last executing test programs: 2m48.435177906s ago: executing program 3 (id=501): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m48.134379955s ago: executing program 3 (id=506): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x3e0, 0xe8, 0x0, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x7fff, 0x3}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0xff000000, 0x10, 0xf, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x0, 0x9, 0xc, 0x5, 0x30, 'dvmrp0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x6}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x8}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x94, {0x4}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 2m47.880374309s ago: executing program 3 (id=519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) 2m47.828570004s ago: executing program 3 (id=510): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xbfb}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x4) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) 2m47.714590634s ago: executing program 3 (id=513): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000b00), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17b) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x205010, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x8]}) fadvise64(r0, 0x14, 0x0, 0x4) 2m47.559787189s ago: executing program 3 (id=520): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m32.063034075s ago: executing program 32 (id=520): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1m43.878601821s ago: executing program 2 (id=1693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x8) splice(r3, 0x0, r1, 0x0, 0x6, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m43.706106977s ago: executing program 2 (id=1701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0xffffffffffffff60) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) close_range(r1, 0xffffffffffffffff, 0x0) 1m43.705125667s ago: executing program 2 (id=1702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 1m43.67168254s ago: executing program 2 (id=1703): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000700)='hrtimer_start\x00', r2}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m43.622309475s ago: executing program 2 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000400000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4, 0x0, 0x2000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040), &(0x7f0000000600)) 1m43.539039883s ago: executing program 2 (id=1705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sync() r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1m28.430425681s ago: executing program 33 (id=1705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sync() r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 47.372904122s ago: executing program 6 (id=2830): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 47.108441128s ago: executing program 6 (id=2838): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 47.011993337s ago: executing program 6 (id=2842): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 46.910858816s ago: executing program 6 (id=2848): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0x14, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cf6d61fd01335263bd9bffbcc2542ded71038259ea171ce1a320ef54ec32d71e14ef3dc177e9b48b009000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@md5={0x1, "8917e45442ad85fdf13747f4c2d3f592"}, 0x11, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/../file0\x00', 0x0, 0x100) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xbd053, 0x0, 0x4, 0x0, &(0x7f00000008c0)) 46.178168565s ago: executing program 6 (id=2864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 46.046982058s ago: executing program 6 (id=2854): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1132e88, 0x4) 46.046686438s ago: executing program 34 (id=2854): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1132e88, 0x4) 26.471312798s ago: executing program 1 (id=3397): socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0xe825, 0x80, 0x1, 0x3c1}, &(0x7f0000000440)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_open_dev$usbfs(0x0, 0xffffffffffffff6d, 0x80) io_uring_enter(r0, 0x847ba, 0x1, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 26.398191385s ago: executing program 1 (id=3399): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 26.389051836s ago: executing program 1 (id=3401): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) 26.349648929s ago: executing program 1 (id=3403): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 25.797454252s ago: executing program 1 (id=3419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001ac0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @empty}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x4}}, 0x20) 25.797063722s ago: executing program 1 (id=3420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x10, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYBLOB="7a82024ca08464a42f9052849f6aedf9889137e42e7c59f52e9f1d59a2dbef60b1c440b477040bca752b56ec1187bbf32511735859824c", @ANYRESHEX], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() pread64(0xffffffffffffffff, &(0x7f00000024c0)=""/209, 0x23, 0x697) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 10.733123495s ago: executing program 35 (id=3420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x10, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYBLOB="7a82024ca08464a42f9052849f6aedf9889137e42e7c59f52e9f1d59a2dbef60b1c440b477040bca752b56ec1187bbf32511735859824c", @ANYRESHEX], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() pread64(0xffffffffffffffff, &(0x7f00000024c0)=""/209, 0x23, 0x697) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 7.107788488s ago: executing program 0 (id=3823): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 7.106522138s ago: executing program 7 (id=3824): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.105884738s ago: executing program 5 (id=3825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x0, 0x200}}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) 7.105516058s ago: executing program 4 (id=3826): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/netstat\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 6.183936376s ago: executing program 0 (id=3827): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x2, 0xa, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 6.183318376s ago: executing program 7 (id=3828): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000001000)=0x84) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 6.182768975s ago: executing program 5 (id=3829): epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001200130628b57000fdd3df2506ff01fc00004e2200239e8927000600000009000000090000007d00014afb909eac16394b7e7100e61e70783e85d29f65c6c92e1f"], 0x4c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) 6.182375846s ago: executing program 4 (id=3830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000340)={0xeec4, 0x1, [{0x6}]}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@empty, {}, {0xfffffffffffffffd, 0x7, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) 5.128425275s ago: executing program 0 (id=3831): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x80, 0x3, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x8001, 0x10001}}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 5.127096285s ago: executing program 7 (id=3832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180006ac"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40840) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x18, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 5.126655206s ago: executing program 5 (id=3833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000400000002c0012800c0001006d6163766c616e001c00028008000900ffffffff08000100010000000800030000000000140035006d6163766c616e30"], 0x60}}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r2, 0x2004, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) 5.126377856s ago: executing program 4 (id=3834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0x3}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42848}, 0x4000010) 4.008320581s ago: executing program 0 (id=3835): socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x0, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.007885321s ago: executing program 7 (id=3836): r0 = syz_io_uring_setup(0x512b, 0x0, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}}, 0x8000) 4.006977352s ago: executing program 5 (id=3837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x8, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) socket$kcm(0xa, 0x5, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24044015) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4.006498011s ago: executing program 4 (id=3838): r0 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 2.734015132s ago: executing program 0 (id=3839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) r2 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x200, 0x10000, 0x0, 0x6, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unshare(0x28020480) 2.732454212s ago: executing program 7 (id=3840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x12, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x28}, 0x94) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 2.731969392s ago: executing program 5 (id=3841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.731476702s ago: executing program 4 (id=3842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "5c000002010400", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, '\x00 \x00', "38967a2445914c2e5ab898a7f56a364a", "80020007", "bff5b80e1f6fd131"}, 0x28) 2.42993ms ago: executing program 0 (id=3843): mount(&(0x7f0000000240)=@filename='./file0\x00', 0x0, 0x0, 0x8000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x24, 0x0, 0x0, 0x5, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.30471ms ago: executing program 7 (id=3844): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 855.09µs ago: executing program 5 (id=3845): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) socket$netlink(0x10, 0x3, 0xc) flistxattr(r3, 0x0, 0x0) 0s ago: executing program 4 (id=3846): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) kernel console output (not intermixed with test programs): de [ 132.357097][ T9095] debugfs: 'hsr0' already exists in 'hsr' [ 132.362936][ T9095] Cannot create hsr debugfs directory [ 132.391047][ T9161] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.395842][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 132.400244][ T9161] bond0: (slave batadv1): making interface the new active one [ 132.417663][ T9167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2037'. [ 132.470282][ T9161] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 132.511691][ T9171] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=9171 comm=syz.1.2038 [ 132.663426][ T9095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 132.675672][ T9095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 132.685250][ T9095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 132.695045][ T9095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 132.755036][ T9095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.768418][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.787479][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.794623][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.828887][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.836053][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.934439][ T9095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.018057][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.124445][ T9095] veth0_vlan: entered promiscuous mode [ 133.143021][ T9095] veth1_vlan: entered promiscuous mode [ 133.158613][ T9095] veth0_macvtap: entered promiscuous mode [ 133.170882][ T9095] veth1_macvtap: entered promiscuous mode [ 133.183553][ T9095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.203086][ T9095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.215692][ T7825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.235313][ T7825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.259724][ T7825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.292347][ T7825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.333588][ T9213] netlink: 'syz.6.2015': attribute type 1 has an invalid length. [ 133.346242][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2015'. [ 133.456328][ T9217] loop4: detected capacity change from 0 to 512 [ 133.477084][ T9217] EXT4-fs: Ignoring removed orlov option [ 133.491949][ T9217] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 133.506379][ T9217] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2059: corrupted in-inode xattr: e_value size too large [ 133.520914][ T9217] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2059: couldn't read orphan inode 15 (err -117) [ 133.534339][ T9217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.625114][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.899948][ T9218] loop6: detected capacity change from 0 to 32768 [ 133.943026][ T9218] loop6: p1 p3 < p5 > [ 133.947137][ T9218] loop6: partition table partially beyond EOD, truncated [ 133.957311][ T9218] loop6: p1 size 67108864 extends beyond EOD, truncated [ 134.414348][ T9252] loop4: detected capacity change from 0 to 512 [ 134.424047][ T9256] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 134.460115][ T9256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.468645][ T9252] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.490013][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 134.499329][ T9252] EXT4-fs (loop4): mount failed [ 134.505918][ T9256] bond1 (unregistering): Released all slaves [ 135.150747][ T9290] loop4: detected capacity change from 0 to 2048 [ 135.179317][ T9294] netlink: 'syz.6.2081': attribute type 12 has an invalid length. [ 135.189123][ T9296] netlink: 'syz.0.2082': attribute type 1 has an invalid length. [ 135.198690][ T9290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.218208][ T9296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.235221][ T9296] macvlan2: entered promiscuous mode [ 135.241646][ T9296] bond1: entered promiscuous mode [ 135.247015][ T9296] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.255358][ T9296] bond1: left promiscuous mode [ 135.561197][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'. [ 135.668320][ T9312] .`: (slave dummy0): Releasing backup interface [ 135.684008][ T9316] netlink: 'syz.5.2086': attribute type 1 has an invalid length. [ 135.694318][ T9312] batman_adv: batadv0: Adding interface: dummy0 [ 135.700648][ T9312] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.726060][ T9312] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 135.742977][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2086'. [ 135.746626][ T9316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.762813][ T9319] bond2 (unregistering): Released all slaves [ 135.978596][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.904348][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 136.904366][ T29] audit: type=1400 audit(1762900015.468:3970): avc: denied { bind } for pid=9344 comm="syz.0.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.943139][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 136.952167][ T9346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2111'. [ 136.961170][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 136.991682][ T29] audit: type=1400 audit(1762900015.498:3971): avc: denied { listen } for pid=9344 comm="syz.0.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.011242][ T29] audit: type=1400 audit(1762900015.528:3972): avc: denied { bind } for pid=9340 comm="syz.5.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.022606][ T9346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2111'. [ 137.030541][ T29] audit: type=1400 audit(1762900015.528:3973): avc: denied { getopt } for pid=9340 comm="syz.5.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.039530][ T9346] netlink: 'syz.1.2111': attribute type 6 has an invalid length. [ 137.071484][ T31] EXT4-fs error: 17125 callbacks suppressed [ 137.071538][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 137.089882][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 137.110041][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 137.121999][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 137.131285][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 137.143004][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 137.152191][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 137.163891][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 137.173544][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 137.185212][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 137.455690][ T9352] veth2: entered promiscuous mode [ 137.460840][ T9352] veth2: entered allmulticast mode [ 137.549861][ T9365] netlink: 'syz.1.2106': attribute type 1 has an invalid length. [ 137.595538][ T9365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.627078][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 137.682775][ T29] audit: type=1400 audit(1762900016.238:3974): avc: denied { create } for pid=9372 comm="syz.4.2109" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.703703][ T29] audit: type=1400 audit(1762900016.238:3975): avc: denied { rename } for pid=9372 comm="syz.4.2109" name="file0" dev="tmpfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.726342][ T29] audit: type=1400 audit(1762900016.238:3976): avc: denied { mounton } for pid=9372 comm="syz.4.2109" path="/452/file7" dev="tmpfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.755609][ T9370] bond2 (unregistering): Released all slaves [ 137.856398][ T9369] loop5: detected capacity change from 0 to 32768 [ 137.867423][ T29] audit: type=1400 audit(1762900016.428:3977): avc: denied { unlink } for pid=3323 comm="syz-executor" name="file7" dev="tmpfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.912125][ T9369] loop5: p1 p3 < p5 > [ 137.916245][ T9369] loop5: partition table partially beyond EOD, truncated [ 137.951565][ T9369] loop5: p1 size 67108864 extends beyond EOD, truncated [ 138.017044][ T9389] loop4: detected capacity change from 0 to 1024 [ 138.023892][ T29] audit: type=1400 audit(1762900016.558:3978): avc: denied { bind } for pid=9385 comm="syz.1.2119" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.044185][ T29] audit: type=1400 audit(1762900016.558:3979): avc: denied { node_bind } for pid=9385 comm="syz.1.2119" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 138.058480][ T9391] loop5: detected capacity change from 0 to 2048 [ 138.067381][ T9389] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 138.084352][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2120'. [ 138.119100][ T9391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.174946][ T9391] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.221744][ T9391] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 138.234264][ T9391] EXT4-fs (loop5): This should not happen!! Data will be lost [ 138.234264][ T9391] [ 138.243989][ T9391] EXT4-fs (loop5): Total free blocks count 0 [ 138.250077][ T9391] EXT4-fs (loop5): Free/Dirty block details [ 138.256005][ T9391] EXT4-fs (loop5): free_blocks=2415919104 [ 138.261830][ T9391] EXT4-fs (loop5): dirty_blocks=64 [ 138.266956][ T9391] EXT4-fs (loop5): Block reservation details [ 138.273166][ T9391] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 138.299308][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.463504][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'. [ 138.473169][ T9425] loop4: detected capacity change from 0 to 164 [ 138.560877][ T9436] netlink: 'syz.4.2140': attribute type 30 has an invalid length. [ 138.685370][ T9444] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.753088][ T9453] loop4: detected capacity change from 0 to 128 [ 138.821561][ T9457] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.851762][ T9457] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 138.915133][ T9465] loop5: detected capacity change from 0 to 1024 [ 138.934034][ T9465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.025036][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.081918][ T9474] ref_ctr_offset mismatch. inode: 0x78 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 139.398847][ T9511] tipc: Started in network mode [ 139.403950][ T9511] tipc: Node identity ac14140f, cluster identity 4711 [ 139.416859][ T9511] tipc: New replicast peer: 255.255.255.32 [ 139.422895][ T9511] tipc: Enabled bearer , priority 10 [ 140.049753][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'. [ 140.064912][ T9555] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.083727][ T9561] tipc: Enabling of bearer rejected, already enabled [ 140.098134][ T9559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.138320][ T9563] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2198'. [ 140.211597][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 140.406419][ T9555] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.419382][ T9559] bond2 (unregistering): Released all slaves [ 140.425478][ T9] tipc: Node number set to 2886997007 [ 140.476241][ T9555] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.556811][ T9555] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.667880][ T7849] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.680016][ T7849] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.701547][ T7825] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.716151][ T7825] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.464671][ T9678] loop5: detected capacity change from 0 to 512 [ 141.628801][ T9695] loop5: detected capacity change from 0 to 512 [ 141.638821][ T9695] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.932105][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 141.932123][ T29] audit: type=1326 audit(1762900020.498:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 141.962753][ T29] audit: type=1326 audit(1762900020.498:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 141.963129][ T9724] serio: Serial port ptm1 [ 141.986198][ T29] audit: type=1326 audit(1762900020.498:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 142.013989][ T29] audit: type=1326 audit(1762900020.498:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 142.037442][ T29] audit: type=1326 audit(1762900020.498:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 142.060898][ T29] audit: type=1326 audit(1762900020.498:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 142.084399][ T29] audit: type=1326 audit(1762900020.498:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 142.107869][ T29] audit: type=1326 audit(1762900020.498:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 142.131322][ T29] audit: type=1326 audit(1762900020.498:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 142.132862][ T31] EXT4-fs error: 17701 callbacks suppressed [ 142.132881][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 142.154764][ T29] audit: type=1326 audit(1762900020.498:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 142.160801][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 142.214021][ T9733] ip6gre2: entered allmulticast mode [ 142.226350][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 142.235735][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 142.248049][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 142.267106][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 142.303306][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 142.321685][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 142.342561][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 142.352540][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 142.366717][ T9741] __nla_validate_parse: 8 callbacks suppressed [ 142.366733][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.382131][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.401539][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.413262][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2277'. [ 142.430567][ T9744] IPVS: Error connecting to the multicast addr [ 142.446327][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.455373][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.464644][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.490611][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.499749][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.509612][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 142.869347][ T9780] loop6: detected capacity change from 0 to 1024 [ 142.883052][ T9780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.895475][ T9780] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.932737][ T9095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.025606][ T9792] ip6gre1: entered allmulticast mode [ 143.310092][ T9821] loop6: detected capacity change from 0 to 512 [ 143.350989][ T9821] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.734028][ T9849] syzkaller0: entered promiscuous mode [ 143.739529][ T9849] syzkaller0: entered allmulticast mode [ 143.997736][ T9869] serio: Serial port ptm0 [ 144.273565][ T9883] netlink: 'syz.4.2332': attribute type 10 has an invalid length. [ 144.517458][ T9898] macsec1: entered promiscuous mode [ 144.522794][ T9898] bridge0: entered promiscuous mode [ 144.544886][ T9898] bridge0: port 3(macsec1) entered blocking state [ 144.551395][ T9898] bridge0: port 3(macsec1) entered disabled state [ 144.589637][ T9898] macsec1: entered allmulticast mode [ 144.595020][ T9898] bridge0: entered allmulticast mode [ 144.642218][ T9908] loop6: detected capacity change from 0 to 128 [ 144.651771][ T9898] macsec1: left allmulticast mode [ 144.656933][ T9898] bridge0: left allmulticast mode [ 144.663214][ T9898] bridge0: left promiscuous mode [ 144.700303][ T9912] netlink: 'syz.6.2344': attribute type 10 has an invalid length. [ 144.713752][ T9912] team0 (unregistering): Port device team_slave_0 removed [ 144.724189][ T9912] team0 (unregistering): Port device team_slave_1 removed [ 145.041177][ T9944] : renamed from veth0_to_bond (while UP) [ 145.412789][ T9971] loop6: detected capacity change from 0 to 512 [ 145.458839][ T9971] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2368: error while reading EA inode 32 err=-116 [ 145.472568][ T9971] EXT4-fs (loop6): Remounting filesystem read-only [ 145.479432][ T9971] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 145.489821][ T9971] EXT4-fs (loop6): 1 orphan inode deleted [ 145.496260][ T9971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.523337][ T9095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.328043][ T9991] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 146.384789][ T9991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.414184][ T9991] macvlan2: entered promiscuous mode [ 146.420823][ T9991] bond0: entered promiscuous mode [ 146.444377][ T9991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.530587][ T9991] bond0: left promiscuous mode [ 146.711377][T10024] loop6: detected capacity change from 0 to 128 [ 146.742060][T10024] EXT4-fs: Ignoring removed nobh option [ 146.755024][T10024] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.779488][T10024] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.898868][ T9095] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.950536][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 146.950635][ T29] audit: type=1326 audit(1762900025.498:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 146.980766][ T29] audit: type=1326 audit(1762900025.498:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8a82f6c9 code=0x7ffc0000 [ 147.004266][ T29] audit: type=1326 audit(1762900025.498:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8a82f6c9 code=0x7ffc0000 [ 147.036710][T10042] IPVS: Error connecting to the multicast addr [ 147.126986][ T29] audit: type=1326 audit(1762900025.688:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 147.150930][ T31] EXT4-fs error: 21946 callbacks suppressed [ 147.150945][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 147.166201][ T29] audit: type=1326 audit(1762900025.688:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 147.166473][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 147.189682][ T29] audit: type=1326 audit(1762900025.688:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.6.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 147.240563][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 147.249995][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 147.278699][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 147.291356][T10060] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 147.291356][T10060] program syz.5.2402 not setting count and/or reply_len properly [ 147.308486][ T29] audit: type=1400 audit(1762900025.838:4228): avc: denied { write } for pid=10059 comm="syz.5.2402" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.354841][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 147.411626][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 147.417861][ T29] audit: type=1400 audit(1762900025.978:4229): avc: denied { write } for pid=10067 comm="syz.5.2406" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 147.449224][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 147.499522][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 147.570720][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 147.626865][T10077] loop6: detected capacity change from 0 to 8192 [ 147.749608][T10096] loop5: detected capacity change from 0 to 1024 [ 147.801978][T10096] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.813191][ T29] audit: type=1326 audit(1762900026.378:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.6.2416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82fdfbf6c9 code=0x0 [ 147.851941][T10102] __nla_validate_parse: 6 callbacks suppressed [ 147.851957][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2418'. [ 147.870857][T10096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.886035][T10104] loop6: detected capacity change from 0 to 1024 [ 147.897078][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'. [ 147.906451][T10102] IPVS: Error connecting to the multicast addr [ 147.911959][T10104] EXT4-fs: Ignoring removed orlov option [ 147.929100][ T29] audit: type=1326 audit(1762900026.488:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 147.953401][T10104] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 147.978239][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.996314][T10104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.028584][T10104] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 148.041033][T10104] EXT4-fs (loop6): This should not happen!! Data will be lost [ 148.041033][T10104] [ 148.050684][T10104] EXT4-fs (loop6): Total free blocks count 0 [ 148.056754][T10104] EXT4-fs (loop6): Free/Dirty block details [ 148.062678][T10104] EXT4-fs (loop6): free_blocks=0 [ 148.067637][T10104] EXT4-fs (loop6): dirty_blocks=0 [ 148.072715][T10104] EXT4-fs (loop6): Block reservation details [ 148.078715][T10104] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 148.111139][T10116] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.123223][T10118] netlink: 'syz.1.2424': attribute type 11 has an invalid length. [ 148.336010][T10116] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.352147][T10126] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 148.373604][T10132] syz_tun: entered allmulticast mode [ 148.384366][T10129] dvmrp6: entered allmulticast mode [ 148.399190][T10128] syz_tun: left allmulticast mode [ 148.422927][T10116] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.512857][T10116] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.598503][ T7825] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.610740][ T7825] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.624052][ T7812] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.636880][ T7812] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.672833][ T9095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.692950][T10146] netlink: 'syz.4.2437': attribute type 12 has an invalid length. [ 148.874390][T10161] netlink: 'syz.5.2453': attribute type 10 has an invalid length. [ 149.199248][T10178] loop6: detected capacity change from 0 to 128 [ 149.229815][T10178] syz.6.2461: attempt to access beyond end of device [ 149.229815][T10178] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 149.342160][T10183] syzkaller0: entered promiscuous mode [ 149.347813][T10183] syzkaller0: entered allmulticast mode [ 149.664997][T10199] bridge: RTM_NEWNEIGH with invalid ether address [ 149.765963][T10211] loop6: detected capacity change from 0 to 128 [ 149.792050][T10211] EXT4-fs: Ignoring removed nobh option [ 149.805590][T10211] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.821645][T10211] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.005011][ T9095] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.619495][T10237] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 151.433105][T10264] syzkaller0: entered promiscuous mode [ 151.438705][T10264] syzkaller0: entered allmulticast mode [ 151.490969][T10271] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 151.499123][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2483'. [ 151.531103][T10271] dummy0: entered promiscuous mode [ 151.564747][T10271] batman_adv: batadv0: Interface activated: dummy0 [ 151.571341][T10271] batadv0: mtu less than device minimum [ 151.577628][T10271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 151.588362][T10271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 151.599060][T10271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 151.609979][T10271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 151.620700][T10271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 151.631388][T10271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 151.642218][T10271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 151.652954][T10271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 151.718594][T10271] batman_adv: batadv0: Interface deactivated: dummy0 [ 151.725342][T10271] batman_adv: batadv0: Removing interface: dummy0 [ 151.737392][T10271] bridge0: port 3(dummy0) entered blocking state [ 151.743810][T10271] bridge0: port 3(dummy0) entered disabled state [ 151.783442][T10276] xt_hashlimit: max too large, truncated to 1048576 [ 151.829891][T10277] delete_channel: no stack [ 152.195584][ T31] EXT4-fs error: 18210 callbacks suppressed [ 152.195603][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 152.217805][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 152.239682][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 152.251707][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 152.263497][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 152.273587][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 152.285668][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 152.294784][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 152.306976][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 152.316217][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 152.901988][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 152.902006][ T29] audit: type=1326 audit(1762900031.458:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 152.963935][ T29] audit: type=1326 audit(1762900031.498:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 152.987482][ T29] audit: type=1326 audit(1762900031.498:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 153.011117][ T29] audit: type=1326 audit(1762900031.498:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 153.034631][ T29] audit: type=1326 audit(1762900031.498:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 153.058123][ T29] audit: type=1326 audit(1762900031.498:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 153.081673][ T29] audit: type=1326 audit(1762900031.498:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 153.105189][ T29] audit: type=1326 audit(1762900031.498:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 153.149086][ T29] audit: type=1326 audit(1762900031.698:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 153.172670][ T29] audit: type=1326 audit(1762900031.698:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 154.762745][T10348] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2520'. [ 155.799958][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 155.858389][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2531'. [ 155.958906][T10389] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2535'. [ 156.063642][T10399] bond2: entered allmulticast mode [ 156.068936][T10399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.231233][T10399] bond2: (slave ip6gretap1): making interface the new active one [ 156.239076][T10399] ip6gretap1: entered allmulticast mode [ 156.270811][T10399] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 156.562739][T10417] netlink: 'syz.0.2546': attribute type 7 has an invalid length. [ 156.570539][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 157.065489][T10435] syzkaller0: entered promiscuous mode [ 157.071068][T10435] syzkaller0: entered allmulticast mode [ 157.201762][ T31] EXT4-fs error: 13212 callbacks suppressed [ 157.201779][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 157.433528][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 157.537992][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 157.552038][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 157.571720][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 157.640877][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 157.659809][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 157.680569][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 157.701727][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 157.720395][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 157.812364][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 157.852784][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 157.981506][T10484] geneve2: entered promiscuous mode [ 157.986770][T10484] geneve2: entered allmulticast mode [ 158.196239][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 158.196256][ T29] audit: type=1326 audit(1762900036.758:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.247547][ T29] audit: type=1326 audit(1762900036.788:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.271128][ T29] audit: type=1326 audit(1762900036.788:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.294636][ T29] audit: type=1326 audit(1762900036.788:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.318198][ T29] audit: type=1326 audit(1762900036.788:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.341712][ T29] audit: type=1326 audit(1762900036.788:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.365186][ T29] audit: type=1326 audit(1762900036.788:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10501 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82fdff1f85 code=0x7ffc0000 [ 158.501640][ T29] audit: type=1326 audit(1762900036.938:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10501 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.525232][ T29] audit: type=1326 audit(1762900036.938:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.549042][ T29] audit: type=1326 audit(1762900036.938:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.6.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fdfbf6c9 code=0x7ffc0000 [ 158.584957][T10508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.592471][T10508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.604998][T10510] netlink: 'syz.5.2586': attribute type 3 has an invalid length. [ 158.634669][T10508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.642187][T10508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.031329][T10529] netlink: 2096 bytes leftover after parsing attributes in process `syz.6.2594'. [ 159.574529][T10557] loop5: detected capacity change from 0 to 1024 [ 159.583672][T10557] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.595505][T10557] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 159.603687][T10557] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.612223][T10557] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 3: comm syz.5.2603: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.632533][T10557] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2603: Failed to acquire dquot type 0 [ 159.655363][T10557] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 3: comm syz.5.2603: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.681798][T10557] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2603: Failed to acquire dquot type 0 [ 159.705740][T10557] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.2603: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.720283][T10557] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 3: comm syz.5.2603: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.755380][T10557] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2603: Failed to acquire dquot type 0 [ 159.767262][T10557] EXT4-fs (loop5): 1 orphan inode deleted [ 159.778786][T10557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.884589][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.915886][T10570] loop5: detected capacity change from 0 to 1024 [ 159.923151][T10570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.933600][T10570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 159.942936][T10570] System zones: 0-1, 3-36 [ 159.962340][T10570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.121937][T10570] EXT4-fs (loop5): shut down requested (2) [ 160.128473][T10570] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 160.163937][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.379645][T10585] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2614'. [ 161.187370][T10617] loop5: detected capacity change from 0 to 1024 [ 161.194565][T10617] EXT4-fs: Ignoring removed bh option [ 161.204346][T10617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.253747][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.457162][T10640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2645'. [ 162.212682][ T31] EXT4-fs error: 16622 callbacks suppressed [ 162.212699][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 162.244186][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 162.280749][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 162.612362][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 162.634157][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 162.681572][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 162.782491][T10682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10682 comm=syz.5.2650 [ 162.812046][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 162.825858][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2658'. [ 162.877722][T10687] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 162.877722][T10687] program syz.1.2651 not setting count and/or reply_len properly [ 162.898061][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 162.927050][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 162.945080][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 163.089016][T10699] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2656'. [ 163.183496][T10705] x_tables: duplicate underflow at hook 1 [ 163.241025][T10713] netlink: 'syz.6.2664': attribute type 12 has an invalid length. [ 163.249293][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 163.249375][ T29] audit: type=1326 audit(1762900041.798:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.279138][ T29] audit: type=1326 audit(1762900041.798:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.302703][ T29] audit: type=1326 audit(1762900041.798:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.326376][ T29] audit: type=1326 audit(1762900041.798:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.349923][ T29] audit: type=1326 audit(1762900041.798:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.373616][ T29] audit: type=1326 audit(1762900041.798:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.397164][ T29] audit: type=1326 audit(1762900041.798:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.420671][ T29] audit: type=1326 audit(1762900041.798:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.444176][ T29] audit: type=1326 audit(1762900041.798:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.467789][ T29] audit: type=1326 audit(1762900041.818:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 163.817848][T10736] loop6: detected capacity change from 0 to 1024 [ 163.864695][T10736] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.896326][T10736] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 163.904534][T10736] EXT4-fs (loop6): orphan cleanup on readonly fs [ 163.917808][T10736] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 3: comm syz.6.2676: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.932318][T10736] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2676: Failed to acquire dquot type 0 [ 163.984200][T10736] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 3: comm syz.6.2676: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.005719][T10736] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2676: Failed to acquire dquot type 0 [ 164.025367][T10736] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.2676: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.131749][T10736] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 3: comm syz.6.2676: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.151846][T10736] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2676: Failed to acquire dquot type 0 [ 164.242144][T10736] EXT4-fs (loop6): 1 orphan inode deleted [ 164.303149][T10736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.537813][ T9095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.799719][T10763] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 164.799719][T10763] program syz.6.2683 not setting count and/or reply_len properly [ 165.942724][T10787] 9pnet_fd: Insufficient options for proto=fd [ 166.343036][T10797] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2698'. [ 166.754191][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2709'. [ 166.788944][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2712'. [ 167.268598][ T31] EXT4-fs error: 15348 callbacks suppressed [ 167.268619][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 167.283858][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 167.295486][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 167.304657][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 167.331751][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 167.340946][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 167.353490][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 167.363466][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 167.400764][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 167.410189][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 167.750827][T10849] x_tables: duplicate underflow at hook 1 [ 168.557958][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 168.626733][T10889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2737'. [ 168.796060][T10896] net_ratelimit: 11 callbacks suppressed [ 168.796073][T10896] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 168.815342][T10896] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2740'. [ 168.833630][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 168.833647][ T29] audit: type=1400 audit(1762900047.398:4667): avc: denied { write } for pid=10897 comm="syz.4.2741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 168.883301][ T29] audit: type=1400 audit(1762900047.398:4668): avc: denied { read } for pid=10897 comm="syz.4.2741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 169.038434][ T29] audit: type=1326 audit(1762900047.598:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 169.062020][ T29] audit: type=1326 audit(1762900047.598:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 169.085656][ T29] audit: type=1326 audit(1762900047.598:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 169.109218][ T29] audit: type=1326 audit(1762900047.598:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 169.193604][ T29] audit: type=1326 audit(1762900047.758:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 169.217336][ T29] audit: type=1326 audit(1762900047.758:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 169.242361][ T29] audit: type=1326 audit(1762900047.808:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 169.265938][ T29] audit: type=1326 audit(1762900047.808:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62c92f6c9 code=0x7ffc0000 [ 169.298684][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2758'. [ 169.847915][T10956] syz_tun: entered allmulticast mode [ 169.854102][T10950] netlink: 'syz.5.2765': attribute type 10 has an invalid length. [ 169.863471][T10950] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2765'. [ 169.934389][T10950] team0: Port device geneve1 added [ 169.950026][T10955] syz_tun: left allmulticast mode [ 170.272525][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2785'. [ 170.487946][T11013] tipc: Enabled bearer , priority 0 [ 170.503215][T11013] tipc: Disabling bearer [ 170.587528][T11017] loop5: detected capacity change from 0 to 2048 [ 170.608320][T11023] bond2: entered allmulticast mode [ 170.636597][T11023] ip6gretap1: entered allmulticast mode [ 170.651212][T11023] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 170.674161][T11017] Alternate GPT is invalid, using primary GPT. [ 170.680408][T11017] loop5: p1 p2 p3 [ 170.684199][T11017] loop5: partition table partially beyond EOD, truncated [ 170.773648][T11028] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2798'. [ 170.798434][T11034] usb usb1: usbfs: process 11034 (syz.0.2801) did not claim interface 63 before use [ 170.927133][T11050] loop5: detected capacity change from 0 to 512 [ 170.936990][T11050] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.964820][T11050] EXT4-fs (loop5): 1 truncate cleaned up [ 170.990268][T11050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.042427][T11050] bridge_slave_1: left allmulticast mode [ 171.048139][T11050] bridge_slave_1: left promiscuous mode [ 171.053922][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.078901][T11050] bridge_slave_0: left promiscuous mode [ 171.084809][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.234546][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.271608][ T31] EXT4-fs error: 13511 callbacks suppressed [ 172.271623][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 172.290171][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 172.299956][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 172.311803][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 172.329209][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 172.362158][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 172.384957][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 172.402614][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 172.423600][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 172.451373][T11120] __nla_validate_parse: 2 callbacks suppressed [ 172.451390][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2839'. [ 172.495213][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 172.582740][T11139] loop6: detected capacity change from 0 to 128 [ 172.582990][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'. [ 172.626798][T11140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.647323][T11140] macvlan2: entered promiscuous mode [ 172.652715][T11140] macvlan2: entered allmulticast mode [ 172.659279][T11140] bond3: (slave macvlan2): Opening slave failed [ 172.672306][T11139] loop6: detected capacity change from 128 to 0 [ 172.679317][T11139] FAT-fs (loop6): Directory bread(block 33) failed [ 172.686411][T11139] FAT-fs (loop6): Directory bread(block 34) failed [ 172.708981][T11139] FAT-fs (loop6): Directory bread(block 35) failed [ 172.715566][T11148] team1: left promiscuous mode [ 172.720421][T11148] team1: left allmulticast mode [ 172.726833][T11148] ip6gre1: left allmulticast mode [ 172.732175][T11139] FAT-fs (loop6): Directory bread(block 36) failed [ 172.739914][T11148] ip6gre2: left allmulticast mode [ 172.745161][T11139] FAT-fs (loop6): Directory bread(block 37) failed [ 172.751895][T11139] FAT-fs (loop6): Directory bread(block 38) failed [ 172.758429][T11139] FAT-fs (loop6): Directory bread(block 39) failed [ 172.766351][T11148] bond2: left allmulticast mode [ 172.771232][T11148] ip6gretap1: left allmulticast mode [ 172.777989][T11139] FAT-fs (loop6): Directory bread(block 40) failed [ 172.786543][T11149] FAT-fs (loop6): Directory bread(block 33) failed [ 172.840262][T11149] FAT-fs (loop6): Directory bread(block 34) failed [ 172.847365][T11157] netlink: 'syz.5.2852': attribute type 1 has an invalid length. [ 172.866918][T11157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.905183][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2852'. [ 173.054778][T11157] bond2 (unregistering): Released all slaves [ 173.154133][ T7846] FAT-fs (loop6): bread failed in fat_clusters_flush [ 173.163077][T10538] FAT-fs (loop6): unable to read boot sector to mark fs as dirty [ 173.502932][T11172] syzkaller0: entered promiscuous mode [ 173.508430][T11172] syzkaller0: entered allmulticast mode [ 173.515105][T11172] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 173.561227][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2859'. [ 173.791982][T11186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2863'. [ 173.820079][T11186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2863'. [ 173.926602][T11182] futex_wake_op: syz.5.2860 tries to shift op by -1; fix this program [ 174.005174][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 174.005188][ T29] audit: type=1400 audit(1762900052.568:4868): avc: denied { shutdown } for pid=11194 comm="syz.0.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.035235][T11175] chnl_net:caif_netlink_parms(): no params data found [ 174.141134][ T3428] IPVS: starting estimator thread 0... [ 174.162023][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.169128][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.180032][T11175] bridge_slave_0: entered allmulticast mode [ 174.186782][T11175] bridge_slave_0: entered promiscuous mode [ 174.199308][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.206410][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.213669][T11175] bridge_slave_1: entered allmulticast mode [ 174.220451][T11175] bridge_slave_1: entered promiscuous mode [ 174.231603][T11209] IPVS: using max 2112 ests per chain, 105600 per kthread [ 174.257176][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.279546][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.306142][ T29] audit: type=1326 audit(1762900052.868:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8a82f6c9 code=0x7ffc0000 [ 174.335694][T11217] SELinux: failed to load policy [ 174.347000][ T29] audit: type=1326 audit(1762900052.868:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcf8a82f6c9 code=0x7ffc0000 [ 174.370565][ T29] audit: type=1400 audit(1762900052.898:4871): avc: denied { load_policy } for pid=11216 comm="syz.5.2873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 174.392904][T11175] team0: Port device team_slave_0 added [ 174.399892][T11175] team0: Port device team_slave_1 added [ 174.411194][ T29] audit: type=1326 audit(1762900052.958:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf8a82f703 code=0x7ffc0000 [ 174.434546][ T29] audit: type=1326 audit(1762900052.968:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf8a82f703 code=0x7ffc0000 [ 174.457976][ T29] audit: type=1326 audit(1762900052.968:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8a82f6c9 code=0x7ffc0000 [ 174.481564][ T29] audit: type=1326 audit(1762900052.968:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8a82f6c9 code=0x7ffc0000 [ 174.505443][ T29] audit: type=1326 audit(1762900053.048:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8a82f6c9 code=0x7ffc0000 [ 174.529036][ T29] audit: type=1326 audit(1762900053.048:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8a82f6c9 code=0x7ffc0000 [ 174.560417][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.567409][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.593335][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.607523][T11229] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2880'. [ 174.617101][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.624122][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.650034][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.683688][T11175] hsr_slave_0: entered promiscuous mode [ 174.689732][T11175] hsr_slave_1: entered promiscuous mode [ 174.700226][T11175] debugfs: 'hsr0' already exists in 'hsr' [ 174.705978][T11175] Cannot create hsr debugfs directory [ 174.828914][T11243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11243 comm=syz.5.2886 [ 174.855642][T11246] netlink: 'syz.4.2887': attribute type 30 has an invalid length. [ 174.873286][T11175] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.881868][T11175] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.890761][T11175] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.900068][T11175] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.956257][T11255] netlink: 'syz.4.2888': attribute type 1 has an invalid length. [ 174.975073][T11255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.995865][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 174.996341][T11175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.021897][T11255] bond2 (unregistering): Released all slaves [ 175.033359][T11259] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2889'. [ 175.042968][T11259] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2889'. [ 175.055224][T11175] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.065153][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.072236][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.083713][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.090796][ T7846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.233674][T11175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.529983][T11175] veth0_vlan: entered promiscuous mode [ 175.562630][T11175] veth1_vlan: entered promiscuous mode [ 175.607609][T11175] veth0_macvtap: entered promiscuous mode [ 175.623511][T11175] veth1_macvtap: entered promiscuous mode [ 175.653242][T11175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.672498][T11175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.683095][ T7846] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.696108][ T7846] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.705090][ T7846] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.715418][ T7846] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.773911][T11320] loop5: detected capacity change from 0 to 1024 [ 175.786433][T11320] EXT4-fs: Ignoring removed bh option [ 175.792403][T11320] EXT4-fs: inline encryption not supported [ 175.799058][T11320] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.825382][T11320] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 175.860804][T11320] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2908: lblock 2 mapped to illegal pblock 2 (length 1) [ 175.920225][T11320] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2908: lblock 0 mapped to illegal pblock 48 (length 1) [ 175.961875][T11320] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2908: Failed to acquire dquot type 0 [ 175.989930][T11320] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 176.080743][T11320] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2908: mark_inode_dirty error [ 176.120842][T11320] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 176.131801][T11320] EXT4-fs (loop5): 1 orphan inode deleted [ 176.138806][T11320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.152172][ T7820] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.226596][ T7820] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:14: Failed to release dquot type 0 [ 176.435894][ T5533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.463806][ T5533] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 176.490297][ T5533] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 176.499950][ T5533] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 176.957515][T11375] loop7: detected capacity change from 0 to 1024 [ 176.996206][T11375] EXT4-fs: Ignoring removed bh option [ 177.025096][T11375] EXT4-fs: inline encryption not supported [ 177.031379][T11375] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.052712][T11375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 177.061961][T11375] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.2930: lblock 2 mapped to illegal pblock 2 (length 1) [ 177.093964][T11375] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.2930: lblock 0 mapped to illegal pblock 48 (length 1) [ 177.120553][T11381] ip6gre3: entered allmulticast mode [ 177.127341][T11375] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.2930: Failed to acquire dquot type 0 [ 177.153067][T11375] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 177.166568][T11375] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.2930: mark_inode_dirty error [ 177.180827][T11375] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 177.191427][T11375] EXT4-fs (loop7): 1 orphan inode deleted [ 177.197992][T11375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.210520][ T7812] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 177.233214][ T7812] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 0 [ 177.263314][T11175] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.273292][T11175] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 177.286823][ T31] EXT4-fs error: 8713 callbacks suppressed [ 177.286836][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 177.295506][T11175] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 177.313236][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 177.325346][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 177.334413][T11175] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 177.346136][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 177.358127][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 177.377130][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 177.389800][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 177.417551][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 177.438343][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 177.462679][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 177.602832][ T7812] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.626163][ T7812] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.651716][ T7825] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.660546][ T7825] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.820787][T11423] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.831116][T11423] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.023696][T11432] $Hÿ: left promiscuous mode [ 178.028593][T11432] bond_slave_0: left promiscuous mode [ 178.034180][T11432] bond_slave_1: left promiscuous mode [ 178.052378][T11432] wg2: left promiscuous mode [ 178.057061][T11432] wg2: left allmulticast mode [ 178.091010][T11432] veth0_to_team: left promiscuous mode [ 178.099217][T11432] team1: left promiscuous mode [ 178.104140][T11432] team1: left allmulticast mode [ 178.128099][T11432] ip6gre1: left allmulticast mode [ 178.149557][T11432] veth4: left promiscuous mode [ 178.154371][T11432] veth4: left allmulticast mode [ 178.234646][T11432] bond2: left allmulticast mode [ 178.239541][T11432] ip6gretap1: left allmulticast mode [ 178.314909][T11441] __nla_validate_parse: 2 callbacks suppressed [ 178.314924][T11441] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2957'. [ 178.935712][T11459] netlink: 'syz.1.2964': attribute type 83 has an invalid length. [ 179.000025][T11466] netlink: 'syz.0.2967': attribute type 10 has an invalid length. [ 179.034587][T11466] batman_adv: batadv0: Removing interface: dummy0 [ 179.035724][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 179.035740][ T29] audit: type=1326 audit(1762900057.598:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.5.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 179.070737][ T29] audit: type=1326 audit(1762900057.628:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.5.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 179.085960][T11470] netlink: 'syz.0.2967': attribute type 10 has an invalid length. [ 179.094619][ T29] audit: type=1326 audit(1762900057.628:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.5.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 179.105000][T11466] team0: Port device dummy0 added [ 179.154439][ T29] audit: type=1326 audit(1762900057.718:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.5.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 179.178504][T11470] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.214982][ T29] audit: type=1326 audit(1762900057.748:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.5.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 179.259768][T11470] team0: Failed to send options change via netlink (err -105) [ 179.267517][T11470] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.278562][T11470] team0: Port device dummy0 removed [ 179.319423][T11483] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 179.328550][T11470] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 179.343298][T11483] bond2: entered promiscuous mode [ 179.348613][T11483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.374257][T11483] bond2: (slave bridge2): making interface the new active one [ 179.381849][T11483] bridge2: entered promiscuous mode [ 179.388862][T11483] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 179.574341][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2981'. [ 179.587019][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2981'. [ 179.597127][T11423] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.607517][T11423] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.698905][T11508] Set syz1 is full, maxelem 6117 reached [ 179.709818][T11423] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.720245][T11423] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.736032][T11512] netlink: 660 bytes leftover after parsing attributes in process `syz.0.2987'. [ 179.766998][ T29] audit: type=1404 audit(1762900058.328:5111): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 179.798667][ T29] audit: type=1400 audit(1762900058.328:5112): avc: denied { create } for pid=11513 comm="syz.4.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 179.818410][ T29] audit: type=1400 audit(1762900058.358:5113): avc: denied { getopt } for pid=11515 comm="syz.0.2989" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 179.840330][T11423] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.850740][T11423] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.946560][ T29] audit: type=1400 audit(1762900058.508:5114): avc: denied { prog_load } for pid=11517 comm="syz.0.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 179.995195][ T29] audit: type=1400 audit(1762900058.538:5115): avc: denied { execute } for pid=11517 comm="syz.0.2990" name="file1" dev="tmpfs" ino=3176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 180.031898][ T7820] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.040183][ T7820] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.067307][ T7820] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.075525][ T7820] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.097122][ T7820] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.105439][ T7820] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.113784][ T7846] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.122007][ T7846] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.154013][T11537] binfmt_misc: register: failed to install interpreter file ./file0 [ 180.487719][T11569] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3014'. [ 180.614536][T11583] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3020'. [ 180.696172][T11592] wireguard0: entered promiscuous mode [ 180.701775][T11592] wireguard0: entered allmulticast mode [ 180.922010][T11607] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3032'. [ 181.093762][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3039'. [ 181.628824][T11665] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.3056'. [ 181.638038][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3056'. [ 182.023188][T11681] bond_slave_1: mtu less than device minimum [ 182.291508][ T31] EXT4-fs error: 23676 callbacks suppressed [ 182.291526][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 182.311388][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 182.323522][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 182.333002][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 182.344596][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 182.353942][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 182.366015][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 182.375397][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 182.387170][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 182.396728][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 182.570752][T11712] netlink: 'syz.4.3078': attribute type 12 has an invalid length. [ 183.597039][T11784] .`: (slave dummy0): Releasing backup interface [ 183.708419][T11784] .`: (slave bond_slave_0): Releasing backup interface [ 183.772576][T11784] .`: (slave bond_slave_1): Releasing backup interface [ 183.811693][T11784] team0: Port device team_slave_0 removed [ 183.820662][T11784] team0: Port device team_slave_1 removed [ 183.830721][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.838171][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.873630][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.881050][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.900423][T11784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.017105][T11797] __nla_validate_parse: 1 callbacks suppressed [ 184.017117][T11797] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3116'. [ 184.049079][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 184.049091][ T29] audit: type=1400 audit(1762900062.608:5624): avc: denied { mount } for pid=11798 comm="syz.5.3117" name="/" dev="ramfs" ino=36737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 184.077889][ T29] audit: type=1400 audit(1762900062.608:5625): avc: denied { mounton } for pid=11798 comm="syz.5.3117" path=2F3438332F66696C6531202864656C6574656429 dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 184.105171][ T29] audit: type=1400 audit(1762900062.668:5626): avc: denied { read write } for pid=5533 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 184.142835][ T29] audit: type=1400 audit(1762900062.708:5627): avc: denied { mount } for pid=11800 comm="syz.5.3118" name="/" dev="ramfs" ino=36744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 184.179923][ T29] audit: type=1326 audit(1762900062.738:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.4.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 184.203442][ T29] audit: type=1326 audit(1762900062.738:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.4.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 184.227037][ T29] audit: type=1326 audit(1762900062.738:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.4.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 184.250600][ T29] audit: type=1400 audit(1762900062.738:5631): avc: denied { map_create } for pid=11802 comm="syz.4.3119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 184.351636][ T29] audit: type=1326 audit(1762900062.738:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.4.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 184.375325][ T29] audit: type=1326 audit(1762900062.738:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.4.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 184.428700][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3123'. [ 184.772135][T11828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11828 comm=syz.7.3129 [ 184.786697][T11830] IPv6: sit2: Disabled Multicast RS [ 185.597795][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 185.617253][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 185.722510][ T7812] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.729318][T11897] Bluetooth: hci0: Frame reassembly failed (-90) [ 185.772227][T11905] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.3162'. [ 185.989321][T11924] bridge: RTM_NEWNEIGH with invalid ether address [ 186.196360][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'. [ 186.461762][T11960] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3187'. [ 186.494400][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3187'. [ 186.744350][T11988] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 187.384915][ T31] EXT4-fs error: 16372 callbacks suppressed [ 187.384933][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 187.598039][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 187.637086][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 187.656373][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 187.680223][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 187.699171][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 187.730423][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 187.754023][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 187.779556][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 187.793133][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.799832][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 187.817884][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 187.832899][T12032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.840129][T12032] IPv6: NLM_F_CREATE should be set when creating new route [ 187.848080][T12032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.855318][T12032] IPv6: NLM_F_CREATE should be set when creating new route [ 188.011097][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3225'. [ 188.087925][T12050] bridge0: port 3(macsec0) entered blocking state [ 188.094433][T12050] bridge0: port 3(macsec0) entered disabled state [ 188.101536][T12050] macsec0: entered allmulticast mode [ 188.106842][T12050] bridge0: entered allmulticast mode [ 188.122482][T12050] macsec0: left allmulticast mode [ 188.127544][T12050] bridge0: left allmulticast mode [ 188.218278][ T7820] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.234494][T12076] batadv_slave_1: entered promiscuous mode [ 188.242318][T12076] batman_adv: batadv0: Adding interface: macvlan2 [ 188.248741][T12076] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.289479][T12076] batman_adv: batadv0: Interface activated: macvlan2 [ 188.490065][T12099] IPv6: sit1: Disabled Multicast RS [ 188.572089][T12101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.589038][T12101] batadv_slave_0: entered promiscuous mode [ 188.717028][T12114] netlink: 'syz.5.3254': attribute type 2 has an invalid length. [ 188.724825][T12114] netlink: 'syz.5.3254': attribute type 11 has an invalid length. [ 188.753248][T12121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12121 comm=syz.7.3257 [ 188.827314][T12132] netlink: 'syz.5.3258': attribute type 16 has an invalid length. [ 188.835266][T12132] netlink: 'syz.5.3258': attribute type 17 has an invalid length. [ 188.960448][T12132] 8021q: adding VLAN 0 to HW filter on device .` [ 188.990979][T12132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.058205][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 189.058224][ T29] audit: type=1400 audit(1762900067.618:6213): avc: denied { read write } for pid=12147 comm="syz.7.3269" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 189.111643][ T29] audit: type=1400 audit(1762900067.618:6214): avc: denied { read write } for pid=5533 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 189.135992][ T29] audit: type=1400 audit(1762900067.628:6215): avc: denied { mount } for pid=12152 comm="syz.5.3271" name="/" dev="configfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=0 [ 189.158973][ T29] audit: type=1400 audit(1762900067.628:6216): avc: denied { map_create } for pid=12152 comm="syz.5.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.178339][ T29] audit: type=1400 audit(1762900067.628:6217): avc: denied { prog_load } for pid=12152 comm="syz.5.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.197512][ T29] audit: type=1400 audit(1762900067.638:6218): avc: denied { read write } for pid=5533 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 189.221871][ T29] audit: type=1400 audit(1762900067.648:6219): avc: denied { map_create } for pid=12154 comm="syz.5.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.241257][ T29] audit: type=1400 audit(1762900067.648:6220): avc: denied { prog_load } for pid=12154 comm="syz.5.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.260444][ T29] audit: type=1400 audit(1762900067.648:6221): avc: denied { prog_load } for pid=12154 comm="syz.5.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.279631][ T29] audit: type=1400 audit(1762900067.658:6222): avc: denied { prog_load } for pid=12147 comm="syz.7.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.671777][T12187] bond_slave_1: mtu less than device minimum [ 189.693646][T12189] __nla_validate_parse: 2 callbacks suppressed [ 189.693662][T12189] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3287'. [ 189.801925][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3292'. [ 189.819014][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 190.271591][T11898] Bluetooth: hci0: command 0x1003 tx timeout [ 190.277608][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.701412][T12254] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 190.782650][T12264] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 190.830793][T12269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.873696][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3326'. [ 190.882767][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3326'. [ 190.908327][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3328'. [ 190.930883][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3329'. [ 190.940047][ T7840] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.959845][ T7840] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.991218][ T7840] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.028192][ T7840] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.075805][T12297] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3334'. [ 191.084969][T12297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3334'. [ 191.120504][T12299] veth4: entered promiscuous mode [ 191.125593][T12299] veth4: entered allmulticast mode [ 191.127131][T12305] netlink: 'syz.1.3339': attribute type 6 has an invalid length. [ 191.145005][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3340'. [ 191.363638][T12333] $Hÿ: left promiscuous mode [ 191.368490][T12333] bond_slave_0: left promiscuous mode [ 191.374155][T12333] bond_slave_1: left promiscuous mode [ 191.384918][T12333] macvtap1: left promiscuous mode [ 191.389980][T12333] macvtap1: left allmulticast mode [ 191.395728][T12333] team1: left promiscuous mode [ 191.400524][T12333] team1: left allmulticast mode [ 191.405932][T12333] ip6gre1: left allmulticast mode [ 191.413677][T12333] bond2: left promiscuous mode [ 191.418478][T12333] bridge2: left promiscuous mode [ 191.430528][T12333] veth4: left promiscuous mode [ 191.435360][T12333] veth4: left allmulticast mode [ 192.034402][T12368] bond_slave_1: mtu less than device minimum [ 192.712749][T12401] netlink: 'syz.4.3383': attribute type 10 has an invalid length. [ 192.762190][ T31] EXT4-fs error: 17477 callbacks suppressed [ 192.762272][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 192.839026][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 192.887467][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 192.900233][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 192.920394][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 192.973262][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 192.982491][T12425] netlink: 'syz.1.3394': attribute type 4 has an invalid length. [ 193.004701][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 193.028344][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 193.054691][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 193.089637][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 193.370583][T12472] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.040671][T12503] netlink: 'syz.0.3428': attribute type 7 has an invalid length. [ 194.061323][T12503] bond4 (unregistering): Released all slaves [ 194.157186][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 194.157204][ T29] audit: type=1400 audit(1762900072.718:6890): avc: denied { prog_load } for pid=12510 comm="syz.4.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.159129][T12511] serio: Serial port ptm0 [ 194.610250][ T29] audit: type=1400 audit(1762900073.168:6891): avc: denied { read write } for pid=11175 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.670693][ T29] audit: type=1400 audit(1762900073.218:6892): avc: denied { prog_load } for pid=12513 comm="syz.7.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.690024][ T29] audit: type=1400 audit(1762900073.218:6893): avc: denied { prog_load } for pid=12513 comm="syz.7.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.709348][ T29] audit: type=1400 audit(1762900073.218:6894): avc: denied { create } for pid=12513 comm="syz.7.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 194.730216][ T29] audit: type=1400 audit(1762900073.238:6895): avc: denied { read write } for pid=11175 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.754573][ T29] audit: type=1400 audit(1762900073.248:6896): avc: denied { execmem } for pid=12515 comm="syz.7.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 194.774056][ T29] audit: type=1400 audit(1762900073.248:6897): avc: denied { prog_load } for pid=12515 comm="syz.7.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.793304][ T29] audit: type=1400 audit(1762900073.248:6898): avc: denied { write } for pid=12515 comm="syz.7.3433" name="netstat" dev="proc" ino=4026533824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 194.830748][ T29] audit: type=1400 audit(1762900073.308:6899): avc: denied { read write } for pid=11175 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.060287][T12537] __nla_validate_parse: 9 callbacks suppressed [ 195.060370][T12537] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3442'. [ 195.144733][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3445'. [ 195.283569][T12553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.331299][T12566] netlink: 'syz.7.3455': attribute type 1 has an invalid length. [ 195.339076][T12566] netlink: 'syz.7.3455': attribute type 4 has an invalid length. [ 195.346876][T12566] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3455'. [ 195.377427][T12566] netlink: 'syz.7.3455': attribute type 1 has an invalid length. [ 195.385321][T12566] netlink: 'syz.7.3455': attribute type 4 has an invalid length. [ 195.393072][T12566] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3455'. [ 196.119603][T12600] ip6t_srh: unknown srh match flags 4000 [ 196.604919][T12633] netlink: 'syz.0.3484': attribute type 7 has an invalid length. [ 196.612719][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 197.108036][T12694] ip6gre2: entered allmulticast mode [ 197.181565][T12708] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 197.233654][T12715] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 197.281446][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3525'. [ 197.628987][T12768] netlink: 'syz.4.3546': attribute type 12 has an invalid length. [ 197.772289][ T31] EXT4-fs error: 21223 callbacks suppressed [ 197.772304][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 197.787893][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 197.799901][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 197.809781][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 197.821731][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 197.831012][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 197.843044][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 197.852443][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 197.864494][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 197.874261][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 199.097394][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 199.161800][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 199.161862][ T29] audit: type=1400 audit(1762900077.728:7463): avc: denied { allowed } for pid=12804 comm="syz.4.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 199.196477][ T29] audit: type=1400 audit(1762900077.758:7464): avc: denied { create } for pid=12804 comm="syz.4.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 199.216126][ T29] audit: type=1400 audit(1762900077.758:7465): avc: denied { read write } for pid=5533 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 199.249817][ T29] audit: type=1400 audit(1762900077.788:7466): avc: denied { prog_load } for pid=12806 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.251816][T12807] netlink: '+}[@': attribute type 10 has an invalid length. [ 199.269147][ T29] audit: type=1400 audit(1762900077.808:7467): avc: denied { prog_load } for pid=12810 comm="syz.4.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.296913][T12807] team0 (unregistering): Port device team_slave_0 removed [ 199.319752][ T29] audit: type=1400 audit(1762900077.878:7468): avc: denied { mount } for pid=12808 comm="syz.5.3565" name="/" dev="configfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=0 [ 199.342911][T12807] team0 (unregistering): Port device team_slave_1 removed [ 199.361731][ T29] audit: type=1326 audit(1762900077.918:7469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 199.385303][ T29] audit: type=1326 audit(1762900077.918:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 199.408980][ T29] audit: type=1326 audit(1762900077.918:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 199.432529][ T29] audit: type=1326 audit(1762900077.918:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.4.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 199.537691][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3571'. [ 199.695038][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3579'. [ 199.805893][T12846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3581'. [ 199.854434][T12846] gtp0: entered promiscuous mode [ 200.356994][T12881] netlink: 'syz.5.3598': attribute type 1 has an invalid length. [ 200.391884][T12881] bond2: entered promiscuous mode [ 200.397004][T12881] bond2: entered allmulticast mode [ 200.412435][T12881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.438278][T12881] bridge0: entered promiscuous mode [ 200.443782][T12881] bridge0: entered allmulticast mode [ 200.501540][ T7846] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 200.513042][T12881] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 200.611474][ T7846] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 201.267483][T12917] netlink: 'syz.0.3612': attribute type 4 has an invalid length. [ 201.482642][T12917] netlink: 'syz.0.3612': attribute type 4 has an invalid length. [ 201.813664][T12936] kernel profiling enabled (shift: 63) [ 201.819164][T12936] profiling shift: 63 too large [ 201.914527][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3623'. [ 202.202299][T12967] geneve2: entered promiscuous mode [ 202.207558][T12967] geneve2: entered allmulticast mode [ 202.234119][ T7820] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.256802][ T7846] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.401970][ T7846] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.410265][ T7846] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.781911][ T31] EXT4-fs error: 21490 callbacks suppressed [ 202.781985][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 202.800921][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 202.820800][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 202.831550][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 202.845542][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 202.854829][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 202.860525][T12991] netlink: 'syz.0.3644': attribute type 13 has an invalid length. [ 202.867870][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 202.898680][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 202.912504][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 202.931757][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 202.996032][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3650'. [ 203.009701][T13003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3649'. [ 203.208626][T13034] netlink: 'syz.7.3664': attribute type 21 has an invalid length. [ 203.217016][T13034] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3664'. [ 203.500030][T13057] netlink: 'syz.7.3670': attribute type 16 has an invalid length. [ 203.508016][T13057] netlink: 'syz.7.3670': attribute type 17 has an invalid length. [ 203.517478][T13052] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.528226][T13052] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.628072][T13057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.767808][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3678'. [ 203.882661][T13077] netlink: 'syz.7.3681': attribute type 1 has an invalid length. [ 203.925343][T13081] netlink: 'syz.5.3683': attribute type 12 has an invalid length. [ 204.039684][T13077] bond2: (slave veth5): Enslaving as an active interface with a down link [ 204.084127][T13077] bond2: entered promiscuous mode [ 204.089292][T13077] bond2: entered allmulticast mode [ 204.138199][T13077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.182020][ T29] kauditd_printk_skb: 901 callbacks suppressed [ 204.182036][ T29] audit: type=1400 audit(1762900082.748:8374): avc: denied { read write } for pid=5533 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.227860][ T29] audit: type=1400 audit(1762900082.778:8375): avc: denied { prog_load } for pid=13111 comm="syz.5.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 204.247083][ T29] audit: type=1400 audit(1762900082.778:8376): avc: denied { prog_load } for pid=13111 comm="syz.5.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 204.266252][ T29] audit: type=1400 audit(1762900082.778:8377): avc: denied { prog_load } for pid=13111 comm="syz.5.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 204.285438][ T29] audit: type=1400 audit(1762900082.788:8378): avc: denied { read write } for pid=11175 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.309821][ T29] audit: type=1326 audit(1762900082.788:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 204.334758][ T29] audit: type=1326 audit(1762900082.788:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 204.358337][ T29] audit: type=1326 audit(1762900082.788:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff42ecf6c9 code=0x7ffc0000 [ 204.381836][ T29] audit: type=1400 audit(1762900082.838:8382): avc: denied { map_create } for pid=13113 comm="syz.7.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 204.400528][T13120] SET target dimension over the limit! [ 204.401092][ T29] audit: type=1400 audit(1762900082.838:8383): avc: denied { read write } for pid=5533 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.500678][T13131] veth4: entered promiscuous mode [ 204.505777][T13131] veth4: entered allmulticast mode [ 205.155436][T13180] veth6: entered promiscuous mode [ 205.160513][T13180] veth6: entered allmulticast mode [ 205.254270][T13188] ÿ: renamed from bond_slave_0 (while UP) [ 205.331165][T13194] bridge: RTM_NEWNEIGH with invalid ether address [ 205.390759][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3729'. [ 205.420546][T13198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3733'. [ 205.566088][T13198] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 205.592805][T13198] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 205.632618][T13215] macvlan0: entered promiscuous mode [ 205.637929][T13215] macvlan0: entered allmulticast mode [ 205.643705][T13215] bond3: (slave macvlan0): Error -98 calling set_mac_address [ 205.782331][T13228] veth6: entered promiscuous mode [ 205.787387][T13228] veth6: entered allmulticast mode [ 206.077912][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3756'. [ 206.495185][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3768'. [ 207.393572][T13302] netlink: 'syz.5.3778': attribute type 1 has an invalid length. [ 207.413134][T13302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.477074][T13307] syzkaller0: entered promiscuous mode [ 207.482711][T13307] syzkaller0: entered allmulticast mode [ 207.493731][T13302] vlan3: entered allmulticast mode [ 207.498970][T13302] team0: entered allmulticast mode [ 207.504127][T13302] geneve1: entered allmulticast mode [ 207.512339][T13302] bond3: (slave vlan3): Enslaving as an active interface with a down link [ 207.552622][T13309] netlink: 'wÞ£ÿ': attribute type 7 has an invalid length. [ 207.560023][T13309] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 207.702716][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3787'. [ 207.791662][ T31] EXT4-fs error: 17058 callbacks suppressed [ 207.791680][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 207.806784][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 207.819095][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 207.828226][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 207.839913][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 207.849350][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 207.861121][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 207.870270][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 207.881894][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 207.890950][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 207.966654][T13331] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3791'. [ 208.245365][T13341] netlink: 'syz.4.3795': attribute type 30 has an invalid length. [ 208.363179][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3799'. [ 209.548545][ T29] kauditd_printk_skb: 872 callbacks suppressed [ 209.548564][ T29] audit: type=1400 audit(1762900088.108:9256): avc: denied { prog_load } for pid=13369 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 209.608242][ T29] audit: type=1400 audit(1762900088.108:9257): avc: denied { prog_load } for pid=13369 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 209.628213][ T29] audit: type=1400 audit(1762900088.108:9258): avc: denied { prog_load } for pid=13369 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 209.647560][ T29] audit: type=1400 audit(1762900088.108:9259): avc: denied { create } for pid=13369 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 209.669117][ T29] audit: type=1400 audit(1762900088.108:9260): avc: denied { map_create } for pid=13369 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 209.688351][ T29] audit: type=1326 audit(1762900088.128:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.5.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 209.712556][ T29] audit: type=1400 audit(1762900088.128:9262): avc: denied { execmem } for pid=13367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 209.732078][ T29] audit: type=1326 audit(1762900088.128:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.5.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 209.756179][ T29] audit: type=1326 audit(1762900088.128:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.5.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 209.779650][ T29] audit: type=1326 audit(1762900088.128:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.5.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7ff4f161f6c9 code=0x7ffc0000 [ 210.202729][T13386] netlink: 'syz.7.3813': attribute type 10 has an invalid length. [ 210.820490][T13395] netlink: 'syz.4.3817': attribute type 4 has an invalid length. [ 211.556855][T13406] netlink: 'syz.7.3820': attribute type 13 has an invalid length. [ 211.664350][T13406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.724658][ T8104] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.733059][ T8104] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.742205][ T8104] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.750653][ T8104] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.759177][ T8104] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.767629][ T8104] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.786879][ T8104] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.795330][ T8104] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.400432][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3825'. [ 212.412563][T13421] $Hÿ: entered promiscuous mode [ 212.417613][T13421] bond_slave_0: entered promiscuous mode [ 212.424159][T13421] bond_slave_1: entered promiscuous mode [ 212.459471][T13418] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 212.801610][ T31] EXT4-fs error: 30338 callbacks suppressed [ 212.801628][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 212.817387][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 212.829146][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 212.838541][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 212.850958][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 212.860120][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 212.871945][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 212.881023][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 212.892741][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 212.901854][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 213.329578][T13432] netlink: 'syz.7.3828': attribute type 16 has an invalid length. [ 213.337463][T13432] netlink: 'syz.7.3828': attribute type 17 has an invalid length. [ 213.382207][T13432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.390645][T13432] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.401381][T13432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.400590][T13446] netlink: 'syz.5.3833': attribute type 10 has an invalid length. [ 214.408762][T13446] macvlan1: entered promiscuous mode [ 214.414214][T13446] macvlan1: entered allmulticast mode [ 214.423680][T13446] veth1_vlan: entered allmulticast mode [ 214.430834][T13446] .`: (slave macvlan1): Enslaving as an active interface with an up link [ 215.496273][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 215.496287][ T29] audit: type=1400 audit(1762900094.058:9410): avc: denied { create } for pid=13450 comm="syz.5.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 215.543136][ T29] audit: type=1400 audit(1762900094.088:9411): avc: denied { prog_load } for pid=13449 comm="syz.7.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 215.543315][T13453] netlink: 'syz.4.3838': attribute type 4 has an invalid length. [ 215.563112][ T29] audit: type=1400 audit(1762900094.088:9412): avc: denied { prog_load } for pid=13449 comm="syz.7.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 215.570024][T13453] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3838'. [ 215.589139][ T29] audit: type=1400 audit(1762900094.088:9413): avc: denied { create } for pid=13449 comm="syz.7.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 215.589173][ T29] audit: type=1400 audit(1762900094.088:9414): avc: denied { prog_load } for pid=13449 comm="syz.7.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 215.589197][ T29] audit: type=1400 audit(1762900094.088:9415): avc: denied { create } for pid=13450 comm="syz.5.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 215.589220][ T29] audit: type=1400 audit(1762900094.088:9416): avc: denied { create } for pid=13450 comm="syz.5.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 215.680073][ T29] audit: type=1400 audit(1762900094.088:9417): avc: denied { map_create } for pid=13450 comm="syz.5.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 215.699308][ T29] audit: type=1400 audit(1762900094.088:9418): avc: denied { prog_load } for pid=13448 comm="syz.0.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 215.719198][ T29] audit: type=1400 audit(1762900094.098:9419): avc: denied { execmem } for pid=13447 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 215.742883][T13453] .`: renamed from $Hÿ [ 216.793480][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3840'. [ 217.811621][ T31] EXT4-fs error: 29715 callbacks suppressed [ 217.811641][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 217.829163][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 217.838303][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 217.849943][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 217.859068][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 217.870745][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 217.879828][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 217.891928][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 217.901152][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 217.912704][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 219.901639][T13476] ================================================================== [ 219.909756][T13476] BUG: KCSAN: data-race in touch_atime / touch_atime [ 219.916488][T13476] [ 219.918813][T13476] write to 0xffff88811af646c0 of 4 bytes by task 13471 on cpu 0: [ 219.926529][T13476] touch_atime+0x1e8/0x340 [ 219.930960][T13476] shmem_file_read_iter+0x477/0x540 [ 219.936179][T13476] copy_splice_read+0x442/0x660 [ 219.941029][T13476] splice_direct_to_actor+0x290/0x680 [ 219.946414][T13476] do_splice_direct+0xda/0x150 [ 219.951191][T13476] do_sendfile+0x380/0x650 [ 219.955628][T13476] __x64_sys_sendfile64+0x105/0x150 [ 219.960840][T13476] x64_sys_call+0x2bb4/0x3000 [ 219.965541][T13476] do_syscall_64+0xd2/0x200 [ 219.970066][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.975977][T13476] [ 219.978300][T13476] read to 0xffff88811af646c0 of 4 bytes by task 13476 on cpu 1: [ 219.985939][T13476] touch_atime+0x194/0x340 [ 219.990374][T13476] shmem_file_read_iter+0x477/0x540 [ 219.995596][T13476] copy_splice_read+0x442/0x660 [ 220.000451][T13476] splice_direct_to_actor+0x290/0x680 [ 220.005830][T13476] do_splice_direct+0xda/0x150 [ 220.010602][T13476] do_sendfile+0x380/0x650 [ 220.015048][T13476] __x64_sys_sendfile64+0x105/0x150 [ 220.020249][T13476] x64_sys_call+0x2bb4/0x3000 [ 220.024936][T13476] do_syscall_64+0xd2/0x200 [ 220.029450][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.035357][T13476] [ 220.037680][T13476] value changed: 0x1b5400c4 -> 0x1bec9744 [ 220.043404][T13476] [ 220.045735][T13476] Reported by Kernel Concurrency Sanitizer on: [ 220.051885][T13476] CPU: 1 UID: 0 PID: 13476 Comm: syz.7.3844 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.061697][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.071757][T13476] ================================================================== [ 221.025868][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 221.025885][ T29] audit: type=1400 audit(1762900099.578:9453): avc: denied { write } for pid=3304 comm="syz-executor" path="pipe:[2440]" dev="pipefs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 221.056004][ T29] audit: type=1400 audit(1762900099.578:9454): avc: denied { execmem } for pid=13477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 221.091916][ T29] audit: type=1400 audit(1762900099.638:9455): avc: denied { write } for pid=3304 comm="syz-executor" path="pipe:[2440]" dev="pipefs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 221.115087][ T29] audit: type=1400 audit(1762900099.638:9456): avc: denied { write } for pid=3304 comm="syz-executor" path="pipe:[2440]" dev="pipefs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 221.138259][ T29] audit: type=1400 audit(1762900099.648:9457): avc: denied { open } for pid=13479 comm="syz.7.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 221.597012][ T7840] bridge_slave_1: left allmulticast mode [ 221.603393][ T7840] bridge_slave_1: left promiscuous mode [ 221.609047][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.616733][ T7840] bridge_slave_0: left allmulticast mode [ 221.622453][ T7840] bridge_slave_0: left promiscuous mode [ 221.628097][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.823328][ T7840] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 221.832703][ T7840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.841790][ T7840] bond0 (unregistering): Released all slaves [ 221.850165][ T7840] bond1 (unregistering): Released all slaves [ 221.859532][ T7840] bond2 (unregistering): (slave veth5): Releasing active interface [ 221.867899][ T7840] bond2 (unregistering): Released all slaves [ 221.876139][ T7840] bond3 (unregistering): Released all slaves [ 221.925789][ T7840] hsr_slave_0: left promiscuous mode [ 221.932388][ T7840] hsr_slave_1: left promiscuous mode [ 221.938072][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.945620][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.978254][ T7840] team0 (unregistering): Port device team_slave_1 removed [ 221.988173][ T7840] team0 (unregistering): Port device team_slave_0 removed [ 222.294378][ T7825] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.304151][ T7825] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.363037][ T7825] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.373487][ T7825] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.433497][ T7825] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.443293][ T7825] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.492889][ T7825] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.503402][ T7825] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.566613][ T7825] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 222.612542][ T7825] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 222.672762][ T7825] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 222.713471][ T7825] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 222.787809][ T7825] bridge_slave_1: left allmulticast mode [ 222.793583][ T7825] bridge_slave_1: left promiscuous mode [ 222.799271][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.806908][ T7825] bridge_slave_0: left promiscuous mode [ 222.813191][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.821488][ T31] EXT4-fs error: 28313 callbacks suppressed [ 222.821500][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 222.836528][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 222.848333][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 222.857609][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 222.869240][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 222.879058][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 222.890692][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 222.899892][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 222.911558][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 222.920875][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 222.952457][ T7825] geneve1 (unregistering): left allmulticast mode [ 222.959263][ T7825] team0: Port device geneve1 removed [ 222.969231][ T7825] bond2 (unregistering): (slave bridge0): Removing an active aggregator [ 222.977954][ T7825] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 222.986410][ T7825] bridge0 (unregistering): left promiscuous mode [ 222.992843][ T7825] bridge0 (unregistering): left allmulticast mode [ 223.113446][ T7825] .` (unregistering): (slave macvlan1): Releasing backup interface [ 223.121751][ T7825] veth1_vlan: left allmulticast mode [ 223.128030][ T7825] .` (unregistering): Released all slaves [ 223.136417][ T7825] bond0 (unregistering): Released all slaves [ 223.145143][ T7825] bond1 (unregistering): (slave batadv1): Releasing active interface [ 223.153977][ T7825] bond1 (unregistering): Released all slaves [ 223.162360][ T7825] bond2 (unregistering): Released all slaves [ 223.170958][ T7825] bond3 (unregistering): (slave vlan3): Releasing active interface [ 223.180636][ T7825] bond3 (unregistering): Released all slaves [ 223.302591][ T7825] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 223.443112][ T7825] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.451767][ T7825] bond_slave_0: left promiscuous mode [ 223.457655][ T7825] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.466435][ T7825] bond_slave_1: left promiscuous mode [ 223.472130][ T7825] .` (unregistering): Released all slaves [ 223.482670][ T7825] bond1 (unregistering): Released all slaves [ 223.491389][ T7825] bond0 (unregistering): Released all slaves [ 223.500243][ T7825] bond2 (unregistering): Released all slaves [ 223.528560][ T7825] tipc: Disabling bearer [ 223.533547][ T7825] tipc: Left network mode [ 223.543052][ T7825] hsr_slave_0: left promiscuous mode [ 223.548736][ T7825] hsr_slave_1: left promiscuous mode [ 223.554469][ T7825] batman_adv: batadv0: Interface deactivated: macvlan2 [ 223.561320][ T7825] batman_adv: batadv0: Removing interface: macvlan2 [ 223.569753][ T7825] hsr_slave_0: left promiscuous mode [ 223.575529][ T7825] hsr_slave_1: left promiscuous mode [ 223.583663][ T7825] batadv_slave_1: left promiscuous mode [ 223.589267][ T7825] veth1_vlan: left promiscuous mode [ 223.594574][ T7825] veth0_vlan: left promiscuous mode [ 223.711106][ T7825] team0 (unregistering): Port device team_slave_1 removed [ 223.722820][ T7825] team0 (unregistering): Port device team_slave_0 removed [ 224.166574][ T7825] IPVS: stop unused estimator thread 0... [ 227.831484][ T31] EXT4-fs error: 30759 callbacks suppressed [ 227.831501][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 227.849400][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 227.858518][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 227.870122][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 227.879300][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 227.890907][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 227.900056][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 227.911756][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory [ 227.920790][ T31] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #18: comm kworker/u8:1: mark_inode_dirty error [ 227.932536][ T31] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Out of memory