last executing test programs: 3.158540882s ago: executing program 2 (id=1878): io_uring_setup(0x7c8a, &(0x7f0000000380)={0x0, 0x7161, 0x8, 0xffffffff, 0x1dd}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) close(0x3) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) 2.111617688s ago: executing program 2 (id=1889): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.801585402s ago: executing program 2 (id=1895): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2, 0x0, 0x31) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.796158123s ago: executing program 1 (id=1896): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") symlink(0x0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) 1.738816513s ago: executing program 1 (id=1900): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x102, &(0x7f0000000840)=ANY=[], 0x0) 1.598743225s ago: executing program 4 (id=1901): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)=')@/#-^^\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='syztnl0\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)=',)\x00', &(0x7f0000000240)='syztnl1\x00', &(0x7f0000000280)='syztnl0\x00', &(0x7f00000002c0)='syztnl1\x00']}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 1.507237596s ago: executing program 1 (id=1904): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x2000c041) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.397931028s ago: executing program 1 (id=1906): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x8000, 0x1}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="04000000005b0000000003000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) 1.325537329s ago: executing program 0 (id=1908): socket$nl_generic(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x0, 0xe) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000040000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.099690793s ago: executing program 0 (id=1910): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 943.349665ms ago: executing program 2 (id=1912): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x13fd, @loopback}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 913.481816ms ago: executing program 3 (id=1913): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x5efe) r2 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) connect$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 853.304147ms ago: executing program 2 (id=1914): bpf$MAP_CREATE(0x0, 0x0, 0x48) mount(0x0, &(0x7f0000003c40)='.\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 851.841807ms ago: executing program 3 (id=1915): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 788.979168ms ago: executing program 3 (id=1916): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) 733.550789ms ago: executing program 0 (id=1917): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010818"], 0x0, 0x26, 0x0, 0x2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x14, 0x8, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) 681.605089ms ago: executing program 3 (id=1918): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xf}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x7fffffe, 0x4c8, 0x0, 0x0, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0xffffff00, 0x3, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xdc, 0x2, 0x3, 0xfff2, 0x6, 0x9, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0xa30d8a844ba5e902}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, {{@arp={@local, @local, 0xff000000, 0xffffff00, 0x5, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x8, 0xd, 0x2, 0xfff3, 0x9, 'veth0_to_bond\x00', '\x00', {0xff}, {0xff}, 0x0, 0x204}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) 620.32986ms ago: executing program 4 (id=1919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 604.30968ms ago: executing program 0 (id=1920): bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000040000200000038000480200001800a00010071756f7461000400100002800c000140000000000000008314000180090001007866726d00000000040002800900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 525.800072ms ago: executing program 0 (id=1921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 488.640922ms ago: executing program 1 (id=1922): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)='%-010d \x00'}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000012c0)={&(0x7f0000001040)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c804}, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) 488.003902ms ago: executing program 1 (id=1923): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2, 0x0, 0x31) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 413.646303ms ago: executing program 0 (id=1924): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 328.399845ms ago: executing program 3 (id=1925): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 289.047135ms ago: executing program 2 (id=1926): syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a44000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r5, 0x2004, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 187.868977ms ago: executing program 4 (id=1928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) r4 = io_uring_setup(0x1d7e, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xd, 0x0, 0x20) 162.648907ms ago: executing program 4 (id=1929): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 102.892708ms ago: executing program 4 (id=1930): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 0s ago: executing program 4 (id=1931): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0x7ffffffc, 0x7) kernel console output (not intermixed with test programs): ttributes in process `syz.3.364'. [ 57.175866][ T4641] loop0: detected capacity change from 0 to 1024 [ 57.185880][ T4641] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.196931][ T4641] EXT4-fs (loop0): group descriptors corrupted! [ 57.215836][ T4641] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 57.232156][ T4633] vxcan1 speed is unknown, defaulting to 1000 [ 57.253143][ T4653] loop3: detected capacity change from 0 to 2048 [ 57.270174][ T4653] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.285952][ T4653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.297404][ T4670] loop0: detected capacity change from 0 to 1024 [ 57.309290][ T4670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.322070][ T4670] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.461885][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.524619][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.658945][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 57.683389][ T4738] ip6gre1: entered allmulticast mode [ 57.747474][ T4748] pim6reg1: entered promiscuous mode [ 57.752902][ T4748] pim6reg1: entered allmulticast mode [ 57.767592][ T4754] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 57.794971][ T4754] bond2: entered promiscuous mode [ 57.800161][ T4754] bond2: entered allmulticast mode [ 57.812723][ T4754] geneve3: entered allmulticast mode [ 57.830606][ T4754] bond2: (slave geneve3): making interface the new active one [ 57.838121][ T4754] geneve3: entered promiscuous mode [ 57.844143][ T4754] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 57.855320][ T4762] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.859702][ T4754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.400'. [ 57.875849][ T4754] bond2: left promiscuous mode [ 57.880883][ T4754] geneve3: left promiscuous mode [ 57.886057][ T4754] bond2: left allmulticast mode [ 57.891913][ T4754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.911351][ T4762] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.953784][ T4762] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.033840][ T4762] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.089165][ T4762] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.107155][ T4762] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.120103][ T4762] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.132194][ T4762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.401569][ T4809] ALSA: seq fatal error: cannot create timer (-19) [ 58.693089][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 58.719427][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 58.786112][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.794463][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.801604][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.808677][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.815437][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.822213][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.828803][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.835554][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.842316][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 58.852061][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 59.266989][ T4888] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 59.293059][ T4888] team0: Port device dummy0 added [ 59.321396][ T4894] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 59.347450][ T4896] loop3: detected capacity change from 0 to 512 [ 59.354263][ T4894] team0: Port device dummy0 removed [ 59.381575][ T4894] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.405211][ T4896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.449982][ T4896] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.482279][ T4902] netlink: 'syz.0.460': attribute type 29 has an invalid length. [ 59.489192][ T29] kauditd_printk_skb: 842 callbacks suppressed [ 59.489213][ T29] audit: type=1400 audit(2000000014.670:1703): avc: denied { setattr } for pid=4895 comm="syz.3.458" path="/90/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.517241][ T4902] netlink: 'syz.0.460': attribute type 29 has an invalid length. [ 59.570499][ T4896] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.458: corrupted inode contents [ 59.571653][ T29] audit: type=1400 audit(2000000014.750:1704): avc: denied { ioctl } for pid=4895 comm="syz.3.458" path="/90/bus/file1" dev="loop3" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.598431][ T4896] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.458: mark_inode_dirty error [ 59.634415][ T4896] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.458: corrupted inode contents [ 59.641857][ T4906] netlink: 'syz.0.460': attribute type 29 has an invalid length. [ 59.659696][ T4902] netlink: 'syz.0.460': attribute type 29 has an invalid length. [ 59.679120][ T4896] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.458: mark_inode_dirty error [ 59.723384][ T4896] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.458: mark inode dirty (error -117) [ 59.758550][ T4914] tipc: Failed to remove unknown binding: 66,3,3/2480112533:2065876460/2065876461 [ 59.767385][ T4896] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 59.813375][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.026906][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 60.036086][ T4926] vxcan1 speed is unknown, defaulting to 1000 [ 60.064529][ T29] audit: type=1400 audit(2000000015.250:1705): avc: denied { nlmsg_write } for pid=4940 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 60.555142][ T4955] loop4: detected capacity change from 0 to 1024 [ 60.582495][ T4955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.594714][ T4955] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.647493][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.721532][ T29] audit: type=1400 audit(2000000015.900:1706): avc: denied { name_connect } for pid=4969 comm="syz.4.488" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 60.791366][ T4972] veth0: entered promiscuous mode [ 60.804408][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 60.988189][ T4977] loop0: detected capacity change from 0 to 1024 [ 61.064817][ T4977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.114145][ T4977] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.490: Allocating blocks 449-513 which overlap fs metadata [ 61.132132][ T4975] EXT4-fs (loop0): pa ffff888106d8f070: logic 48, phys. 177, len 21 [ 61.140252][ T4975] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 61.188913][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.401590][ T29] audit: type=1326 audit(2000000016.580:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.2.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e929 code=0x0 [ 61.522938][ T29] audit: type=1400 audit(2000000016.710:1708): avc: denied { mount } for pid=5000 comm="syz.0.500" name="/" dev="ramfs" ino=8990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.768050][ T29] audit: type=1326 audit(2000000016.950:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 61.808568][ T29] audit: type=1326 audit(2000000016.980:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 61.831844][ T29] audit: type=1326 audit(2000000016.980:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 61.854911][ T29] audit: type=1326 audit(2000000016.980:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 62.058289][ T5025] loop0: detected capacity change from 0 to 1024 [ 62.067552][ T5025] EXT4-fs: Ignoring removed orlov option [ 62.080579][ T5025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.370861][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.408704][ T5059] $Hÿ: renamed from bond0 (while UP) [ 62.438645][ T5059] $Hÿ: entered promiscuous mode [ 62.443939][ T5059] bond_slave_0: entered promiscuous mode [ 62.449772][ T5059] bond_slave_1: entered promiscuous mode [ 62.457228][ T5059] dummy0: entered promiscuous mode [ 63.042942][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 63.052807][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 63.128331][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.135653][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.158169][ T5151] bridge0: entered allmulticast mode [ 63.172351][ T5156] tls_set_device_offload_rx: netdev not found [ 63.180241][ T5151] bridge_slave_1: left allmulticast mode [ 63.185967][ T5151] bridge_slave_1: left promiscuous mode [ 63.191879][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.215209][ T5151] bridge_slave_0: left allmulticast mode [ 63.220981][ T5151] bridge_slave_0: left promiscuous mode [ 63.226882][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.273221][ T5167] loop3: detected capacity change from 0 to 512 [ 63.280488][ T5167] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 63.363739][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 63.372632][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 63.395543][ T5178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'. [ 63.409845][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 63.415651][ T5178] x_tables: ip_tables: udp match: only valid for protocol 17 [ 63.424608][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 63.435147][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 63.505107][ T5187] netlink: 96 bytes leftover after parsing attributes in process `syz.4.553'. [ 63.603468][ T5192] vxcan1 speed is unknown, defaulting to 1000 [ 63.635633][ T5199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.556'. [ 63.899984][ T5223] loop3: detected capacity change from 0 to 128 [ 63.961463][ T5233] netlink: 'syz.0.574': attribute type 6 has an invalid length. [ 64.001723][ T5241] serio: Serial port ptm0 [ 64.489898][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 64.489914][ T29] audit: type=1400 audit(2000000019.670:2051): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.524138][ T29] audit: type=1326 audit(2000000019.710:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9463cd58e7 code=0x7ffc0000 [ 64.547693][ T29] audit: type=1326 audit(2000000019.710:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9463c7ab19 code=0x7ffc0000 [ 64.570935][ T29] audit: type=1326 audit(2000000019.710:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 64.594428][ T29] audit: type=1326 audit(2000000019.730:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9463cd58e7 code=0x7ffc0000 [ 64.617837][ T29] audit: type=1326 audit(2000000019.730:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9463c7ab19 code=0x7ffc0000 [ 64.641168][ T29] audit: type=1326 audit(2000000019.730:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 64.664620][ T29] audit: type=1326 audit(2000000019.730:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9463cd58e7 code=0x7ffc0000 [ 64.687915][ T29] audit: type=1326 audit(2000000019.730:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9463c7ab19 code=0x7ffc0000 [ 64.711182][ T29] audit: type=1326 audit(2000000019.730:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 64.962880][ T5303] $Hÿ: renamed from bond0 (while UP) [ 64.977601][ T5303] $Hÿ: entered promiscuous mode [ 64.982817][ T5303] bond_slave_0: entered promiscuous mode [ 64.988634][ T5303] bond_slave_1: entered promiscuous mode [ 65.012871][ T5306] wg2: entered promiscuous mode [ 65.017859][ T5306] wg2: entered allmulticast mode [ 65.052821][ T5316] loop0: detected capacity change from 0 to 128 [ 65.230879][ T5338] batadv_slave_0: entered promiscuous mode [ 65.237526][ T5338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.252292][ T5338] batadv_slave_0 (unregistering): left promiscuous mode [ 65.267186][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.334323][ T5344] loop3: detected capacity change from 0 to 1024 [ 65.363461][ T5348] netlink: 'syz.2.627': attribute type 21 has an invalid length. [ 65.387206][ T5344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.444384][ T5344] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.626: Allocating blocks 449-513 which overlap fs metadata [ 65.481654][ T5343] EXT4-fs (loop3): pa ffff888106dd41c0: logic 48, phys. 177, len 21 [ 65.489858][ T5343] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 65.557228][ T5362] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 65.565611][ T5362] veth0_vlan: entered allmulticast mode [ 65.617901][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.628195][ T5362] veth0_vlan: left promiscuous mode [ 65.645284][ T5362] veth0_vlan: entered promiscuous mode [ 65.677422][ T5362] team0: Device veth0_vlan failed to register rx_handler [ 65.932275][ T5375] ipvlan2: entered promiscuous mode [ 65.970607][ T5375] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 65.996309][ T5375] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 66.360013][ T5399] ipvlan2: entered promiscuous mode [ 66.387638][ T5403] netlink: 'syz.0.649': attribute type 4 has an invalid length. [ 66.405690][ T5403] netlink: 'syz.0.649': attribute type 4 has an invalid length. [ 66.700106][ T5417] pim6reg1: entered promiscuous mode [ 66.705518][ T5417] pim6reg1: entered allmulticast mode [ 66.762313][ T5421] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 66.810997][ T5423] net_ratelimit: 24 callbacks suppressed [ 66.811017][ T5423] bond_slave_1: mtu less than device minimum [ 66.824374][ T5425] loop0: detected capacity change from 0 to 1024 [ 66.841989][ T5425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.962216][ T5425] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.666: Allocating blocks 497-513 which overlap fs metadata [ 66.977675][ T5429] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.666: Allocating blocks 497-513 which overlap fs metadata [ 66.995808][ T5429] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.666: Allocating blocks 497-513 which overlap fs metadata [ 67.094968][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.279504][ T5447] $Hÿ: renamed from bond0 (while UP) [ 67.296578][ T5447] $Hÿ: entered promiscuous mode [ 67.302513][ T5447] bond_slave_0: entered promiscuous mode [ 67.308348][ T5447] bond_slave_1: entered promiscuous mode [ 68.032388][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.039711][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.047737][ T5469] bridge0: entered allmulticast mode [ 68.067016][ T5469] bridge_slave_1: left allmulticast mode [ 68.072873][ T5469] bridge_slave_1: left promiscuous mode [ 68.078641][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.086691][ T5469] bridge_slave_0: left allmulticast mode [ 68.092659][ T5469] bridge_slave_0: left promiscuous mode [ 68.098357][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.141947][ T5473] __nla_validate_parse: 21 callbacks suppressed [ 68.142013][ T5473] netlink: 96 bytes leftover after parsing attributes in process `syz.1.672'. [ 68.237845][ T5489] futex_wake_op: syz.1.681 tries to shift op by -1; fix this program [ 68.369185][ T5497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.683'. [ 68.410296][ T5489] vxcan1 speed is unknown, defaulting to 1000 [ 68.494486][ T5508] loop3: detected capacity change from 0 to 1024 [ 68.520328][ T5508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.615250][ T5508] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.687: Allocating blocks 497-513 which overlap fs metadata [ 68.639146][ T5517] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.687: Allocating blocks 497-513 which overlap fs metadata [ 68.676902][ T5522] netlink: 'syz.2.692': attribute type 4 has an invalid length. [ 68.694192][ T5517] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.687: Allocating blocks 497-513 which overlap fs metadata [ 68.740208][ T5522] netlink: 'syz.2.692': attribute type 4 has an invalid length. [ 68.750627][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 68.905168][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.938769][ T5543] loop3: detected capacity change from 0 to 512 [ 68.952224][ T5543] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 68.970304][ T5543] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.978886][ T5543] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.700: corrupted inode contents [ 68.995082][ T5543] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.700: mark_inode_dirty error [ 69.007345][ T5543] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.700: corrupted inode contents [ 69.019630][ T5543] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.700: mark_inode_dirty error [ 69.034406][ T5543] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.700: corrupted inode contents [ 69.048347][ T5543] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 69.057496][ T5543] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.700: corrupted inode contents [ 69.069800][ T5543] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.700: mark_inode_dirty error [ 69.081290][ T5543] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 69.090686][ T5543] EXT4-fs (loop3): 1 truncate cleaned up [ 69.096661][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 69.116458][ T5543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.172064][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.308958][ T5576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'. [ 69.317999][ T5576] netlink: 212 bytes leftover after parsing attributes in process `syz.3.713'. [ 69.347566][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 69.393145][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 69.471543][ T5585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.478867][ T5585] IPv6: NLM_F_CREATE should be set when creating new route [ 69.533002][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 69.533024][ T29] audit: type=1400 audit(2000000024.720:2457): avc: denied { write } for pid=5589 comm="syz.3.718" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 69.537524][ T5590] random: crng reseeded on system resumption [ 69.539259][ T29] audit: type=1400 audit(2000000024.720:2458): avc: denied { nlmsg_read } for pid=5591 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.591485][ T29] audit: type=1400 audit(2000000024.750:2459): avc: denied { getopt } for pid=5587 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.872864][ T5616] netlink: 'syz.0.729': attribute type 10 has an invalid length. [ 69.880968][ T5616] veth0_vlan: entered allmulticast mode [ 69.892372][ T5616] veth0_vlan: left promiscuous mode [ 69.898619][ T5616] veth0_vlan: entered promiscuous mode [ 69.906816][ T5616] team0: Device veth0_vlan failed to register rx_handler [ 69.928978][ T5616] syz.0.729 (5616) used greatest stack depth: 10024 bytes left [ 70.101826][ T5623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.731'. [ 70.138901][ T5625] gtp0: entered promiscuous mode [ 70.232762][ T5631] loop0: detected capacity change from 0 to 1024 [ 70.239643][ T5631] EXT4-fs: Ignoring removed orlov option [ 70.252048][ T5631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.270989][ T29] audit: type=1326 audit(2000000025.460:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 70.295564][ T29] audit: type=1326 audit(2000000025.460:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 70.319040][ T29] audit: type=1326 audit(2000000025.460:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 70.343024][ T29] audit: type=1326 audit(2000000025.460:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 70.366456][ T29] audit: type=1326 audit(2000000025.460:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 70.390550][ T29] audit: type=1326 audit(2000000025.460:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 70.413952][ T29] audit: type=1326 audit(2000000025.460:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 70.443313][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.465676][ T5637] loop0: detected capacity change from 0 to 164 [ 70.473781][ T5637] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.626963][ T5653] loop3: detected capacity change from 0 to 1024 [ 70.660462][ T5653] EXT4-fs: Ignoring removed orlov option [ 70.674166][ T5653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.715639][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 70.725282][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 70.963115][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.055011][ T5694] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 71.135559][ T5702] vxcan1 speed is unknown, defaulting to 1000 [ 71.281222][ T5721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.331804][ T5721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.372539][ T5727] vxcan1 speed is unknown, defaulting to 1000 [ 71.427239][ T5721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.517780][ T5721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.595100][ T5721] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.607461][ T5721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.621755][ T5721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.634985][ T5721] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.707792][ T5738] netlink: 'syz.4.774': attribute type 10 has an invalid length. [ 71.801866][ T5738] veth0_vlan: entered allmulticast mode [ 71.827272][ T5738] veth0_vlan: left promiscuous mode [ 71.840527][ T5738] veth0_vlan: entered promiscuous mode [ 71.856057][ T5738] team0: Device veth0_vlan failed to register rx_handler [ 72.060887][ T5753] ip6gre2: entered allmulticast mode [ 72.592244][ T5787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5787 comm=syz.1.794 [ 72.661430][ T5785] $Hÿ: left promiscuous mode [ 72.666308][ T5785] bond_slave_0: left promiscuous mode [ 72.672512][ T5785] bond_slave_1: left promiscuous mode [ 72.747362][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.776456][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.832325][ T5785] veth0_vlan: left allmulticast mode [ 72.868701][ T5785] geneve2: left promiscuous mode [ 72.875961][ T5785] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.884457][ T5785] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.893193][ T5785] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.902141][ T5785] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.916731][ T5785] geneve3: left allmulticast mode [ 72.926325][ T5787] vlan2: entered allmulticast mode [ 72.932844][ T5787] dummy0: entered allmulticast mode [ 73.138178][ T5826] loop3: detected capacity change from 0 to 128 [ 73.606307][ T5855] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 73.617491][ T5855] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 73.647261][ T5855] team0: Port device team_slave_0 removed [ 73.668970][ T5855] team0: Port device team_slave_1 removed [ 73.685525][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.703612][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.723535][ T5855] bond2: (slave geneve3): Releasing active interface [ 73.863432][ T5873] vxcan1 speed is unknown, defaulting to 1000 [ 73.995766][ T5881] syz_tun: entered allmulticast mode [ 74.038372][ T5881] dvmrp1: entered allmulticast mode [ 74.064711][ T5880] syz_tun: left allmulticast mode [ 74.159179][ T5888] syzkaller0: entered promiscuous mode [ 74.164937][ T5888] syzkaller0: entered allmulticast mode [ 74.448010][ T5905] batadv_slave_1: entered promiscuous mode [ 74.540520][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 74.540538][ T29] audit: type=1326 audit(2000000029.720:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 74.570922][ T29] audit: type=1326 audit(2000000029.720:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 74.594381][ T29] audit: type=1326 audit(2000000029.720:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 74.618392][ T29] audit: type=1326 audit(2000000029.720:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9463cd58e7 code=0x7ffc0000 [ 74.642331][ T29] audit: type=1326 audit(2000000029.720:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9463c7ab19 code=0x7ffc0000 [ 74.665687][ T29] audit: type=1326 audit(2000000029.720:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 74.689633][ T29] audit: type=1326 audit(2000000029.720:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 74.713712][ T29] audit: type=1326 audit(2000000029.720:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 74.737241][ T29] audit: type=1326 audit(2000000029.720:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 74.761529][ T29] audit: type=1326 audit(2000000029.720:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 74.795832][ T5913] loop4: detected capacity change from 0 to 1024 [ 74.806643][ T5913] EXT4-fs: Ignoring removed orlov option [ 74.828844][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.950818][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.837'. [ 75.085489][ T5931] netlink: 'syz.3.841': attribute type 10 has an invalid length. [ 75.107238][ T5931] team0: Port device dummy0 added [ 75.119954][ T5931] netlink: 'syz.3.841': attribute type 10 has an invalid length. [ 75.136950][ T5931] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 75.148810][ T5931] team0: Failed to send options change via netlink (err -105) [ 75.158203][ T5931] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 75.178265][ T5931] team0: Port device dummy0 removed [ 75.197842][ T5931] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.265263][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.298463][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 75.332721][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 75.350948][ T5948] netlink: 'syz.3.849': attribute type 6 has an invalid length. [ 75.529973][ T5967] wg2: left promiscuous mode [ 75.534638][ T5967] wg2: left allmulticast mode [ 75.568624][ T5967] wg2: entered promiscuous mode [ 75.574374][ T5967] wg2: entered allmulticast mode [ 75.723442][ T5979] syzkaller0: entered promiscuous mode [ 75.728985][ T5979] syzkaller0: entered allmulticast mode [ 75.735994][ T5979] tipc: Resetting bearer [ 75.905286][ T6001] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.916609][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.873'. [ 75.976403][ T6005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6005 comm=syz.1.873 [ 76.004366][ T6001] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.062203][ T6001] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.142407][ T6001] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.218830][ T6001] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.231937][ T6001] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.244045][ T6001] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.256210][ T6001] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.307276][ T6036] loop0: detected capacity change from 0 to 1024 [ 76.328154][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.341827][ T6036] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.355777][ T6036] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 76.385661][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.440954][ T6057] netlink: 'syz.1.894': attribute type 6 has an invalid length. [ 76.588723][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 76.611497][ T6078] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 76.619042][ T6078] bond_slave_0: left promiscuous mode [ 76.636974][ T6078] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 76.645455][ T6078] bond_slave_1: left promiscuous mode [ 76.660052][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 76.685542][ T6078] team0: Port device team_slave_0 removed [ 76.746615][ T6078] team0: Port device team_slave_1 removed [ 76.763927][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.772245][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.954471][ T6097] loop3: detected capacity change from 0 to 512 [ 76.962535][ T6097] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 76.977994][ T6097] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.985065][ T6097] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.909: Block bitmap for bg 0 marked uninitialized [ 76.999865][ T6097] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 77.009022][ T6097] EXT4-fs (loop3): 1 orphan inode deleted [ 77.017056][ T6097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.031570][ T6097] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 77.044318][ T6097] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 77.054935][ T6097] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.909: Block bitmap for bg 0 marked uninitialized [ 77.068464][ T6097] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.909: Block bitmap for bg 0 marked uninitialized [ 77.083364][ T6097] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.909: Block bitmap for bg 0 marked uninitialized [ 77.096964][ T6097] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.909: Block bitmap for bg 0 marked uninitialized [ 77.111608][ T6097] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.909: Block bitmap for bg 0 marked uninitialized [ 77.125170][ T6097] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.909: Block bitmap for bg 0 marked uninitialized [ 77.157417][ T6097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.459333][ T6131] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 77.492570][ T6129] vcan0: entered allmulticast mode [ 77.499832][ T6129] vcan0: left allmulticast mode [ 77.787578][ T6164] wireguard0: entered promiscuous mode [ 77.793263][ T6164] wireguard0: entered allmulticast mode [ 77.985040][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.941'. [ 78.004152][ T6176] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6176 comm=syz.0.941 [ 78.346335][ T6184] capability: warning: `syz.2.944' uses 32-bit capabilities (legacy support in use) [ 78.492273][ T6196] loop3: detected capacity change from 0 to 128 [ 78.579554][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 78.607135][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 78.670765][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 78.729051][ T6207] loop3: detected capacity change from 0 to 2048 [ 78.764367][ T6214] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.788436][ T6207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.824203][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.871712][ T6214] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.951454][ T6214] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.992060][ T6214] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.044268][ T6247] wg2: entered promiscuous mode [ 79.049244][ T6247] wg2: entered allmulticast mode [ 79.086897][ T6214] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.115194][ T6214] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.128624][ T6214] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.141297][ T6214] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.154819][ T6253] netlink: 'syz.3.971': attribute type 11 has an invalid length. [ 79.228907][ T6257] syzkaller0: entered promiscuous mode [ 79.234526][ T6257] syzkaller0: entered allmulticast mode [ 79.430749][ T6282] IPv4: Oversized IP packet from 127.202.26.0 [ 79.562650][ T6289] loop3: detected capacity change from 0 to 1024 [ 79.571086][ T6289] EXT4-fs (loop3): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 79.583145][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.590563][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.608560][ T6287] $Hÿ: left promiscuous mode [ 79.613450][ T6287] bond_slave_0: left promiscuous mode [ 79.619041][ T6287] bond_slave_1: left promiscuous mode [ 79.634596][ T6284] loop3: detected capacity change from 0 to 2048 [ 79.641079][ T6287] dummy0: left promiscuous mode [ 79.664104][ T6284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.684480][ T6287] wg2: left promiscuous mode [ 79.689181][ T6287] wg2: left allmulticast mode [ 79.699140][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.713458][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.725390][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.752251][ T6287] veth0_vlan: left allmulticast mode [ 79.816206][ T6287] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.824742][ T6287] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.833173][ T6287] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.842264][ T6287] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.873849][ T6287] tipc: Resetting bearer [ 79.894628][ T6287] syzkaller0: left promiscuous mode [ 79.899969][ T6287] syzkaller0: left allmulticast mode [ 79.909558][ T6287] vlan2: left promiscuous mode [ 79.914492][ T6287] vlan1: left promiscuous mode [ 79.919323][ T6287] gretap0: left promiscuous mode [ 79.930955][ T6287] ip6gre1: left allmulticast mode [ 79.937621][ T6287] gtp0: left promiscuous mode [ 80.012145][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 80.012163][ T29] audit: type=1326 audit(2000000035.200:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.041798][ T29] audit: type=1326 audit(2000000035.200:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.045969][ T6304] tipc: Resetting bearer [ 80.065177][ T29] audit: type=1326 audit(2000000035.200:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.065229][ T29] audit: type=1326 audit(2000000035.200:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.065261][ T29] audit: type=1326 audit(2000000035.200:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.065295][ T29] audit: type=1326 audit(2000000035.200:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.099354][ T29] audit: type=1326 audit(2000000035.200:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.253394][ T6304] syzkaller0: entered promiscuous mode [ 80.259040][ T6304] syzkaller0: entered allmulticast mode [ 80.274897][ T6304] tipc: Resetting bearer [ 80.307866][ T29] audit: type=1400 audit(2000000035.490:3191): avc: denied { write } for pid=6313 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.442828][ T29] audit: type=1326 audit(2000000035.620:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.3.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.466230][ T29] audit: type=1326 audit(2000000035.620:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.3.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 80.516886][ T6328] __nla_validate_parse: 7 callbacks suppressed [ 80.516905][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 80.945361][ T6350] loop4: detected capacity change from 0 to 512 [ 80.954529][ T6350] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.1006: corrupted in-inode xattr: invalid ea_ino [ 80.969345][ T6350] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1006: couldn't read orphan inode 15 (err -117) [ 80.982415][ T6350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.014776][ T6350] Invalid ELF header magic: != ELF [ 81.041702][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.074566][ T6356] tipc: Started in network mode [ 81.079490][ T6356] tipc: Node identity e2ba3fb20ac3, cluster identity 4711 [ 81.087643][ T6356] tipc: Enabled bearer , priority 0 [ 81.096284][ T6356] tipc: Disabling bearer [ 81.179699][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 81.214468][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 81.300420][ T6367] wg2: left promiscuous mode [ 81.305134][ T6367] wg2: left allmulticast mode [ 81.326822][ T6368] loop9: detected capacity change from 0 to 7 [ 81.329947][ T6367] wg2: entered promiscuous mode [ 81.333998][ T6368] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.337814][ T6367] wg2: entered allmulticast mode [ 81.347761][ T6368] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.358761][ T6368] loop9: unable to read partition table [ 81.371867][ T6368] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 81.371867][ T6368] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 81.446926][ T6374] vxcan1 speed is unknown, defaulting to 1000 [ 81.451639][ T6377] loop0: detected capacity change from 0 to 2048 [ 81.486181][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 81.495227][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 81.532081][ T6377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.550712][ T6383] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1018'. [ 81.564554][ T6377] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.1017: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 81.586187][ T6377] EXT4-fs (loop0): Remounting filesystem read-only [ 81.602375][ T6377] xt_hashlimit: max too large, truncated to 1048576 [ 81.741879][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.801123][ T6396] wg2: entered promiscuous mode [ 81.806120][ T6396] wg2: entered allmulticast mode [ 82.675889][ T6413] vxcan1 speed is unknown, defaulting to 1000 [ 83.013207][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1036'. [ 83.037028][ T6428] wg2: left promiscuous mode [ 83.041782][ T6428] wg2: left allmulticast mode [ 83.096638][ T6434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6434 comm=syz.3.1036 [ 83.118375][ T6433] wg2: entered promiscuous mode [ 83.124179][ T6433] wg2: entered allmulticast mode [ 83.279488][ T6445] loop0: detected capacity change from 0 to 512 [ 83.287832][ T6445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.310120][ T6445] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1042: invalid block [ 83.358246][ T6445] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1042: invalid indirect mapped block 4294967295 (level 1) [ 83.374279][ T6445] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1042: invalid indirect mapped block 4294967295 (level 1) [ 83.404789][ T6445] EXT4-fs (loop0): 2 truncates cleaned up [ 83.424997][ T6445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.464664][ T5804] kernel write not supported for file bpf-prog (pid: 5804 comm: kworker/0:9) [ 83.488878][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.549675][ T6465] SELinux: ebitmap: truncated map [ 83.555282][ T6465] SELinux: failed to load policy [ 83.583389][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 83.583567][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 83.602058][ T6470] netlink: 'syz.3.1053': attribute type 5 has an invalid length. [ 83.609848][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1053'. [ 83.624289][ T6470] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 83.633894][ T6470] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 83.642627][ T6470] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 83.651339][ T6470] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 83.660823][ T6470] geneve2: entered promiscuous mode [ 83.666077][ T6470] geneve2: entered allmulticast mode [ 84.118324][ T6480] $Hÿ: left promiscuous mode [ 84.161613][ T6480] wg2: left promiscuous mode [ 84.166281][ T6480] wg2: left allmulticast mode [ 84.285118][ T6480] veth0_vlan: left allmulticast mode [ 84.327949][ T6480] veth1_macvtap: left allmulticast mode [ 84.354192][ T6463] 9pnet_fd: p9_fd_create_tcp (6463): problem connecting socket to 127.0.0.1 [ 84.391925][ T6480] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.400633][ T6480] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.409025][ T6480] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.417433][ T6480] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.506120][ T6480] vlan3: left promiscuous mode [ 84.511888][ T6480] vlan2: left promiscuous mode [ 84.516738][ T6480] gretap0: left promiscuous mode [ 84.656643][ T6495] team1: entered promiscuous mode [ 84.661888][ T6495] team1: entered allmulticast mode [ 84.815426][ T6499] loop4: detected capacity change from 0 to 1024 [ 84.832088][ T6499] EXT4-fs: Ignoring removed nobh option [ 84.837853][ T6499] EXT4-fs: Ignoring removed bh option [ 84.872871][ T6499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.943392][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.083498][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 85.083527][ T29] audit: type=1400 audit(2000000040.270:3568): avc: denied { write } for pid=6508 comm="syz.4.1067" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.221220][ T6514] netlink: 'syz.1.1069': attribute type 21 has an invalid length. [ 85.366830][ T29] audit: type=1326 audit(2000000040.550:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.400958][ T29] audit: type=1326 audit(2000000040.580:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.424708][ T29] audit: type=1326 audit(2000000040.580:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.449301][ T29] audit: type=1326 audit(2000000040.580:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.473450][ T29] audit: type=1326 audit(2000000040.580:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.496933][ T29] audit: type=1326 audit(2000000040.580:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.499172][ T6526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.520329][ T29] audit: type=1326 audit(2000000040.580:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.520366][ T29] audit: type=1326 audit(2000000040.580:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.520437][ T29] audit: type=1326 audit(2000000040.580:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 85.735503][ T6545] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 85.751138][ T6545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.783238][ T6545] __nla_validate_parse: 3 callbacks suppressed [ 85.783308][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 85.801281][ T6545] vlan0: entered promiscuous mode [ 85.806368][ T6545] bond1: entered promiscuous mode [ 85.815897][ T6545] dummy0: entered promiscuous mode [ 85.823392][ T6545] bond0: (slave dummy0): Releasing backup interface [ 85.836476][ T6545] bond1: (slave dummy0): making interface the new active one [ 85.846292][ T6545] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 85.898499][ T6556] loop3: detected capacity change from 0 to 512 [ 85.930859][ T6556] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.935991][ T6560] vxcan1 speed is unknown, defaulting to 1000 [ 85.962199][ T6556] EXT4-fs (loop3): 1 truncate cleaned up [ 85.982468][ T6567] loop4: detected capacity change from 0 to 1024 [ 85.989315][ T6556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.037198][ T6567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.051365][ T6567] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.063256][ T6567] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.091372][ T6567] JBD2: no valid journal superblock found [ 86.094470][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 86.097188][ T6567] EXT4-fs (loop4): Could not load journal inode [ 86.158539][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.199536][ T6582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1097'. [ 86.235044][ T6584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6584 comm=syz.4.1098 [ 86.362156][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 86.376446][ T6603] team1: entered promiscuous mode [ 86.381958][ T6603] team1: entered allmulticast mode [ 86.828116][ T6615] loop0: detected capacity change from 0 to 256 [ 87.135732][ T6631] pim6reg1: entered promiscuous mode [ 87.141342][ T6631] pim6reg1: entered allmulticast mode [ 87.219232][ T6643] pim6reg: entered allmulticast mode [ 87.226684][ T6643] pim6reg: left allmulticast mode [ 87.300774][ T6653] netlink: 'syz.0.1119': attribute type 1 has an invalid length. [ 87.313586][ T6651] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 87.320994][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.337424][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 87.349344][ T6653] vlan3: entered promiscuous mode [ 87.354558][ T6653] bond0: entered promiscuous mode [ 87.362322][ T6653] dummy0: entered promiscuous mode [ 87.368178][ T6653] $Hÿ: (slave dummy0): Releasing backup interface [ 87.384370][ T6653] bond0: (slave dummy0): making interface the new active one [ 87.393103][ T6653] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.412707][ T6656] wg2: entered promiscuous mode [ 87.417763][ T6656] wg2: entered allmulticast mode [ 87.453706][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 87.515265][ T6664] vxcan1 speed is unknown, defaulting to 1000 [ 87.588671][ T6673] vxcan1 speed is unknown, defaulting to 1000 [ 87.744998][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 87.767692][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.775266][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.789464][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.796967][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.829959][ T6688] wg2: left promiscuous mode [ 87.830154][ T6690] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 87.834603][ T6688] wg2: left allmulticast mode [ 87.872166][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.903635][ T6694] loop3: detected capacity change from 0 to 1024 [ 87.918661][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 87.924393][ T6694] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.935901][ T6690] vlan4: entered promiscuous mode [ 87.938459][ T6694] EXT4-fs (loop3): group descriptors corrupted! [ 87.950614][ T6690] bond0: entered promiscuous mode [ 87.959684][ T6690] dummy0: entered promiscuous mode [ 87.968011][ T6690] bond0: (slave dummy0): making interface the new active one [ 87.977733][ T6690] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.031651][ T6694] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 88.073100][ T6702] vxcan1 speed is unknown, defaulting to 1000 [ 88.137575][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1142'. [ 88.187026][ T6707] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6707 comm=syz.3.1142 [ 88.298543][ T6712] netlink: 'syz.3.1144': attribute type 27 has an invalid length. [ 88.365856][ T6712] wg2: left promiscuous mode [ 88.371432][ T6712] wg2: left allmulticast mode [ 88.401606][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 88.413269][ T6712] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.422371][ T6712] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.431305][ T6712] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.441077][ T6712] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.455552][ T6712] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 88.464627][ T6712] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 88.474069][ T6712] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 88.482950][ T6712] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 88.494304][ T6712] geneve2: left promiscuous mode [ 88.499291][ T6712] geneve2: left allmulticast mode [ 88.505754][ T6712] team1: left promiscuous mode [ 88.510679][ T6712] team1: left allmulticast mode [ 88.516872][ T6712] vlan0: left promiscuous mode [ 88.521724][ T6712] bond1: left promiscuous mode [ 88.526510][ T6712] dummy0: left promiscuous mode [ 88.533097][ T2959] vxcan1 speed is unknown, defaulting to 1000 [ 88.539391][ T2959] syz2: Port: 1 Link DOWN [ 88.549881][ T2959] vxcan1 speed is unknown, defaulting to 1000 [ 88.909493][ T6757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6757 comm=syz.1.1162 [ 88.947957][ T6764] program syz.0.1163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.116180][ T6786] vxcan1 speed is unknown, defaulting to 1000 [ 89.242597][ T6802] sctp: [Deprecated]: syz.1.1183 (pid 6802) Use of int in max_burst socket option. [ 89.242597][ T6802] Use struct sctp_assoc_value instead [ 89.259959][ T6801] netlink: 'syz.4.1182': attribute type 12 has an invalid length. [ 89.269335][ T6801] futex_wake_op: syz.4.1182 tries to shift op by -1; fix this program [ 89.293022][ T6801] hsr_slave_1 (unregistering): left promiscuous mode [ 89.377786][ T6815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6815 comm=syz.2.1189 [ 89.495351][ T6842] netlink: 'syz.2.1195': attribute type 27 has an invalid length. [ 89.506728][ T6842] wg2: left promiscuous mode [ 89.511455][ T6842] wg2: left allmulticast mode [ 89.540398][ T6842] batadv_slave_1: left promiscuous mode [ 90.068549][ T6914] loop3: detected capacity change from 0 to 1024 [ 90.082281][ T6914] ext4: Unknown parameter 'uid<00000000000000000000' [ 90.100053][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 90.100068][ T29] audit: type=1326 audit(2000000301.287:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9463cdd290 code=0x7ffc0000 [ 90.129888][ T29] audit: type=1326 audit(2000000301.287:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9463cde52b code=0x7ffc0000 [ 90.154490][ T29] audit: type=1326 audit(2000000301.287:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9463cdd58a code=0x7ffc0000 [ 90.177828][ T29] audit: type=1326 audit(2000000301.287:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 90.201595][ T29] audit: type=1326 audit(2000000301.287:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 90.225199][ T29] audit: type=1326 audit(2000000301.337:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9463cd58e7 code=0x7ffc0000 [ 90.248705][ T29] audit: type=1326 audit(2000000301.337:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9463c7ab19 code=0x7ffc0000 [ 90.272248][ T29] audit: type=1326 audit(2000000301.337:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9463cd58e7 code=0x7ffc0000 [ 90.295656][ T29] audit: type=1326 audit(2000000301.337:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9463c7ab19 code=0x7ffc0000 [ 90.319192][ T29] audit: type=1326 audit(2000000301.337:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 90.436015][ T6932] ip6gre1: entered allmulticast mode [ 90.490019][ T6938] loop7: detected capacity change from 0 to 16384 [ 90.500310][ T6940] vxcan1 speed is unknown, defaulting to 1000 [ 90.562100][ T6938] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0 [ 90.581708][ T6938] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 90.599978][ T6938] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.609582][ T6938] Buffer I/O error on dev loop7, logical block 608, async page read [ 90.774670][ T6937] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 90.784488][ T6937] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 90.792900][ T6937] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 90.802031][ T6937] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 90.810503][ T6937] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 90.818957][ T6937] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 90.827390][ T6937] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 90.836451][ T6937] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 90.844904][ T6937] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 90.853331][ T6937] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 90.865104][ T6940] __nla_validate_parse: 10 callbacks suppressed [ 90.865121][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 90.872491][ T6937] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 90.909496][ T6937] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 90.951034][ T6964] loop0: detected capacity change from 0 to 764 [ 90.969487][ T6937] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 90.982049][ T6964] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 91.016416][ T6971] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1222'. [ 91.035473][ T6937] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 91.098075][ T6975] loop0: detected capacity change from 0 to 1024 [ 91.105161][ T6975] EXT4-fs: Ignoring removed oldalloc option [ 91.118265][ T6979] netlink: 'syz.2.1225': attribute type 4 has an invalid length. [ 91.129940][ T6975] EXT4-fs: Ignoring removed orlov option [ 91.137670][ T6975] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 91.172792][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.173641][ T6986] xt_hashlimit: max too large, truncated to 1048576 [ 91.222321][ T6994] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1232'. [ 91.231092][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1231'. [ 91.376226][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.457836][ T7009] loop7: detected capacity change from 0 to 16384 [ 91.487011][ T7011] syzkaller0: entered allmulticast mode [ 91.535354][ T7011] syzkaller0 (unregistering): left allmulticast mode [ 91.548990][ T7009] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 91.574095][ T7009] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 91.794688][ T7028] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 91.808782][ T7028] team0: Port device dummy0 added [ 91.822271][ T7028] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 91.840946][ T7029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7029 comm=syz.4.1249 [ 91.855587][ T7028] team0: Port device dummy0 removed [ 91.866517][ T7028] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 91.919123][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 91.932835][ T7039] netlink: 'syz.0.1251': attribute type 12 has an invalid length. [ 91.940965][ T7039] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1251'. [ 91.958139][ T7039] futex_wake_op: syz.0.1251 tries to shift op by -1; fix this program [ 91.986873][ T7044] xt_hashlimit: max too large, truncated to 1048576 [ 91.990174][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 92.025016][ T7046] macvlan2: entered allmulticast mode [ 92.031197][ T7046] veth1_vlan: entered allmulticast mode [ 92.040600][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.041348][ T7046] veth1_vlan: left allmulticast mode [ 92.049449][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.078479][ T7050] vlan5: entered promiscuous mode [ 92.083628][ T7050] syz_tun: entered promiscuous mode [ 92.160641][ T7046] syz.1.1255 (7046) used greatest stack depth: 10000 bytes left [ 92.183072][ T7058] vlan4: entered allmulticast mode [ 92.188354][ T7058] dummy0: entered allmulticast mode [ 92.234484][ T7059] loop0: detected capacity change from 0 to 512 [ 92.241557][ T7059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.252380][ T7059] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.1260: bad orphan inode 11 [ 92.262609][ T7059] ext4_test_bit(bit=10, block=4) = 1 [ 92.267990][ T7059] is_bad_inode(inode)=0 [ 92.272261][ T7059] NEXT_ORPHAN(inode)=2080374784 [ 92.277139][ T7059] max_ino=32 [ 92.280379][ T7059] i_nlink=0 [ 92.284566][ T7059] EXT4-fs (loop0): 1 truncate cleaned up [ 92.290919][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.834463][ T7085] vxcan1 speed is unknown, defaulting to 1000 [ 93.012505][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.027144][ T7094] netlink: 'syz.3.1271': attribute type 12 has an invalid length. [ 93.035895][ T7094] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1271'. [ 93.052487][ T7094] futex_wake_op: syz.3.1271 tries to shift op by -1; fix this program [ 93.062234][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 93.073578][ T7094] hsr_slave_1 (unregistering): left promiscuous mode [ 93.082219][ T7096] cgroup: Invalid name [ 93.218232][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 93.404447][ T7137] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 93.622240][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.630861][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.644228][ T7153] ip6gretap0: entered promiscuous mode [ 93.650936][ T7153] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 93.661303][ T7153] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 93.676753][ T7157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7157 comm=syz.1.1298 [ 94.324638][ T7178] loop0: detected capacity change from 0 to 1024 [ 94.374992][ T7178] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 94.423930][ T7178] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.440064][ T7178] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #32: comm syz.0.1308: iget: special inode unallocated [ 94.483318][ T7178] EXT4-fs (loop0): no journal found [ 94.747916][ T7211] bridge: RTM_NEWNEIGH with invalid ether address [ 95.048441][ T7209] vxcan1 speed is unknown, defaulting to 1000 [ 95.169084][ T7229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.235781][ T7231] syz_tun: entered allmulticast mode [ 95.251913][ T7230] syz_tun: left allmulticast mode [ 95.821878][ T7219] Set syz1 is full, maxelem 65536 reached [ 95.973433][ T7248] loop0: detected capacity change from 0 to 512 [ 96.069681][ T7248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.092587][ T7248] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.327683][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.351497][ T7262] vlan1: entered allmulticast mode [ 96.356725][ T7262] bridge_slave_0: entered allmulticast mode [ 96.379332][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 96.379381][ T29] audit: type=1400 audit(2000000308.560:3887): avc: denied { ioctl } for pid=7268 comm="syz.0.1344" path="socket:[15691]" dev="sockfs" ino=15691 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.158338][ T29] audit: type=1326 audit(2000000309.340:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.193430][ T29] audit: type=1326 audit(2000000309.370:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.217776][ T29] audit: type=1326 audit(2000000309.370:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.241908][ T29] audit: type=1326 audit(2000000309.370:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.265357][ T29] audit: type=1326 audit(2000000309.370:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.289941][ T29] audit: type=1326 audit(2000000309.380:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.313380][ T29] audit: type=1326 audit(2000000309.380:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.337643][ T29] audit: type=1326 audit(2000000309.380:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.361848][ T29] audit: type=1326 audit(2000000309.380:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7293 comm="syz.4.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 97.640904][ T7284] Set syz1 is full, maxelem 65536 reached [ 97.643327][ T7303] loop3: detected capacity change from 0 to 512 [ 97.654483][ T7303] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 97.750161][ T7309] __nla_validate_parse: 6 callbacks suppressed [ 97.750180][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 97.873866][ T7316] vxcan1 speed is unknown, defaulting to 1000 [ 98.046872][ T7333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7333 comm=syz.2.1370 [ 98.173896][ T7338] loop0: detected capacity change from 0 to 512 [ 98.181564][ T7338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.205952][ T7338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.226282][ T7338] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.304802][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.377847][ T7353] vlan2: entered allmulticast mode [ 98.528619][ T7362] lo speed is unknown, defaulting to 1000 [ 98.536063][ T7362] lo speed is unknown, defaulting to 1000 [ 98.543266][ T7362] lo speed is unknown, defaulting to 1000 [ 98.549384][ T7362] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.557475][ T7362] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.568808][ T7362] lo speed is unknown, defaulting to 1000 [ 98.575948][ T7362] lo speed is unknown, defaulting to 1000 [ 98.582488][ T7364] lo: entered promiscuous mode [ 98.587323][ T7364] lo: entered allmulticast mode [ 98.593950][ T7362] lo speed is unknown, defaulting to 1000 [ 98.593961][ T3378] lo speed is unknown, defaulting to 1000 [ 98.616811][ T7362] lo speed is unknown, defaulting to 1000 [ 98.623095][ T7362] lo speed is unknown, defaulting to 1000 [ 98.652196][ T7366] loop0: detected capacity change from 0 to 1024 [ 98.659073][ T7366] EXT4-fs: Ignoring removed nobh option [ 98.664753][ T7366] EXT4-fs: Ignoring removed bh option [ 98.682419][ T7366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.724680][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.737636][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 98.748250][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1386'. [ 98.773804][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 98.800789][ T7381] loop0: detected capacity change from 0 to 1764 [ 98.807601][ T7381] iso9660: Bad value for 'gid' [ 98.813075][ T7381] iso9660: Bad value for 'gid' [ 98.910584][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'. [ 98.922867][ T7393] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 98.931665][ T7393] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 98.952524][ T7393] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 98.961311][ T7393] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 98.977376][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.987864][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.996077][ T7393] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 99.012185][ T7398] loop3: detected capacity change from 0 to 1024 [ 99.019340][ T7398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.042596][ T7398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.074697][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.105947][ T7406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7406 comm=syz.2.1400 [ 99.215496][ T7417] wg2: entered promiscuous mode [ 99.221210][ T7417] wg2: entered allmulticast mode [ 99.842655][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.873150][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.096095][ T7441] ip6gretap0: entered promiscuous mode [ 100.122082][ T7441] syz_tun: entered promiscuous mode [ 100.134934][ T7441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.184520][ T7441] Cannot create hsr debugfs directory [ 100.208495][ T7441] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 100.219584][ T7441] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 100.428382][ T7458] netlink: 'syz.2.1420': attribute type 13 has an invalid length. [ 100.455597][ T7458] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 100.464095][ T7458] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.528057][ T7458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.795661][ T7482] loop0: detected capacity change from 0 to 512 [ 100.832318][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.860103][ T7482] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.882552][ T7482] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1430: corrupted inode contents [ 100.894868][ T7482] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1430: mark_inode_dirty error [ 100.907570][ T7482] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1430: corrupted inode contents [ 100.923447][ T7482] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1430: corrupted inode contents [ 100.940132][ T7482] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1430: mark_inode_dirty error [ 100.953586][ T7482] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1430: corrupted inode contents [ 100.967770][ T7482] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1430: mark_inode_dirty error [ 101.013326][ T7482] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1430: corrupted inode contents [ 101.027290][ T7482] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1430: mark_inode_dirty error [ 101.042736][ T7498] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1430: corrupted inode contents [ 101.119476][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.165110][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.173735][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.187049][ T7511] ip6gretap0: entered promiscuous mode [ 101.193614][ T7511] syz_tun: entered promiscuous mode [ 101.211663][ T7511] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 101.220572][ T7511] Cannot create hsr debugfs directory [ 101.226244][ T7511] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 101.236734][ T7511] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 101.375142][ T7533] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 101.460913][ T29] kauditd_printk_skb: 909 callbacks suppressed [ 101.460931][ T29] audit: type=1326 audit(2000000313.650:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 101.528648][ T29] audit: type=1326 audit(2000000313.650:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 101.552965][ T29] audit: type=1326 audit(2000000313.650:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 101.576323][ T29] audit: type=1326 audit(2000000313.700:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 101.600520][ T29] audit: type=1326 audit(2000000313.700:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 101.738014][ T7547] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 101.750227][ T7547] SELinux: failed to load policy [ 101.879185][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.898263][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.009087][ T29] audit: type=1326 audit(2000000314.190:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.1.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 102.033362][ T29] audit: type=1326 audit(2000000314.190:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.1.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 102.057108][ T29] audit: type=1326 audit(2000000314.190:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.1.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 102.081250][ T29] audit: type=1326 audit(2000000314.190:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.1.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 102.104759][ T29] audit: type=1326 audit(2000000314.190:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.1.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd33be929 code=0x7ffc0000 [ 102.443101][ T7583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7583 comm=syz.4.1466 [ 102.926949][ T7601] __nla_validate_parse: 17 callbacks suppressed [ 102.926969][ T7601] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1472'. [ 102.997552][ T7585] Set syz1 is full, maxelem 65536 reached [ 103.075799][ T7605] loop4: detected capacity change from 0 to 512 [ 103.102351][ T7605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.116102][ T7605] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.209554][ T7617] tls_set_device_offload_rx: netdev not found [ 103.227486][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.298013][ T7626] syz_tun: entered allmulticast mode [ 103.309506][ T7626] syz_tun: left allmulticast mode [ 103.334054][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 103.486980][ T7643] netlink: 'syz.4.1487': attribute type 13 has an invalid length. [ 103.515171][ T7643] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 103.523511][ T7643] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.534539][ T7643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.630742][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 103.635605][ T7663] netlink: 'syz.4.1495': attribute type 27 has an invalid length. [ 103.639819][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 103.639841][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 103.682027][ T7667] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1494'. [ 103.693843][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 103.703099][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 103.713133][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 103.757073][ T7663] wg2: left promiscuous mode [ 103.761867][ T7663] wg2: left allmulticast mode [ 103.772537][ T7663] team1: left promiscuous mode [ 103.777760][ T7663] team1: left allmulticast mode [ 103.787066][ T7663] vlan4: left promiscuous mode [ 103.792003][ T7663] bond0: left promiscuous mode [ 103.797094][ T7663] dummy0: left promiscuous mode [ 103.804130][ T7663] ip6gre1: left allmulticast mode [ 103.809493][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 103.981486][ T7675] loop3: detected capacity change from 0 to 2048 [ 103.990455][ T7675] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.002253][ T7675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.042748][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.403646][ T7692] 9pnet_fd: Insufficient options for proto=fd [ 104.604152][ T7710] loop3: detected capacity change from 0 to 2048 [ 104.621484][ T7710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.634637][ T7710] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.770727][ T7719] loop0: detected capacity change from 0 to 164 [ 104.771342][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.791165][ T7719] ISOFS: unable to read i-node block [ 104.796669][ T7719] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 105.046117][ T7737] vxcan1 speed is unknown, defaulting to 1000 [ 105.200376][ T7737] lo speed is unknown, defaulting to 1000 [ 105.355905][ T7753] SELinux: failed to load policy [ 105.612245][ T7760] sch_fq: defrate 0 ignored. [ 106.479166][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 106.479184][ T29] audit: type=1400 audit(2000000318.660:4946): avc: denied { execmem } for pid=7776 comm="syz.1.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 106.737207][ T29] audit: type=1400 audit(2000000318.920:4947): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.762203][ T29] audit: type=1400 audit(2000000318.920:4948): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.786664][ T29] audit: type=1400 audit(2000000318.920:4949): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.864194][ T29] audit: type=1400 audit(2000000319.040:4950): avc: denied { open } for pid=7778 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.884537][ T29] audit: type=1400 audit(2000000319.040:4951): avc: denied { kernel } for pid=7778 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.904034][ T29] audit: type=1400 audit(2000000319.040:4952): avc: denied { tracepoint } for pid=7778 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.011077][ T29] audit: type=1400 audit(2000000319.200:4953): avc: denied { create } for pid=7783 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.038038][ T29] audit: type=1400 audit(2000000319.220:4954): avc: denied { create } for pid=7781 comm="syz.0.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.059429][ T29] audit: type=1400 audit(2000000319.220:4955): avc: denied { write } for pid=7781 comm="syz.0.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.134968][ T7789] Set syz1 is full, maxelem 65536 reached [ 107.174321][ T7790] vxcan1 speed is unknown, defaulting to 1000 [ 107.255928][ T7790] lo speed is unknown, defaulting to 1000 [ 107.283480][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.310805][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.429739][ T7806] loop3: detected capacity change from 0 to 8192 [ 107.483308][ T7806] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 107.491663][ T7806] FAT-fs (loop3): Filesystem has been set read-only [ 107.522550][ T7814] netlink: 'syz.2.1549': attribute type 27 has an invalid length. [ 107.898833][ T7827] loop0: detected capacity change from 0 to 1024 [ 107.921244][ T7827] EXT4-fs: Ignoring removed orlov option [ 107.940150][ T7827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.417579][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.639366][ T7851] vxcan1 speed is unknown, defaulting to 1000 [ 108.802328][ T7851] lo speed is unknown, defaulting to 1000 [ 109.477119][ T7869] __nla_validate_parse: 6 callbacks suppressed [ 109.477136][ T7869] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1570'. [ 109.643884][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 109.679252][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 109.692083][ T7875] @ÿ: renamed from bond_slave_0 (while UP) [ 109.901446][ T7879] team0 (unregistering): Port device team_slave_0 removed [ 109.910961][ T7879] team0 (unregistering): Port device team_slave_1 removed [ 109.961330][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'. [ 110.050145][ T7891] netlink: 'syz.3.1579': attribute type 3 has an invalid length. [ 110.229565][ T7908] tipc: Started in network mode [ 110.234662][ T7908] tipc: Node identity ac14140f, cluster identity 4711 [ 110.258452][ T7908] tipc: New replicast peer: 10.1.1.2 [ 110.263974][ T7908] tipc: Enabled bearer , priority 10 [ 110.437044][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 110.477912][ T7925] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.522039][ T7925] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.530038][ T7927] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1590'. [ 110.591356][ T7925] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.631079][ T7925] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.676900][ T7925] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.688475][ T7925] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.700607][ T7925] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.712036][ T7925] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.260193][ T5800] tipc: Node number set to 2886997007 [ 111.479990][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 111.480074][ T29] audit: type=1326 audit(2000000323.670:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c428b58e7 code=0x7ffc0000 [ 111.511692][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 111.512143][ T29] audit: type=1326 audit(2000000323.700:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c4285ab19 code=0x7ffc0000 [ 111.544994][ T29] audit: type=1326 audit(2000000323.700:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c428b58e7 code=0x7ffc0000 [ 111.568365][ T29] audit: type=1326 audit(2000000323.700:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c4285ab19 code=0x7ffc0000 [ 111.592752][ T29] audit: type=1326 audit(2000000323.700:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 111.616490][ T29] audit: type=1326 audit(2000000323.780:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c428b58e7 code=0x7ffc0000 [ 111.640680][ T29] audit: type=1326 audit(2000000323.780:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c4285ab19 code=0x7ffc0000 [ 111.664120][ T29] audit: type=1326 audit(2000000323.780:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 111.688166][ T29] audit: type=1326 audit(2000000323.780:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c428b58e7 code=0x7ffc0000 [ 111.712237][ T29] audit: type=1326 audit(2000000323.790:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c4285ab19 code=0x7ffc0000 [ 112.075692][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 112.089077][ T7990] vlan5: entered promiscuous mode [ 112.386548][ T8026] SELinux: failed to load policy [ 112.471345][ T8033] loop3: detected capacity change from 0 to 1024 [ 112.479127][ T8033] EXT4-fs: Ignoring removed orlov option [ 112.498953][ T8033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.523626][ T8040] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1637'. [ 112.824630][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.291386][ T8052] Set syz1 is full, maxelem 65536 reached [ 113.659800][ T5792] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 114.075931][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 114.199353][ T8107] veth0: entered promiscuous mode [ 114.234649][ T8107] veth0 (unregistering): left promiscuous mode [ 114.654097][ T8132] loop4: detected capacity change from 0 to 1024 [ 114.710513][ T8132] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.721538][ T8132] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.801163][ T8132] JBD2: no valid journal superblock found [ 114.804073][ T8134] __nla_validate_parse: 2 callbacks suppressed [ 114.804095][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1675'. [ 114.807090][ T8132] EXT4-fs (loop4): Could not load journal inode [ 114.856300][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 115.131210][ T8154] tipc: Cannot configure node identity twice [ 115.137302][ T8154] tipc: Cannot configure node identity twice [ 115.312371][ T8164] sch_fq: defrate 2048 ignored. [ 115.391627][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 115.401471][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 115.417365][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 115.438163][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 115.496392][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 115.601244][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 115.766363][ T8177] bond0 (unregistering): Released all slaves [ 115.860824][ T8180] bond0 (unregistering): Released all slaves [ 115.944889][ T8183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8183 comm=syz.3.1691 [ 115.993285][ T8183] loop3: detected capacity change from 0 to 512 [ 116.021041][ T8183] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.070955][ T8183] EXT4-fs error (device loop3): __ext4_iget:5379: inode #11: block 3: comm syz.3.1691: invalid block [ 116.107287][ T8183] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1691: couldn't read orphan inode 11 (err -117) [ 116.147739][ T8183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.166296][ T8190] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1693'. [ 116.196661][ T8190] $Hÿ (unregistering): Released all slaves [ 116.205887][ T8183] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.1691: Unrecognised inode hash code 20 [ 116.217366][ T8183] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1691: Corrupt directory, running e2fsck is recommended [ 116.287244][ T8183] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.1691: Unrecognised inode hash code 20 [ 116.299498][ T8183] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1691: Corrupt directory, running e2fsck is recommended [ 116.360121][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.405978][ T8194] bond0: (slave dummy0): Releasing active interface [ 116.417655][ T8194] bridge_slave_0: left allmulticast mode [ 116.423420][ T8194] bridge_slave_0: left promiscuous mode [ 116.429277][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.438298][ T8194] bridge_slave_1: left allmulticast mode [ 116.444769][ T8194] bridge_slave_1: left promiscuous mode [ 116.450730][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.460520][ T8194] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 116.469055][ T8194] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 116.479414][ T8194] tipc: Resetting bearer [ 116.571045][ T8198] syz.0.1697 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 116.638496][ T8200] loop0: detected capacity change from 0 to 1024 [ 116.702713][ T8200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.716545][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 116.716558][ T29] audit: type=1400 audit(2000000328.900:5623): avc: denied { firmware_load } for pid=8191 comm="syz.3.1694" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 116.752475][ T8200] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1698: Allocating blocks 385-513 which overlap fs metadata [ 116.799638][ T8200] EXT4-fs (loop0): pa ffff888106dd4150: logic 16, phys. 129, len 24 [ 116.808044][ T8200] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 116.841985][ T29] audit: type=1400 audit(2000000328.940:5624): avc: denied { read write } for pid=8199 comm="syz.0.1698" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.864730][ T29] audit: type=1400 audit(2000000328.940:5625): avc: denied { open } for pid=8199 comm="syz.0.1698" path="/335/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.900305][ T8212] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 116.908852][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 116.964652][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.031356][ T29] audit: type=1400 audit(2000000329.220:5626): avc: denied { create } for pid=8215 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.079760][ T29] audit: type=1400 audit(2000000329.220:5627): avc: denied { bind } for pid=8215 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.271489][ T29] audit: type=1326 audit(2000000329.460:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 117.337623][ T29] audit: type=1326 audit(2000000329.480:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 117.361294][ T29] audit: type=1400 audit(2000000329.480:5630): avc: denied { wake_alarm } for pid=8227 comm="syz.0.1709" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.382494][ T29] audit: type=1326 audit(2000000329.480:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 117.405921][ T29] audit: type=1326 audit(2000000329.480:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fa0ce929 code=0x7ffc0000 [ 117.549686][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.560174][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.769615][ T8239] vxcan1 speed is unknown, defaulting to 1000 [ 117.969514][ T8254] pim6reg1: entered promiscuous mode [ 117.974959][ T8254] pim6reg1: entered allmulticast mode [ 118.215766][ T8263] block device autoloading is deprecated and will be removed. [ 118.243907][ T8263] syz.3.1725: attempt to access beyond end of device [ 118.243907][ T8263] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.480546][ T8239] lo speed is unknown, defaulting to 1000 [ 118.547972][ T8274] C: renamed from team_slave_0 [ 118.561725][ T8274] netlink: 'syz.2.1730': attribute type 3 has an invalid length. [ 118.573008][ T8274] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 119.204322][ T8293] loop3: detected capacity change from 0 to 764 [ 119.291064][ T8293] rock: directory entry would overflow storage [ 119.297472][ T8293] rock: sig=0x4654, size=5, remaining=4 [ 119.373217][ T5822] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 119.381612][ T5822] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 119.389055][ T5822] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 119.406832][ T5822] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.517034][ T8308] vxcan1 speed is unknown, defaulting to 1000 [ 119.673927][ T8308] lo speed is unknown, defaulting to 1000 [ 120.047136][ T8346] netlink: 'syz.4.1761': attribute type 12 has an invalid length. [ 120.212780][ T8332] __nla_validate_parse: 3 callbacks suppressed [ 120.212797][ T8332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1754'. [ 120.233187][ T8366] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 120.262780][ T8368] loop0: detected capacity change from 0 to 164 [ 120.270451][ T8368] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.439095][ T8378] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.144397][ T8402] loop0: detected capacity change from 0 to 128 [ 121.243120][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.243120][ T8402] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 121.256860][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.256860][ T8402] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 121.271323][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.271323][ T8402] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 121.285088][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.285088][ T8402] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 121.315220][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.315220][ T8402] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 121.328977][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.328977][ T8402] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 121.346106][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.346106][ T8402] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 121.427425][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.427425][ T8402] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 121.450553][ T8402] syz.0.1784: attempt to access beyond end of device [ 121.450553][ T8402] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 121.542945][ T8420] bridge: RTM_NEWNEIGH with invalid ether address [ 121.603420][ T8424] loop4: detected capacity change from 0 to 2048 [ 121.720614][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 121.720630][ T29] audit: type=1326 audit(2000000333.910:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c428be929 code=0x7ffc0000 [ 121.967733][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.025949][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.052307][ T29] audit: type=1400 audit(2000000334.240:5812): avc: denied { write } for pid=8438 comm="syz.3.1799" name="rt_acct" dev="proc" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 122.385776][ T29] audit: type=1400 audit(2000000334.540:5813): avc: denied { listen } for pid=8448 comm="syz.1.1812" lport=60546 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.410643][ T29] audit: type=1400 audit(2000000334.540:5814): avc: denied { accept } for pid=8448 comm="syz.1.1812" lport=60546 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.434777][ T29] audit: type=1400 audit(2000000334.540:5815): avc: denied { write } for pid=8448 comm="syz.1.1812" lport=60546 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 122.460161][ T29] audit: type=1400 audit(2000000334.540:5816): avc: denied { setopt } for pid=8448 comm="syz.1.1812" lport=60546 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 122.484814][ T29] audit: type=1326 audit(2000000334.560:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 122.509070][ T29] audit: type=1326 audit(2000000334.570:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 122.533185][ T29] audit: type=1326 audit(2000000334.570:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 122.556704][ T29] audit: type=1326 audit(2000000334.570:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e929 code=0x7ffc0000 [ 122.600734][ T8453] 9pnet: p9_errstr2errno: server reported unknown error [ 123.857773][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1823'. [ 123.869431][ T8495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1823'. [ 124.056761][ T8517] loop3: detected capacity change from 0 to 512 [ 124.064355][ T8517] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.077032][ T8517] EXT4-fs (loop3): 1 truncate cleaned up [ 124.083201][ T8517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.111560][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.464593][ T8540] bond2: entered promiscuous mode [ 124.470065][ T8540] bond2: entered allmulticast mode [ 124.481115][ T8540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.502847][ T8540] bond2 (unregistering): Released all slaves [ 124.643537][ T8553] loop3: detected capacity change from 0 to 2048 [ 124.673347][ T8553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 124.711542][ T8543] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1842'. [ 124.785993][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.793647][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.864183][ T8559] wg2: left promiscuous mode [ 124.868890][ T8559] wg2: left allmulticast mode [ 124.943609][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.968678][ T8553] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.984596][ T8553] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 124.997093][ T8553] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.997093][ T8553] [ 125.006952][ T8553] EXT4-fs (loop3): Total free blocks count 0 [ 125.013126][ T8553] EXT4-fs (loop3): Free/Dirty block details [ 125.019045][ T8553] EXT4-fs (loop3): free_blocks=2415919104 [ 125.024909][ T8553] EXT4-fs (loop3): dirty_blocks=8208 [ 125.030278][ T8553] EXT4-fs (loop3): Block reservation details [ 125.036528][ T8553] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 125.057150][ T8559] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.066476][ T8559] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.075117][ T8559] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.083535][ T8559] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.096048][ T8559] ip6gre1: left allmulticast mode [ 125.105904][ T8559] ip6gre2: left allmulticast mode [ 125.131018][ T8564] vxcan1 speed is unknown, defaulting to 1000 [ 125.169990][ T8564] lo speed is unknown, defaulting to 1000 [ 125.197081][ T6851] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 125.528331][ T8596] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.734233][ T8627] hub 9-0:1.0: USB hub found [ 125.741818][ T8627] hub 9-0:1.0: 8 ports detected [ 125.904254][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 125.913500][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 125.936502][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 126.544984][ T8742] 9pnet: p9_errstr2errno: server reported unknown error [ 126.701142][ T8761] loop0: detected capacity change from 0 to 1024 [ 126.708093][ T8761] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.722027][ T8761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.752145][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.790015][ T8769] syzkaller0: left promiscuous mode [ 126.795329][ T8769] syzkaller0: left allmulticast mode [ 126.801135][ T8769] tipc: Resetting bearer [ 126.845737][ T8771] vxcan1 speed is unknown, defaulting to 1000 [ 126.873525][ T8773] loop4: detected capacity change from 0 to 128 [ 126.885581][ T8771] lo speed is unknown, defaulting to 1000 [ 126.957330][ T8773] bio_check_eod: 81 callbacks suppressed [ 126.957345][ T8773] syz.4.1884: attempt to access beyond end of device [ 126.957345][ T8773] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 126.976751][ T8773] syz.4.1884: attempt to access beyond end of device [ 126.976751][ T8773] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 126.990916][ T8773] syz.4.1884: attempt to access beyond end of device [ 126.990916][ T8773] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 127.004371][ T8773] syz.4.1884: attempt to access beyond end of device [ 127.004371][ T8773] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 127.018026][ T8773] syz.4.1884: attempt to access beyond end of device [ 127.018026][ T8773] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 127.032179][ T8773] syz.4.1884: attempt to access beyond end of device [ 127.032179][ T8773] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 127.045729][ T8773] syz.4.1884: attempt to access beyond end of device [ 127.045729][ T8773] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 127.059248][ T8773] syz.4.1884: attempt to access beyond end of device [ 127.059248][ T8773] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 127.073604][ T8773] syz.4.1884: attempt to access beyond end of device [ 127.073604][ T8773] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 127.087165][ T8773] syz.4.1884: attempt to access beyond end of device [ 127.087165][ T8773] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 127.704594][ T8789] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.773558][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1892'. [ 127.831244][ T8793] bridge0: port 1(macvlan2) entered blocking state [ 127.839026][ T8793] bridge0: port 1(macvlan2) entered disabled state [ 127.848277][ T8793] macvlan2: entered allmulticast mode [ 127.868657][ T8793] bridge0: entered allmulticast mode [ 127.885185][ T8793] macvlan2: left allmulticast mode [ 127.909905][ T8793] bridge0: left allmulticast mode [ 128.043016][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 128.043033][ T29] audit: type=1400 audit(2000000340.230:6004): avc: denied { bind } for pid=8799 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.069569][ T29] audit: type=1400 audit(2000000340.230:6005): avc: denied { name_bind } for pid=8799 comm="syz.2.1895" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 128.071521][ T8804] vxcan1 speed is unknown, defaulting to 1000 [ 128.091270][ T29] audit: type=1400 audit(2000000340.230:6006): avc: denied { node_bind } for pid=8799 comm="syz.2.1895" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 128.160525][ T29] audit: type=1400 audit(2000000340.310:6007): avc: denied { read } for pid=8799 comm="syz.2.1895" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.195059][ T8804] lo speed is unknown, defaulting to 1000 [ 128.236740][ T8817] vxcan1 speed is unknown, defaulting to 1000 [ 128.277819][ T8817] lo speed is unknown, defaulting to 1000 [ 128.291004][ T8819] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1903'. [ 128.318685][ T8822] bond1: entered promiscuous mode [ 128.324088][ T8822] bond1: entered allmulticast mode [ 128.330801][ T8822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.341256][ T8822] bond1 (unregistering): Released all slaves [ 128.454082][ T29] audit: type=1326 audit(2000000340.640:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 128.486692][ T29] audit: type=1326 audit(2000000340.670:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 128.510859][ T29] audit: type=1326 audit(2000000340.670:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 128.534421][ T29] audit: type=1326 audit(2000000340.670:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 128.558001][ T29] audit: type=1326 audit(2000000340.670:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 128.582234][ T29] audit: type=1326 audit(2000000340.670:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9463cde929 code=0x7ffc0000 [ 128.622584][ T8834] lo: left promiscuous mode [ 128.627143][ T8834] lo: left allmulticast mode [ 128.647625][ T8834] dummy0: left promiscuous mode [ 128.653883][ T8834] tipc: Resetting bearer [ 128.672269][ T8834] vlan3: left promiscuous mode [ 128.677197][ T8834] bond0: left promiscuous mode [ 128.738823][ T8841] vxcan1 speed is unknown, defaulting to 1000 [ 128.781888][ T8841] lo speed is unknown, defaulting to 1000 [ 129.111670][ T8859] No such timeout policy "syz0" [ 129.488081][ T8877] loop3: detected capacity change from 0 to 1024 [ 129.503063][ T8877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.517731][ T8877] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1925: Allocating blocks 385-513 which overlap fs metadata [ 129.537135][ T8877] EXT4-fs (loop3): pa ffff888106dd41c0: logic 16, phys. 129, len 24 [ 129.545317][ T8877] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 129.555146][ T8882] vxcan1 speed is unknown, defaulting to 1000 [ 129.573835][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.597656][ T8882] lo speed is unknown, defaulting to 1000 [ 129.655216][ T8890] netlink: 'syz.4.1929': attribute type 4 has an invalid length. [ 129.707731][ T8893] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1930'. [ 129.851658][ C1] ================================================================== [ 129.859800][ C1] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 129.866246][ C1] [ 129.868585][ C1] read to 0xffffc90001e9fbc0 of 4 bytes by task 8871 on cpu 0: [ 129.876143][ C1] do_sys_poll+0x99c/0xbd0 [ 129.880571][ C1] __se_sys_ppoll+0x1b9/0x200 [ 129.885246][ C1] __x64_sys_ppoll+0x67/0x80 [ 129.889833][ C1] x64_sys_call+0x2de5/0x2fb0 [ 129.894524][ C1] do_syscall_64+0xd2/0x200 [ 129.899123][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.905023][ C1] [ 129.907344][ C1] write to 0xffffc90001e9fbc0 of 4 bytes by interrupt on cpu 1: [ 129.914975][ C1] pollwake+0xb6/0x100 [ 129.919045][ C1] __wake_up+0x63/0xb0 [ 129.923146][ C1] bpf_ringbuf_notify+0x22/0x30 [ 129.928010][ C1] irq_work_run+0xdf/0x2d0 [ 129.932437][ C1] __sysvec_irq_work+0x22/0x170 [ 129.937286][ C1] sysvec_irq_work+0x66/0x80 [ 129.941876][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 129.946816][ C1] native_apic_msr_write+0x3d/0x60 [ 129.951935][ C1] x2apic_send_IPI_self+0x10/0x20 [ 129.956984][ C1] arch_irq_work_raise+0x46/0x50 [ 129.962017][ C1] __irq_work_queue_local+0x10f/0x2c0 [ 129.967423][ C1] irq_work_queue+0x70/0x100 [ 129.972038][ C1] bpf_ringbuf_discard+0xd3/0xf0 [ 129.977004][ C1] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 129.982476][ C1] bpf_trace_run3+0x10c/0x1d0 [ 129.987161][ C1] __traceiter_kmem_cache_free+0x38/0x60 [ 129.992794][ C1] kmem_cache_free+0x257/0x300 [ 129.997567][ C1] kernfs_free_rcu+0x97/0xb0 [ 130.002177][ C1] rcu_core+0x5a2/0xc00 [ 130.006337][ C1] rcu_core_si+0xd/0x20 [ 130.010490][ C1] handle_softirqs+0xba/0x290 [ 130.015170][ C1] run_ksoftirqd+0x1c/0x30 [ 130.019592][ C1] smpboot_thread_fn+0x32b/0x530 [ 130.024559][ C1] kthread+0x486/0x510 [ 130.028627][ C1] ret_from_fork+0xda/0x150 [ 130.033143][ C1] ret_from_fork_asm+0x1a/0x30 [ 130.037926][ C1] [ 130.040271][ C1] value changed: 0x00000001 -> 0x00000000 [ 130.045991][ C1] [ 130.048313][ C1] Reported by Kernel Concurrency Sanitizer on: [ 130.054470][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 130.066798][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.076858][ C1] ==================================================================