuous mode [ 155.309163][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.344799][ T4379] bridge_slave_0: left allmulticast mode [ 155.351020][ T4379] bridge_slave_0: left promiscuous mode [ 155.356969][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.418078][T12234] netlink: 'syz.0.3540': attribute type 1 has an invalid length. [ 155.426050][T12234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3540'. [ 155.487825][ T29] audit: type=1326 audit(155.468:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.528723][ T29] audit: type=1326 audit(155.498:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.551833][ T29] audit: type=1326 audit(155.508:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.574823][ T29] audit: type=1326 audit(155.508:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.597787][ T29] audit: type=1326 audit(155.508:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.620744][ T29] audit: type=1326 audit(155.508:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.643755][ T29] audit: type=1326 audit(155.508:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.666810][ T29] audit: type=1326 audit(155.508:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.689824][ T29] audit: type=1326 audit(155.508:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 155.718072][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.744742][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.759460][ T4379] bond0 (unregistering): Released all slaves [ 155.789689][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 155.858631][ T4379] hsr_slave_0: left promiscuous mode [ 155.874367][ T4379] hsr_slave_1: left promiscuous mode [ 155.896376][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.903960][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.927228][ T4379] veth1_macvtap: left promiscuous mode [ 155.940433][ T4379] veth0_macvtap: left promiscuous mode [ 155.946115][ T4379] veth1_vlan: left promiscuous mode [ 155.951785][ T4379] veth0_vlan: left promiscuous mode [ 155.980166][T12260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3553'. [ 156.078106][ T4379] team0 (unregistering): Port device team_slave_1 removed [ 156.091878][ T4379] team0 (unregistering): Port device team_slave_0 removed [ 156.267007][T12215] chnl_net:caif_netlink_parms(): no params data found [ 156.409315][T12297] xt_nfacct: accounting object `syz1' does not exists [ 156.444275][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.451399][T12215] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.466227][T12215] bridge_slave_0: entered allmulticast mode [ 156.479203][T12304] netlink: 'syz.2.3568': attribute type 3 has an invalid length. [ 156.482653][T12215] bridge_slave_0: entered promiscuous mode [ 156.504158][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.511329][T12215] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.539032][T12215] bridge_slave_1: entered allmulticast mode [ 156.551187][T12215] bridge_slave_1: entered promiscuous mode [ 156.606014][T12215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.637263][T12215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.673612][T12215] team0: Port device team_slave_0 added [ 156.681006][T12215] team0: Port device team_slave_1 added [ 156.715554][T12215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.722613][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.749431][T12215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.784864][T12215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.791917][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.818809][T12215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.972567][T12215] hsr_slave_0: entered promiscuous mode [ 156.978987][T12215] hsr_slave_1: entered promiscuous mode [ 156.986689][T12215] debugfs: 'hsr0' already exists in 'hsr' [ 156.992497][T12215] Cannot create hsr debugfs directory [ 157.144883][T12215] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.163767][T12215] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.183768][T12215] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.192668][T12215] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.293947][T12215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.310068][T12215] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.329000][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.336177][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.348052][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.355229][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.403564][T12344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3584'. [ 157.496283][T12215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.516524][T12354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3587'. [ 157.529333][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3588'. [ 157.538429][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3588'. [ 157.775545][T12391] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 157.785997][T12215] veth0_vlan: entered promiscuous mode [ 157.799108][T12215] veth1_vlan: entered promiscuous mode [ 157.818255][T12215] veth0_macvtap: entered promiscuous mode [ 157.827488][T12215] veth1_macvtap: entered promiscuous mode [ 157.841544][T12215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.864774][T12215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.873674][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'. [ 157.887252][T12215] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.896216][T12215] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.905014][T12215] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.913846][T12215] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.930764][T12398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12398 comm=syz.0.3601 [ 157.973168][T12398] netlink: 'syz.0.3601': attribute type 1 has an invalid length. [ 158.014510][T12398] bond3: (slave bridge0): making interface the new active one [ 158.022613][T12398] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 158.106026][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3533'. [ 158.146380][T12419] ref_ctr_offset mismatch. inode: 0x7f0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x43414d20 [ 158.372611][T12444] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.442140][T12456] netlink: 'syz.2.3625': attribute type 10 has an invalid length. [ 158.455143][T12444] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.478866][T12456] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.487213][T12456] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.495518][T12456] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.503784][T12456] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.515740][T12456] team0: Port device geneve1 added [ 158.547950][T12444] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.621423][T12468] SELinux: ebitmap: truncated map [ 158.629784][T12468] SELinux: failed to load policy [ 158.654377][T12444] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.673546][T12474] __nla_validate_parse: 3 callbacks suppressed [ 158.673564][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3634'. [ 158.689057][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3634'. [ 158.790130][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3634'. [ 158.799255][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3634'. [ 158.860165][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3634'. [ 158.869292][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3634'. [ 159.079690][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'. [ 159.089545][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'. [ 159.285698][T12549] netlink: 'syz.0.3664': attribute type 1 has an invalid length. [ 159.350249][T12557] netlink: 'syz.2.3668': attribute type 3 has an invalid length. [ 159.377780][T12555] pim6reg1: entered promiscuous mode [ 159.384165][T12555] pim6reg1: entered allmulticast mode [ 159.638229][T12583] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 159.671307][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 159.750296][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 159.750395][ T29] audit: type=1326 audit(159.728:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.804433][ T29] audit: type=1326 audit(159.768:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.827535][ T29] audit: type=1326 audit(159.768:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.850720][ T29] audit: type=1326 audit(159.768:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.873787][ T29] audit: type=1326 audit(159.768:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.896723][ T29] audit: type=1326 audit(159.768:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.919709][ T29] audit: type=1326 audit(159.768:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.942632][ T29] audit: type=1326 audit(159.768:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.965628][ T29] audit: type=1326 audit(159.768:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 159.988662][ T29] audit: type=1326 audit(159.768:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.1.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 160.290182][T12444] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.309437][T12444] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.325563][T12444] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.338303][T12444] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.465483][T12647] netlink: 'syz.6.3708': attribute type 1 has an invalid length. [ 160.492574][T12645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3705'. [ 160.549419][T12652] vhci_hcd: invalid port number 96 [ 160.554676][T12652] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 160.611995][T12663] 9pnet: Could not find request transport: r [ 160.928942][T12715] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12715 comm=syz.1.3736 [ 160.941707][T12715] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12715 comm=syz.1.3736 [ 161.479174][T12779] IPVS: Error connecting to the multicast addr [ 161.663665][T12805] IPVS: Error connecting to the multicast addr [ 161.972271][T12848] loop6: detected capacity change from 0 to 1024 [ 161.979873][T12848] EXT4-fs: Ignoring removed orlov option [ 162.012769][T12849] netlink: 'syz.0.3796': attribute type 13 has an invalid length. [ 162.025650][T12848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.047980][T12849] 0ªX¹¦D: refused to change device tx_queue_len [ 162.057289][T12849] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 162.122092][T12848] EXT4-fs (loop6): shut down requested (0) [ 162.158027][T12848] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 162.167975][T12848] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 162.204605][T12848] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 162.244163][T12215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.294307][T12881] loop6: detected capacity change from 0 to 512 [ 162.300860][T12881] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.320563][T12881] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 162.332390][T12881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 162.340383][T12881] System zones: 1-12 [ 162.350742][T12881] EXT4-fs (loop6): 1 truncate cleaned up [ 162.361118][T12881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.547288][T12215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.758114][T12941] loop6: detected capacity change from 0 to 512 [ 162.787274][T12941] EXT4-fs (loop6): too many log groups per flexible block group [ 162.795229][T12941] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 162.814311][T12941] EXT4-fs (loop6): mount failed [ 163.155649][T12992] pim6reg1: entered allmulticast mode [ 163.388526][T13015] block device autoloading is deprecated and will be removed. [ 163.693245][T13044] ÿ: renamed from team_slave_1 [ 163.840557][T13054] netlink: 'syz.6.3883': attribute type 3 has an invalid length. [ 163.871827][T13054] netlink: 'syz.6.3883': attribute type 3 has an invalid length. [ 164.012485][T13064] __nla_validate_parse: 27 callbacks suppressed [ 164.012538][T13064] netlink: 372 bytes leftover after parsing attributes in process `syz.6.3890'. [ 164.128946][ T7372] kernel write not supported for file /95/loginuid (pid: 7372 comm: kworker/0:7) [ 164.277403][T13082] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.392264][T13082] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.440321][T13082] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.503278][T13082] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.567997][T13082] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.605467][T13082] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.624774][T13082] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.644534][T13082] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.841367][T13109] xt_CT: No such helper "pptp" [ 164.934814][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 165.016667][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 165.028426][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 165.037886][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 165.055402][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 165.169492][T13140] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 165.207884][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3923'. [ 165.350106][T13147] loop6: detected capacity change from 0 to 8192 [ 165.368196][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3931'. [ 165.397221][T13160] batadv1: left allmulticast mode [ 165.402472][T13160] batadv1: left promiscuous mode [ 165.407659][T13160] bridge0: port 4(batadv1) entered disabled state [ 165.432537][T13160] dummy0: left allmulticast mode [ 165.442891][T13160] bridge0: port 3(dummy0) entered disabled state [ 165.460897][T13160] bridge_slave_1: left allmulticast mode [ 165.466788][T13160] bridge_slave_1: left promiscuous mode [ 165.473342][T13160] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.494081][T13160] bridge_slave_0: left allmulticast mode [ 165.499766][T13160] bridge_slave_0: left promiscuous mode [ 165.506285][T13160] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.669187][T13174] loop0: detected capacity change from 0 to 1024 [ 165.724619][T13174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.739838][T13187] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.747144][T13187] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.756709][T13174] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 47 with max blocks 1 with error 28 [ 165.769278][T13174] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.769278][T13174] [ 165.779079][T13174] EXT4-fs (loop0): Total free blocks count 0 [ 165.785298][T13174] EXT4-fs (loop0): Free/Dirty block details [ 165.791216][T13174] EXT4-fs (loop0): free_blocks=0 [ 165.796258][T13174] EXT4-fs (loop0): dirty_blocks=0 [ 165.801410][T13174] EXT4-fs (loop0): Block reservation details [ 165.802576][T13187] bridge_slave_1: left allmulticast mode [ 165.807446][T13174] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 165.811742][T13189] xt_CT: No such helper "pptp" [ 165.813985][T13187] bridge_slave_1: left promiscuous mode [ 165.829613][T13187] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.853900][T13187] bridge_slave_0: left allmulticast mode [ 165.859602][T13187] bridge_slave_0: left promiscuous mode [ 165.865548][T13187] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.882689][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.883374][T13195] netlink: 'syz.3.3944': attribute type 10 has an invalid length. [ 165.952439][T13198] netlink: 'syz.3.3944': attribute type 10 has an invalid length. [ 166.106293][T13216] netlink: 'syz.2.3952': attribute type 4 has an invalid length. [ 166.412438][T13260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13260 comm=syz.1.3968 [ 166.439687][T13267] netlink: 'syz.3.3974': attribute type 10 has an invalid length. [ 166.449147][T13267] netlink: 'syz.3.3974': attribute type 10 has an invalid length. [ 166.565255][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 166.565273][ T29] audit: type=1326 audit(166.548:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13283 comm="syz.6.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 166.609376][ T29] audit: type=1326 audit(166.578:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13283 comm="syz.6.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 166.632343][ T29] audit: type=1326 audit(166.578:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13283 comm="syz.6.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 166.893592][ T29] audit: type=1404 audit(166.848:5378): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 166.908140][ T29] audit: type=1404 audit(166.868:5379): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 166.935678][ T29] audit: type=1400 audit(166.888:5380): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.958564][ T29] audit: type=1400 audit(166.888:5381): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.981224][ T29] audit: type=1400 audit(166.888:5382): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=623 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.005318][ T29] audit: type=1400 audit(166.888:5383): avc: denied { map_create } for pid=13300 comm="syz.6.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.024044][ T29] audit: type=1400 audit(166.888:5384): avc: denied { perfmon } for pid=13300 comm="syz.6.3988" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.063112][T13301] loop6: detected capacity change from 0 to 512 [ 167.074624][T13301] EXT4-fs (loop6): orphan cleanup on readonly fs [ 167.081096][T13325] Cannot find add_set index 0 as target [ 167.083985][T13301] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3988: bg 0: block 248: padding at end of block bitmap is not set [ 167.114494][T13301] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3988: Failed to acquire dquot type 1 [ 167.149481][T13301] EXT4-fs (loop6): 1 truncate cleaned up [ 167.167895][T13301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.321495][T12215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.356543][T13343] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 167.366573][T13343] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 167.780224][T13378] loop6: detected capacity change from 0 to 164 [ 167.789729][T13378] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 168.023449][T13363] Set syz1 is full, maxelem 65536 reached [ 168.208657][T13395] macvlan1: entered promiscuous mode [ 168.225218][T13395] ipvlan0: entered promiscuous mode [ 168.236210][T13395] ipvlan0: left promiscuous mode [ 168.251247][T13395] macvlan1: left promiscuous mode [ 168.458534][T13414] loop6: detected capacity change from 0 to 512 [ 168.484523][T13414] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.4038: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 168.506509][T13414] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.4038: Bad quota inode: 3, type: 0 [ 168.520630][T13414] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 168.535802][T13414] EXT4-fs (loop6): mount failed [ 168.719764][T13448] tipc: Failed to remove unknown binding: 66,1,1/0:1374558752/1374558754 [ 168.729278][T13448] tipc: Failed to remove unknown binding: 66,1,1/0:1374558752/1374558754 [ 168.764712][T13453] hsr_slave_0: left promiscuous mode [ 168.779561][T13453] hsr_slave_1: left promiscuous mode [ 169.019169][T13481] tipc: Failed to remove unknown binding: 66,1,1/0:4098020112/4098020114 [ 169.028482][T13481] tipc: Failed to remove unknown binding: 66,1,1/0:4098020112/4098020114 [ 169.215665][T13499] 9pnet_fd: Insufficient options for proto=fd [ 169.778886][T13548] netlink: 'syz.0.4092': attribute type 10 has an invalid length. [ 169.786838][T13548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4092'. [ 169.823822][T13548] dummy0: entered promiscuous mode [ 169.838091][T13548] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 169.878871][T13553] loop6: detected capacity change from 0 to 512 [ 169.894152][T13556] loop0: detected capacity change from 0 to 1024 [ 169.902070][T13553] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.912248][T13553] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 169.924601][T13556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.950691][T13553] EXT4-fs (loop6): 1 truncate cleaned up [ 169.965006][T13553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.003182][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.068921][T12215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.193108][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4098'. [ 170.216601][T13568] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 170.286002][T13573] netlink: 'syz.3.4101': attribute type 1 has an invalid length. [ 170.293873][T13573] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4101'. [ 170.370493][T13575] netlink: 'syz.3.4102': attribute type 3 has an invalid length. [ 170.501338][T13586] loop0: detected capacity change from 0 to 128 [ 170.532105][T13586] EXT4-fs: Ignoring removed nobh option [ 170.550733][T13586] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.686867][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.698633][T13613] xt_hashlimit: size too large, truncated to 1048576 [ 170.854574][T13623] SELinux: failed to load policy [ 170.959534][T13637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13637 comm=syz.0.4130 [ 170.982504][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4130'. [ 171.091551][T13652] loop6: detected capacity change from 0 to 764 [ 171.101050][T13652] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 171.229165][T13678] SELinux: security policydb version 18 (MLS) not backwards compatible [ 171.237846][T13678] SELinux: failed to load policy [ 171.357760][T13697] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4154'. [ 171.366970][T13697] unsupported nla_type 65024 [ 171.368905][T13698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13698 comm=syz.2.4150 [ 171.386986][T13698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4150'. [ 171.574645][T13723] netlink: 620 bytes leftover after parsing attributes in process `syz.6.4164'. [ 171.585107][T13724] netem: incorrect gi model size [ 171.590098][T13724] netem: change failed [ 171.738774][T13730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.754237][T13730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.788532][T13730] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.797226][T13730] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.805924][T13730] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.814434][T13730] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.224514][T13755] netlink: 'syz.2.4176': attribute type 6 has an invalid length. [ 172.262108][T13762] loop6: detected capacity change from 0 to 1024 [ 172.269296][T13762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.277900][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 172.277921][ T29] audit: type=1326 audit(172.238:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.307278][ T29] audit: type=1326 audit(172.238:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.330306][ T29] audit: type=1326 audit(172.238:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.353248][ T29] audit: type=1326 audit(172.238:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.376255][ T29] audit: type=1326 audit(172.238:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.399296][ T29] audit: type=1326 audit(172.238:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.422346][ T29] audit: type=1326 audit(172.238:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.445278][ T29] audit: type=1326 audit(172.238:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.468262][ T29] audit: type=1326 audit(172.238:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.491187][ T29] audit: type=1326 audit(172.238:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13761 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 172.517049][T13766] netlink: 'syz.1.4181': attribute type 17 has an invalid length. [ 172.526281][T13766] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4181'. [ 172.555758][T13766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.592277][T13762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.706869][T12215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.730946][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4186'. [ 172.740650][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4186'. [ 173.176439][T13817] syzkaller0: entered promiscuous mode [ 173.182169][T13817] syzkaller0: entered allmulticast mode [ 173.439739][T13837] SELinux: ebitmap: truncated map [ 173.477409][T13837] SELinux: failed to load policy [ 173.554780][T13854] syz_tun: entered allmulticast mode [ 173.563464][T13854] syz_tun: left allmulticast mode [ 174.335906][T13929] batadv_slave_1: entered promiscuous mode [ 174.353600][T13929] batadv_slave_1: left promiscuous mode [ 174.572043][T13948] tipc: Started in network mode [ 174.576970][T13948] tipc: Node identity ac141413, cluster identity 4711 [ 174.625392][T13948] tipc: New replicast peer: 10.1.1.2 [ 174.630886][T13948] tipc: Enabled bearer , priority 10 [ 174.741037][T13960] loop6: detected capacity change from 0 to 8192 [ 174.820183][T13974] gtp0: entered promiscuous mode [ 174.836712][T13980] __nla_validate_parse: 3 callbacks suppressed [ 174.836797][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4273'. [ 174.901390][T13985] vlan0: entered allmulticast mode [ 174.911737][T13985] dummy0: entered allmulticast mode [ 175.116967][T14001] loop0: detected capacity change from 0 to 1024 [ 175.125056][T14001] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 175.136298][T14001] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.151194][T14001] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 175.152070][T14002] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 175.161378][T14001] EXT4-fs (loop0): orphan cleanup on readonly fs [ 175.177034][T14001] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.4277: Inode bitmap for bg 0 marked uninitialized [ 175.224030][T14001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.288040][T13988] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 175.316087][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.414040][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'. [ 175.453488][T14034] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4294'. [ 175.763709][ T7394] tipc: Node number set to 2886997011 [ 175.786682][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4310'. [ 175.981270][T14093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4320'. [ 176.062277][T14099] syzkaller0: entered allmulticast mode [ 176.075102][T14099] syzkaller0 (unregistering): left allmulticast mode [ 176.249887][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4333'. [ 176.666199][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4345'. [ 176.951276][T14153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14153 comm=syz.3.4349 [ 177.194349][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4358'. [ 177.242155][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4358'. [ 177.282604][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 177.282697][ T29] audit: type=1326 audit(177.268:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.3.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 177.312675][ T29] audit: type=1326 audit(177.268:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.3.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 177.336102][ T29] audit: type=1326 audit(177.268:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.3.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 177.360050][ T29] audit: type=1326 audit(177.268:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.3.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 177.444774][ T29] audit: type=1400 audit(177.388:5876): avc: denied { create } for pid=14188 comm="syz.6.4366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.597830][ T29] audit: type=1400 audit(177.578:5877): avc: denied { mounton } for pid=14202 comm="syz.2.4372" path="/file0" dev="rootfs" ino=36821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 177.698876][ T29] audit: type=1400 audit(177.618:5878): avc: denied { associate } for pid=14206 comm="syz.2.4372" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 177.889091][ T29] audit: type=1326 audit(177.868:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14216 comm="syz.0.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 177.981508][ T29] audit: type=1326 audit(177.898:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14216 comm="syz.0.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 178.005616][ T29] audit: type=1326 audit(177.898:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14216 comm="syz.0.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11125e9a9 code=0x7ffc0000 [ 178.214164][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4385'. [ 178.650701][T14271] Cannot find set identified by id 0 to match [ 179.422309][T14332] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.430747][T14332] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.439268][T14332] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.447737][T14332] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.664579][T14347] loop6: detected capacity change from 0 to 1024 [ 179.688352][T14347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.737058][T14347] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 179.753101][T14347] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28 [ 179.765626][T14347] EXT4-fs (loop6): This should not happen!! Data will be lost [ 179.765626][T14347] [ 179.775329][T14347] EXT4-fs (loop6): Total free blocks count 0 [ 179.781344][T14347] EXT4-fs (loop6): Free/Dirty block details [ 179.788080][T14347] EXT4-fs (loop6): free_blocks=4293918720 [ 179.793945][T14347] EXT4-fs (loop6): dirty_blocks=48 [ 179.799085][T14347] EXT4-fs (loop6): Block reservation details [ 179.805123][T14347] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 179.860446][ T4426] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28 [ 179.919281][T14361] loop6: detected capacity change from 0 to 128 [ 179.935730][T14361] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.967269][T14365] __nla_validate_parse: 5 callbacks suppressed [ 179.967288][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 179.982870][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4441'. [ 179.992971][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 180.002725][T14361] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.025800][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4441'. [ 180.034937][T14365] netlink: 'syz.1.4441': attribute type 6 has an invalid length. [ 180.084769][ T4379] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.095756][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4442'. [ 180.856508][T14389] loop6: detected capacity change from 0 to 512 [ 180.882764][T14389] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.907333][T14389] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.954196][T14389] EXT4-fs (loop6): 1 truncate cleaned up [ 180.984864][T14389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.985186][T14404] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 181.027762][T14406] loop0: detected capacity change from 0 to 2048 [ 181.035347][T14406] EXT4-fs: Ignoring removed nobh option [ 181.053297][T14406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.090012][T12215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.127974][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.154819][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4462'. [ 181.335051][T14421] syzkaller0: entered promiscuous mode [ 181.340587][T14421] syzkaller0: entered allmulticast mode [ 181.510926][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4473'. [ 181.519984][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 181.559863][T14442] loop0: detected capacity change from 0 to 2048 [ 181.576221][T14442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.864955][T14461] sctp: [Deprecated]: syz.1.4483 (pid 14461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.864955][T14461] Use struct sctp_sack_info instead [ 181.922856][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.539101][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 182.703180][T14536] tipc: Started in network mode [ 182.708242][T14536] tipc: Node identity ac14140f, cluster identity 4711 [ 182.731843][T14536] tipc: New replicast peer: 255.255.255.83 [ 182.737931][T14536] tipc: Enabled bearer , priority 10 [ 182.983449][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 182.983504][ T29] audit: type=1326 audit(182.968:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.052096][ T29] audit: type=1326 audit(182.998:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.075049][ T29] audit: type=1326 audit(182.998:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.097966][ T29] audit: type=1326 audit(182.998:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.120934][ T29] audit: type=1326 audit(182.998:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.144008][ T29] audit: type=1326 audit(182.998:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.166992][ T29] audit: type=1326 audit(182.998:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.189953][ T29] audit: type=1326 audit(182.998:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.212893][ T29] audit: type=1326 audit(182.998:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.236054][ T29] audit: type=1326 audit(182.998:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.3.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 183.367789][T14549] sctp: [Deprecated]: syz.0.4522 (pid 14549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.367789][T14549] Use struct sctp_sack_info instead [ 183.565672][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4528'. [ 183.690020][T14574] loop0: detected capacity change from 0 to 512 [ 183.806363][T14574] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.4531: iget: bad i_size value: 38620345925642 [ 183.819537][T14574] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4531: couldn't read orphan inode 15 (err -117) [ 183.835065][T14574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.861723][ T7394] tipc: Node number set to 2886997007 [ 183.906814][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.547829][T14641] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 184.630854][T14653] netlink: 'syz.3.4568': attribute type 10 has an invalid length. [ 185.219767][T14720] __nla_validate_parse: 2 callbacks suppressed [ 185.219788][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4597'. [ 185.281766][T14720] batman_adv: batadv0: Interface deactivated: macvlan0 [ 185.291914][T14720] batman_adv: batadv0: Removing interface: macvlan0 [ 185.334578][T14733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4604'. [ 185.390663][T14735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4605'. [ 185.406246][T14738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4606'. [ 185.415382][T14738] netlink: 'syz.1.4606': attribute type 7 has an invalid length. [ 185.423190][T14738] netlink: 'syz.1.4606': attribute type 8 has an invalid length. [ 185.430910][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4606'. [ 185.698761][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4615'. [ 185.779610][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4621'. [ 185.938076][T14788] xt_hashlimit: max too large, truncated to 1048576 [ 185.988799][T14798] macvlan2: entered promiscuous mode [ 185.995813][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4629'. [ 186.006834][T14798] bond0: (slave macvlan2): Enslaving as an active interface with a down link [ 186.040954][T14798] macvlan3: entered promiscuous mode [ 186.049076][T14798] bond0: (slave macvlan3): Enslaving as an active interface with a down link [ 186.148634][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4639'. [ 186.519627][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4650'. [ 186.537633][T14838] team0: Port device vlan0 removed [ 186.547554][T14837] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 186.574019][T14837] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 186.586495][T14837] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.596038][T14837] Buffer I/O error on dev loop7, logical block 480, async page read [ 186.646489][T14836] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 186.657058][T14836] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 186.665475][T14836] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 186.673868][T14836] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 186.683070][T14836] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 186.691479][T14836] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 186.699898][T14836] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 186.708567][T14836] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 186.717552][T14836] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 186.725986][T14836] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 186.804817][T14836] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 186.834661][T14836] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 186.855906][T14836] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 187.295704][T14882] bond0: (slave macvlan2): Releasing active interface [ 187.314829][T14882] bond0: (slave macvlan3): Releasing active interface [ 187.551566][T14908] netlink: 'syz.1.4684': attribute type 1 has an invalid length. [ 187.679645][T14927] xt_hashlimit: size too large, truncated to 1048576 [ 187.715520][T14932] Set syz1 is full, maxelem 65536 reached [ 188.128127][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 188.128142][ T29] audit: type=1400 audit(188.108:6210): avc: denied { connect } for pid=14962 comm="syz.0.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.181169][ T29] audit: type=1400 audit(188.138:6211): avc: denied { bind } for pid=14962 comm="syz.0.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.346014][T14979] loop6: detected capacity change from 0 to 1024 [ 188.352868][ T29] audit: type=1326 audit(188.328:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.3.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 188.375957][ T29] audit: type=1326 audit(188.328:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.3.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 188.399064][ T29] audit: type=1326 audit(188.328:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.3.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 188.422151][ T29] audit: type=1326 audit(188.328:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.3.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 188.445616][ T29] audit: type=1326 audit(188.328:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.3.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 188.468701][ T29] audit: type=1326 audit(188.328:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.3.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 188.491788][ T29] audit: type=1326 audit(188.328:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.3.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 188.514738][ T29] audit: type=1326 audit(188.328:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.3.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b2796e9a9 code=0x7ffc0000 [ 188.515839][T14979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.559802][T14979] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: comm syz.6.4713: lblock 0 mapped to illegal pblock 0 (length 5) [ 188.573587][T14979] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 188.586034][T14979] EXT4-fs (loop6): This should not happen!! Data will be lost [ 188.586034][T14979] [ 188.614779][T12215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.636045][T14997] loop0: detected capacity change from 0 to 128 [ 188.669293][T14999] syzkaller1: entered promiscuous mode [ 188.674849][T14999] syzkaller1: entered allmulticast mode [ 189.328450][T15045] pim6reg: entered allmulticast mode [ 189.350481][T15045] pim6reg: left allmulticast mode [ 189.758950][T15085] loop0: detected capacity change from 0 to 512 [ 189.792072][T15085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.809165][T15085] EXT4-fs: inline encryption not supported [ 189.815159][T15085] EXT4-fs: Ignoring removed bh option [ 189.831747][T15085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.849008][T15085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.872741][T15085] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 190.124926][T15108] vlan0: entered allmulticast mode [ 190.130082][T15108] bridge_slave_0: entered allmulticast mode [ 190.515025][T15143] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 190.922919][T15172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.053968][T15185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15185 comm=syz.3.4797 [ 191.066724][T15185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15185 comm=syz.3.4797 [ 191.259072][T15194] sctp: [Deprecated]: syz.2.4800 (pid 15194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.259072][T15194] Use struct sctp_sack_info instead [ 191.586030][T15214] __nla_validate_parse: 8 callbacks suppressed [ 191.586049][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4809'. [ 191.731448][T15223] IPVS: Error connecting to the multicast addr [ 191.825045][T15229] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4816'. [ 192.022783][T15242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4822'. [ 192.156397][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4824'. [ 192.343730][T15276] netlink: 'syz.3.4835': attribute type 1 has an invalid length. [ 192.374115][T15276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.399389][T15276] bond2: (slave veth3): Enslaving as an active interface with a down link [ 192.457339][T15276] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 192.467907][T15276] bond2: (slave batadv2): making interface the new active one [ 192.478187][T15276] batadv2: entered promiscuous mode [ 192.483696][T15276] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 192.531252][T15288] netlink: 'syz.3.4841': attribute type 5 has an invalid length. [ 192.543348][T15288] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.551746][T15288] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.560018][T15288] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.569369][T15288] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.619215][T15288] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.628427][T15288] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.636976][T15288] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.645422][T15288] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.746891][T15333] uprobe: syz.0.4859:15333 failed to unregister, leaking uprobe [ 193.843322][T15332] uprobe: syz.0.4859:15332 failed to unregister, leaking uprobe [ 194.033146][T15353] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.4862'. [ 194.042395][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4862'. [ 194.158757][T15372] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4876'. [ 194.238059][T15381] loop6: detected capacity change from 0 to 512 [ 194.259017][T15381] journal_path: Lookup failure for './file0/../file0' [ 194.265926][T15381] EXT4-fs: error: could not find journal device path [ 194.293048][T15381] bond1: entered promiscuous mode [ 194.298297][T15381] bond1: entered allmulticast mode [ 194.303712][T15381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.315510][T15381] bond1 (unregistering): Released all slaves [ 194.327105][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4894'. [ 194.364765][T15399] netlink: 'syz.3.4886': attribute type 3 has an invalid length. [ 194.823188][T15429] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4899'. [ 194.923779][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 194.923796][ T29] audit: type=1326 audit(194.908:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.4903" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f0198e9a9 code=0x0 [ 195.153187][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4910'. [ 195.169628][T15456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.180888][T15456] vlan0: entered allmulticast mode [ 195.186106][T15456] bond0: entered allmulticast mode [ 195.632235][ T29] audit: type=1400 audit(195.608:6603): avc: denied { execute } for pid=15497 comm="syz.2.4930" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=41020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.713105][ T29] audit: type=1326 audit(195.698:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 195.736366][ T29] audit: type=1326 audit(195.698:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 195.764953][ T29] audit: type=1326 audit(195.738:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 195.788733][ T29] audit: type=1326 audit(195.738:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 195.812380][ T29] audit: type=1326 audit(195.738:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 195.835318][ T29] audit: type=1326 audit(195.748:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 195.859065][ T29] audit: type=1326 audit(195.748:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 195.882648][ T29] audit: type=1326 audit(195.748:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 195.984609][T15522] pim6reg: entered allmulticast mode [ 196.004122][T15522] pim6reg: left allmulticast mode [ 196.179237][T15545] ip6gre2: entered allmulticast mode [ 196.567792][T15582] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 196.846194][T15594] __nla_validate_parse: 5 callbacks suppressed [ 196.846212][T15594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4973'. [ 197.603730][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4983'. [ 197.612776][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4983'. [ 197.621838][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4983'. [ 197.650155][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4983'. [ 197.799419][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4985'. [ 198.631176][T15676] netlink: 'syz.3.5004': attribute type 13 has an invalid length. [ 198.710784][T15680] tipc: Enabled bearer , priority 0 [ 198.796533][T15680] tipc: Disabling bearer [ 198.994541][T15694] loop0: detected capacity change from 0 to 512 [ 199.034951][T15694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.077454][T15694] EXT4-fs (loop0): 1 truncate cleaned up [ 199.083885][T15694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.120123][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.183479][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5022'. [ 199.192510][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5022'. [ 199.223855][T15719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5024'. [ 199.245949][T15719] netlink: 5448 bytes leftover after parsing attributes in process `syz.2.5024'. [ 199.345261][T15731] sctp: [Deprecated]: syz.0.5030 (pid 15731) Use of int in max_burst socket option deprecated. [ 199.345261][T15731] Use struct sctp_assoc_value instead [ 199.372731][T15733] vlan0: entered allmulticast mode [ 199.378007][T15733] bridge_slave_0: entered allmulticast mode [ 199.424078][T15745] netlink: 'syz.0.5036': attribute type 12 has an invalid length. [ 199.771803][T15780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15780 comm=syz.6.5050 [ 199.805325][T15783] lo: Caught tx_queue_len zero misconfig [ 199.950858][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 199.950883][ T29] audit: type=1400 audit(199.928:6944): avc: denied { create } for pid=15794 comm="syz.6.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.980239][ T29] audit: type=1400 audit(199.958:6945): avc: denied { write } for pid=15794 comm="syz.6.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.999627][ T29] audit: type=1400 audit(199.958:6946): avc: denied { ioctl } for pid=15794 comm="syz.6.5057" path="socket:[42179]" dev="sockfs" ino=42179 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 200.024733][ T29] audit: type=1400 audit(199.958:6947): avc: denied { write } for pid=15794 comm="syz.6.5057" name="kcm" dev="proc" ino=4026533208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 200.220572][T15813] wg2: entered promiscuous mode [ 200.225558][T15813] wg2: entered allmulticast mode [ 200.373300][T15837] SELinux: failed to load policy [ 200.378620][T15835] tipc: Enabling of bearer rejected, failed to enable media [ 200.405826][ T29] audit: type=1400 audit(200.388:6948): avc: denied { read } for pid=15844 comm="syz.6.5079" dev="sockfs" ino=41521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.871180][T15885] loop0: detected capacity change from 0 to 2048 [ 200.920887][T15885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.072493][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.092173][ T29] audit: type=1326 audit(201.078:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15903 comm="syz.6.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 201.130480][ T29] audit: type=1326 audit(201.078:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15903 comm="syz.6.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 201.154227][ T29] audit: type=1326 audit(201.078:6951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15903 comm="syz.6.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 201.177275][ T29] audit: type=1326 audit(201.078:6952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15903 comm="syz.6.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 201.201265][ T29] audit: type=1326 audit(201.098:6953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15903 comm="syz.6.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0198e9a9 code=0x7ffc0000 [ 201.530068][T15936] loop6: detected capacity change from 0 to 512 [ 201.537307][T15936] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 201.569272][T15936] EXT4-fs (loop6): 1 truncate cleaned up [ 201.579943][T15936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.643891][T15936] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 201.643891][T15936] program syz.6.5117 not setting count and/or reply_len properly [ 201.674745][T15943] batadv2: entered promiscuous mode [ 201.680037][T15943] batadv2: entered allmulticast mode [ 201.687796][T12215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.849625][T15962] tipc: New replicast peer: 255.255.255.255 [ 201.855951][T15962] tipc: Enabled bearer , priority 10 [ 201.901264][T15964] __nla_validate_parse: 4 callbacks suppressed [ 201.901279][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5130'. [ 201.916625][T15964] netlink: 'syz.2.5130': attribute type 7 has an invalid length. [ 201.924496][T15964] netlink: 'syz.2.5130': attribute type 8 has an invalid length. [ 201.932279][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5130'. [ 201.949508][T15970] batman_adv: batadv0: Adding interface: ipvlan2 [ 201.956803][T15970] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.982329][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.993788][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.012395][T15970] batman_adv: batadv0: Interface activated: ipvlan2 [ 202.038099][T15974] hub 9-0:1.0: USB hub found [ 202.054587][T15974] hub 9-0:1.0: 8 ports detected [ 202.557855][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5158'. [ 202.567509][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5158'. [ 202.635107][T16041] rdma_op ffff8881034c9980 conn xmit_rdma 0000000000000000 [ 202.862540][T16055] $Hÿ: renamed from bond0 [ 202.868397][T16055] $Hÿ: entered promiscuous mode [ 202.873587][T16055] bond_slave_0: entered promiscuous mode [ 202.879308][T16055] bond_slave_1: entered promiscuous mode [ 202.919376][T16059] netlink: 'syz.1.5170': attribute type 1 has an invalid length. [ 202.965012][T16059] bond1: (slave veth9): Enslaving as an active interface with a down link [ 202.989367][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5173'. [ 203.152802][T16080] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 203.181060][T16080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.241429][T16080] bond2: (slave veth17): Enslaving as an active interface with a down link [ 203.260532][T16091] dummy0: left promiscuous mode [ 203.274860][T16091] bond2: (slave dummy0): making interface the new active one [ 203.294008][T16091] dummy0: entered promiscuous mode [ 203.299340][T16094] loop6: detected capacity change from 0 to 256 [ 203.299405][T16091] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 203.681936][T16127] team0 (unregistering): Port device team_slave_0 removed [ 203.690148][T16127] team0 (unregistering): Port device 7ÿ removed [ 203.702176][T16127] team0 (unregistering): Port device geneve1 removed [ 203.868152][T16145] netlink: 'syz.3.5207': attribute type 10 has an invalid length. [ 203.881112][T16145] ipvlan0: entered allmulticast mode [ 203.887210][T16145] veth0_vlan: entered allmulticast mode [ 203.896755][T16145] team0: Device ipvlan0 failed to register rx_handler [ 203.926582][T16151] netlink: 'syz.3.5210': attribute type 1 has an invalid length. [ 203.934494][T16151] netlink: 'syz.3.5210': attribute type 4 has an invalid length. [ 203.942276][T16151] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5210'. [ 203.959324][T16151] netlink: 'syz.3.5210': attribute type 1 has an invalid length. [ 203.967167][T16151] netlink: 'syz.3.5210': attribute type 4 has an invalid length. [ 203.974990][T16151] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5210'. [ 204.008549][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5212'. [ 204.040734][T16156] team1: entered promiscuous mode [ 204.046081][T16156] team1: entered allmulticast mode [ 204.142202][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5218'. [ 204.890994][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5242'. [ 205.106350][ T29] kauditd_printk_skb: 1112 callbacks suppressed [ 205.106373][ T29] audit: type=1400 audit(205.078:8066): avc: denied { read } for pid=16242 comm="syz.3.5250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 205.259353][T16253] team1: entered promiscuous mode [ 205.279455][T16253] team1: entered allmulticast mode [ 206.699945][ T29] audit: type=1326 audit(206.678:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 206.723197][ T29] audit: type=1326 audit(206.678:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 206.752984][ T29] audit: type=1326 audit(206.728:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 206.775509][ T29] audit: type=1326 audit(206.728:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 206.798914][ T29] audit: type=1326 audit(206.728:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 206.821441][ T29] audit: type=1326 audit(206.728:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 206.967138][ T29] audit: type=1326 audit(206.738:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f5ed121e9a9 code=0x7ffc0000 [ 207.137409][T16425] veth1_to_bond: entered allmulticast mode [ 207.155443][T16425] veth1_to_bond: left allmulticast mode [ 207.182300][ T29] audit: type=1326 audit(207.158:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16427 comm="syz.1.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 207.206065][ T29] audit: type=1326 audit(207.158:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16427 comm="syz.1.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f733e6be9a9 code=0x7ffc0000 [ 207.528128][T16422] ================================================================== [ 207.536282][T16422] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 207.543248][T16422] [ 207.545605][T16422] read-write to 0xffff8881198f466c of 4 bytes by task 16431 on cpu 1: [ 207.553792][T16422] fifo_open+0x17f/0x5d0 [ 207.558073][T16422] do_dentry_open+0x646/0xa20 [ 207.562779][T16422] vfs_open+0x37/0x1e0 [ 207.566869][T16422] path_openat+0x1c5e/0x2170 [ 207.571489][T16422] do_filp_open+0x109/0x230 [ 207.576017][T16422] do_sys_openat2+0xa6/0x110 [ 207.580630][T16422] __x64_sys_open+0xe6/0x110 [ 207.585269][T16422] x64_sys_call+0x1457/0x2ff0 [ 207.589967][T16422] do_syscall_64+0xd2/0x200 [ 207.594589][T16422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.600514][T16422] [ 207.602858][T16422] read to 0xffff8881198f466c of 4 bytes by task 16422 on cpu 0: [ 207.610599][T16422] wait_for_partner+0xf7/0x1c0 [ 207.615386][T16422] fifo_open+0x462/0x5d0 [ 207.619642][T16422] do_dentry_open+0x646/0xa20 [ 207.624338][T16422] vfs_open+0x37/0x1e0 [ 207.628422][T16422] path_openat+0x1c5e/0x2170 [ 207.633038][T16422] do_filp_open+0x109/0x230 [ 207.637575][T16422] do_sys_openat2+0xa6/0x110 [ 207.642192][T16422] __x64_sys_openat+0xf2/0x120 [ 207.646978][T16422] x64_sys_call+0x2e9c/0x2ff0 [ 207.651682][T16422] do_syscall_64+0xd2/0x200 [ 207.656218][T16422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.662137][T16422] [ 207.664470][T16422] value changed: 0x00000002 -> 0x00000001 [ 207.670193][T16422] [ 207.672523][T16422] Reported by Kernel Concurrency Sanitizer on: [ 207.678880][T16422] CPU: 0 UID: 0 PID: 16422 Comm: syz.6.5296 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 207.691502][T16422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.701667][T16422] ================================================================== [ 214.641710][ T4415] dummy0: left promiscuous mode