last executing test programs: 4m11.641762748s ago: executing program 0 (id=710): syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x0) connect$unix(r3, &(0x7f0000002840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m11.506694301s ago: executing program 0 (id=711): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 4m11.476650111s ago: executing program 0 (id=713): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) 4m11.424255112s ago: executing program 0 (id=714): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) 4m11.282637134s ago: executing program 0 (id=719): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4m11.159019136s ago: executing program 0 (id=726): creat(0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 4m11.133311606s ago: executing program 32 (id=726): creat(0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 4m6.46810149s ago: executing program 2 (id=910): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 4m6.376190762s ago: executing program 2 (id=912): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) read(r1, &(0x7f0000003e40)=""/248, 0xf8) 4m5.918340308s ago: executing program 2 (id=920): socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$SNAPSHOT_FREE(r0, 0x3305) 4m5.917858109s ago: executing program 2 (id=921): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) 4m5.820669081s ago: executing program 2 (id=922): ioperm(0x8000, 0x4, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 4m5.641422143s ago: executing program 2 (id=923): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m5.641244723s ago: executing program 33 (id=923): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m13.727800933s ago: executing program 5 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) 3m13.689458034s ago: executing program 5 (id=2598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) 3m13.534908836s ago: executing program 5 (id=2606): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigqueueinfo(0x0, 0x11, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x100, @local, 0xa1}], 0x3c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 3m13.388461918s ago: executing program 5 (id=2610): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 3m12.927647255s ago: executing program 5 (id=2616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 3m12.764933018s ago: executing program 5 (id=2618): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 3m12.764683978s ago: executing program 34 (id=2618): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 3.094006422s ago: executing program 3 (id=8714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000080000000000ff000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 3.093458262s ago: executing program 3 (id=8715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) 2.323059894s ago: executing program 6 (id=8739): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 1.872596681s ago: executing program 3 (id=8753): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.790076362s ago: executing program 3 (id=8757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 924.155436ms ago: executing program 1 (id=8762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f00000006c0)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r1, r4, 0x8f5, 0x100000000000000) 876.284547ms ago: executing program 3 (id=8764): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 847.380597ms ago: executing program 1 (id=8765): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 771.157778ms ago: executing program 3 (id=8767): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 581.121002ms ago: executing program 7 (id=8782): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) 544.324962ms ago: executing program 7 (id=8784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 525.750732ms ago: executing program 7 (id=8774): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0xfffffffffffffd95, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 490.894953ms ago: executing program 1 (id=8776): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 429.317864ms ago: executing program 1 (id=8777): r0 = fsopen(&(0x7f0000000580)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000140)='o4\x89Q\x01o\x98H6\x89]\f\xb8B\x06.\xafTl\x16C\xed\x8aa\xff\xb2\x90\x04M\xf8\x12\xb3J\xa1XW:\x9d-\x9et\a\xb1\xc0W\vnm\x90\xa7\xc0\xd9\xb3\x1f[\xf4\x94Q\xfc\x86\xbc#`\xb4\x1f%H\x0e7\x81\xd2\xdf\xd2@\xe9\xe0*\x05\x01\x17l[\x7fJj\x17\x91\xccZC\xe8\xd1\xd8\x87\xb9y\x8bF\xa2v\x86\x85\n\x00\x00\x00\xb8\x17\xe3j\xa7\xae2&D\xc1\x7f\x11?d\x0f\xef\x16\xf9&\xde\xcbi1\x0eA\x94\xa6\x00\xe2\x9d}\x8d#\x81\x88,\x12\xc5\x06\x99\xa0\xac.\xdd\xfa\xf5[v\xefk\x94\x9a\xca\x1b7u\xa3\x87\x81\xd3 \x9bnE\x1f\x123', &(0x7f0000000000)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) close(r0) 428.958884ms ago: executing program 4 (id=8778): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 428.313134ms ago: executing program 1 (id=8789): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 341.871115ms ago: executing program 4 (id=8779): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 341.277845ms ago: executing program 7 (id=8792): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 317.470435ms ago: executing program 6 (id=8780): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="060000000008e32649660000004e43935a67167cb934ac42457b08b94c00e21705464c9265b72f5cf1a408b72c5f08a6db366605a583b2fa8a12244dd79602e3a338cd93502d809e4de32fbcd7ee6a8472b3dc5af525aedb3927ad0e4a769994e24acd83a14f5a9bec38cad55689faecd16bb9149ef6da6a0a2cb8bfa2247b67e9b3a5f6c02b081e892f8aa8a6b8da82bc"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000080)='./file0\x00', 0x21488b, &(0x7f0000000100)=ANY=[], 0x1, 0x66e, &(0x7f0000001880)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 299.394686ms ago: executing program 6 (id=8781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 266.295247ms ago: executing program 6 (id=8783): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) pivot_root(0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x1, 0xa, 0x4, 0x68, 0x8001, 0x2, 0x2, 0x1ff, @dev={0xac, 0x14, 0x14, 0x36}, @remote}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) 265.562536ms ago: executing program 7 (id=8796): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0x9}, {0xe}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) 237.441207ms ago: executing program 4 (id=8785): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) 214.568277ms ago: executing program 7 (id=8786): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x230, 0x230, 0x160, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0x0, 0xff000000], 'veth1_to_bond\x00', 'wg0\x00', {0xff}, {}, 0x1d, 0x9, 0x4}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x4, 0x1, [0xd09, 0xfff, 0x7, 0x7, 0x81, 0x1, 0xa8ec, 0xa, 0x2, 0x9, 0x7f, 0x9000, 0x4, 0x6, 0xca2, 0x2], 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5608c24ffddffb0b5e3380d9ff0a723fdae600cd26454a42cd12e31f90b7"}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffff00], 'veth1_to_hsr\x00', 'nr0\x00', {}, {}, 0x29, 0x7, 0x3, 0x25}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x0, 0x4}, {0xffffffffffffffff, 0x2, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sync() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 214.071517ms ago: executing program 6 (id=8787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 204.938367ms ago: executing program 4 (id=8788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, '\x00', "fe4f47bafbb67ae68dc462427bd5a94a", "a4dd10c8", "96499e2301e9d879"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "95c4c0a71687c1b8", "9ca0f9c583cf76ffcfd33ba6c6fd01ed", "e7437dc5", "c44c05faeeccb50c"}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="eb", 0x1}], 0x1) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 176.715858ms ago: executing program 4 (id=8790): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 171.646698ms ago: executing program 6 (id=8791): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=@newtaction={0x14, 0x31, 0x829, 0x70bd2c, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 85.630169ms ago: executing program 4 (id=8793): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0) 0s ago: executing program 1 (id=8794): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) kernel console output (not intermixed with test programs): city change from 0 to 512 [ 221.560218][T17713] EXT4-fs: Ignoring removed i_version option [ 221.566822][T17713] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 221.579438][T17713] EXT4-fs (loop7): 1 truncate cleaned up [ 221.585710][T17713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.605304][T17713] pim6reg: entered allmulticast mode [ 221.613131][T17713] pim6reg: left allmulticast mode [ 221.686702][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.739080][T10081] IPVS: starting estimator thread 0... [ 221.822292][T17729] IPVS: using max 2256 ests per chain, 112800 per kthread [ 221.841494][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.849163][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.856627][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.865754][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.873304][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.881079][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.888538][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.896029][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.903529][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.910980][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.918549][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.926407][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.933879][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.941400][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.949046][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.956513][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.964051][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.971519][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.978907][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.986464][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 221.993931][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.001445][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.009218][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.016635][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.024155][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.031572][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.039055][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.046519][T10081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 222.054511][T10081] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz1] on syz0 [ 222.168353][T17765] syzkaller1: entered promiscuous mode [ 222.173965][T17765] syzkaller1: entered allmulticast mode [ 222.729960][T17795] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5695'. [ 222.739892][T17794] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5695'. [ 223.005384][T17824] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5708'. [ 223.014706][T17824] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5708'. [ 223.050313][T17830] netlink: ',&#^%': attribute type 39 has an invalid length. [ 223.108273][T17836] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 223.563977][T17893] batadv_slave_1: entered promiscuous mode [ 223.571172][T17893] batadv_slave_1: left promiscuous mode [ 223.651905][T17905] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.5744'. [ 223.661271][T17905] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5744'. [ 223.733744][T17911] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 223.745506][T17911] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 223.772219][T17915] sch_fq: defrate 2048 ignored. [ 223.868821][T17927] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5757'. [ 224.143820][T17947] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 224.193625][T17953] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5769'. [ 224.297385][T10066] kernel write not supported for file /2485/attr/exec (pid: 10066 comm: kworker/0:5) [ 224.384133][T17974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5779'. [ 224.393240][T17974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5779'. [ 224.501760][T17990] vlan0: entered allmulticast mode [ 225.102771][T18026] team2: entered promiscuous mode [ 225.108072][T18026] team2: entered allmulticast mode [ 225.382011][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 225.382025][ T29] audit: type=1400 audit(738.918:9582): avc: denied { listen } for pid=18054 comm="syz.7.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.407328][ T29] audit: type=1400 audit(738.918:9583): avc: denied { accept } for pid=18054 comm="syz.7.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.427307][T18057] random: crng reseeded on system resumption [ 225.435295][ T29] audit: type=1400 audit(738.972:9584): avc: denied { write } for pid=18056 comm="syz.7.5817" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 225.845253][T18108] tipc: Enabled bearer , priority 0 [ 225.856651][T18107] tipc: Disabling bearer [ 226.043078][T18128] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 226.235428][ T29] audit: type=1326 audit(739.830:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.1.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 226.271040][ T29] audit: type=1326 audit(739.830:9586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.1.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 226.294175][ T29] audit: type=1326 audit(739.830:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.1.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 226.317608][ T29] audit: type=1326 audit(739.830:9588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.1.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 226.340593][ T29] audit: type=1326 audit(739.830:9589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.1.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 226.363624][ T29] audit: type=1326 audit(739.862:9590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18153 comm="syz.1.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 226.496310][ T29] audit: type=1326 audit(740.109:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.7.5873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 226.733470][T18211] loop7: detected capacity change from 0 to 2048 [ 226.775966][T18211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 226.826351][T18210] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 226.866640][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 226.959271][T18236] lo speed is unknown, defaulting to 1000 [ 226.968546][T18236] hsr0 speed is unknown, defaulting to 1000 [ 226.996461][T18241] syzkaller1: entered promiscuous mode [ 227.002011][T18241] syzkaller1: entered allmulticast mode [ 227.039793][T18245] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.080629][T18245] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.154807][T18245] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.215020][T18245] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.299068][T18245] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.311722][T18245] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.324404][T18245] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.337145][T18245] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.631350][T18270] random: crng reseeded on system resumption [ 227.766364][T18281] serio: Serial port ptm0 [ 227.897080][T18285] 9pnet_fd: Insufficient options for proto=fd [ 228.080922][T18305] syzkaller1: entered promiscuous mode [ 228.086569][T18305] syzkaller1: entered allmulticast mode [ 228.338342][T18340] wg2: entered promiscuous mode [ 228.343339][T18340] wg2: entered allmulticast mode [ 228.776154][T18370] pim6reg: entered allmulticast mode [ 228.794989][T18370] pim6reg: left allmulticast mode [ 229.328686][T18397] __nla_validate_parse: 5 callbacks suppressed [ 229.328706][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5967'. [ 229.385678][T18401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.457841][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5974'. [ 229.474654][T18409] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5974'. [ 229.789244][T18417] Set syz1 is full, maxelem 65536 reached [ 229.846184][T18439] pim6reg: entered allmulticast mode [ 229.854697][T18439] pim6reg: left allmulticast mode [ 229.959494][T18455] xt_connbytes: Forcing CT accounting to be enabled [ 229.966186][T18455] set match dimension is over the limit! [ 230.028323][T18457] wg2: entered promiscuous mode [ 230.033515][T18457] wg2: entered allmulticast mode [ 230.054077][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 230.054095][ T29] audit: type=1326 audit(743.939:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18464 comm="syz.3.6000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56e3c1e9a9 code=0x0 [ 230.110625][T18477] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.174524][T18477] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.221361][T18477] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.259600][T18477] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.275062][ T29] audit: type=1326 audit(744.165:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.298118][ T29] audit: type=1326 audit(744.165:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.322402][T18484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6006'. [ 230.337593][ T29] audit: type=1326 audit(744.218:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.337641][ T29] audit: type=1326 audit(744.218:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.337672][ T29] audit: type=1326 audit(744.218:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.337749][ T29] audit: type=1326 audit(744.218:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.337808][ T29] audit: type=1326 audit(744.229:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.337837][ T29] audit: type=1326 audit(744.229:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.337868][ T29] audit: type=1326 audit(744.240:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.4.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 230.374084][T18477] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.377620][T18477] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.382424][T18477] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.409086][T18477] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.628348][T18496] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 230.778329][T18521] pim6reg: entered allmulticast mode [ 230.785652][T18521] pim6reg: left allmulticast mode [ 231.017542][T18546] SELinux: failed to load policy [ 231.082064][T18560] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 231.090149][T18560] SELinux: failed to load policy [ 231.174414][T18574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6045'. [ 231.198390][T18574] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 231.542108][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6052'. [ 231.730784][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6059'. [ 232.134805][T18647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 232.419558][T18668] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 232.658413][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6091'. [ 232.927061][T18698] netlink: 'syz.1.6096': attribute type 1 has an invalid length. [ 232.934926][T18698] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6096'. [ 233.883121][T18753] tipc: New replicast peer: 255.255.255.255 [ 233.889184][T18753] tipc: Enabled bearer , priority 10 [ 234.250685][T18779] tipc: Failed to remove unknown binding: 66,1,1/2886997007:681953066/681953068 [ 234.501662][T18784] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 234.656620][T18801] lo speed is unknown, defaulting to 1000 [ 234.663117][T18801] hsr0 speed is unknown, defaulting to 1000 [ 234.816237][T18821] tipc: Failed to remove unknown binding: 66,1,1/0:197723518/197723520 [ 234.929657][T10083] tipc: Node number set to 2886997007 [ 235.061925][T18849] __nla_validate_parse: 1 callbacks suppressed [ 235.061942][T18849] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6162'. [ 235.102904][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 235.102923][ T29] audit: type=1326 audit(749.347:9859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.147290][ T29] audit: type=1326 audit(749.347:9860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.170366][ T29] audit: type=1326 audit(749.347:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.193398][ T29] audit: type=1326 audit(749.347:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.216311][ T29] audit: type=1326 audit(749.357:9863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.239235][ T29] audit: type=1326 audit(749.357:9864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.262242][ T29] audit: type=1326 audit(749.357:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.285212][ T29] audit: type=1326 audit(749.357:9866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.308145][ T29] audit: type=1326 audit(749.357:9867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.331111][ T29] audit: type=1326 audit(749.390:9868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.4.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 235.480320][T18871] netlink: 'syz.1.6171': attribute type 1 has an invalid length. [ 235.519944][T18871] bond6: (slave veth11): Enslaving as an active interface with a down link [ 235.543181][T18873] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.600367][T18873] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.646810][T18873] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.692518][T18873] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.710880][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6178'. [ 235.800128][T18873] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.821777][T18873] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.859841][T18873] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.882882][T18873] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.991303][T18907] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6186'. [ 236.054010][T18914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6189'. [ 236.677297][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6207'. [ 236.691812][T18957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6215'. [ 236.710209][T18957] ip6gre1: entered allmulticast mode [ 237.044091][T18974] loop7: detected capacity change from 0 to 512 [ 237.051236][T18974] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 237.095033][T18974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.126622][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.466438][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6223'. [ 237.674432][T19009] loop7: detected capacity change from 0 to 1024 [ 237.695309][T19009] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 237.878020][T19028] program syz.3.6238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.888201][T19028] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 237.981961][T19042] wg2: left promiscuous mode [ 237.986656][T19042] wg2: left allmulticast mode [ 237.997182][T19042] wg2: entered promiscuous mode [ 238.002199][T19042] wg2: entered allmulticast mode [ 238.090927][T19058] rdma_op ffff888102fec980 conn xmit_rdma 0000000000000000 [ 238.189197][T19075] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6260'. [ 238.424479][T19092] block device autoloading is deprecated and will be removed. [ 238.696712][T19065] Set syz1 is full, maxelem 65536 reached [ 238.775116][T19110] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.790863][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6278'. [ 238.851990][T19110] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.884658][T19131] Falling back ldisc for ptm0. [ 238.901071][T19110] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.002781][T19110] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.078395][T19155] netlink: 'syz.1.6296': attribute type 1 has an invalid length. [ 239.082990][T19156] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.6293'. [ 239.119047][T19110] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.149615][T19110] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.172589][T19110] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.179931][T19160] sctp: [Deprecated]: syz.3.6297 (pid 19160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.179931][T19160] Use struct sctp_sack_info instead [ 239.189232][T19110] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.268099][T19170] loop3: detected capacity change from 0 to 512 [ 239.289248][T19170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 239.301519][T19170] System zones: 1-12 [ 239.311289][T19170] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.6302: error while reading EA inode 32 err=-116 [ 239.324783][T19170] EXT4-fs (loop3): Remounting filesystem read-only [ 239.331649][T19170] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 239.343519][T19170] EXT4-fs (loop3): 1 orphan inode deleted [ 239.350034][T19170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.384709][T19184] xt_NFQUEUE: number of total queues is 0 [ 239.389362][T19179] lo speed is unknown, defaulting to 1000 [ 239.396963][T19179] hsr0 speed is unknown, defaulting to 1000 [ 239.474286][T10081] kernel read not supported for file inotify (pid: 10081 comm: kworker/1:9) [ 239.740236][T19230] __nla_validate_parse: 3 callbacks suppressed [ 239.740250][T19230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6327'. [ 239.845699][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.906202][T19241] loop3: detected capacity change from 0 to 512 [ 239.923690][T19241] __quota_error: 65 callbacks suppressed [ 239.923703][T19241] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 239.939659][T19241] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.955104][T19241] EXT4-fs (loop3): mount failed [ 240.005095][T19256] batadv_slave_1: entered promiscuous mode [ 240.013322][T19256] batadv_slave_1: left promiscuous mode [ 240.100104][ T29] audit: type=1326 audit(754.711:9934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 240.134438][ T29] audit: type=1326 audit(754.743:9935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 240.157726][ T29] audit: type=1326 audit(754.743:9936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 240.180682][ T29] audit: type=1326 audit(754.743:9937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 240.258009][ T29] audit: type=1326 audit(754.883:9938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 240.281013][ T29] audit: type=1326 audit(754.883:9939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.1.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 240.317474][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6345'. [ 240.387216][ T29] audit: type=1326 audit(755.012:9940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19282 comm="syz.7.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 240.410300][ T29] audit: type=1326 audit(755.012:9941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19282 comm="syz.7.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 240.443385][T19284] loop7: detected capacity change from 0 to 2048 [ 240.450730][T19284] EXT4-fs: Ignoring removed bh option [ 240.458020][ T29] audit: type=1326 audit(755.065:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19282 comm="syz.7.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 240.493113][T19284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.527328][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.596557][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6361'. [ 240.704011][T19313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6364'. [ 240.869987][T19334] netlink: 'syz.7.6373': attribute type 1 has an invalid length. [ 240.877855][T19334] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.6373'. [ 240.925936][T19340] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6376'. [ 240.987647][T19348] loop7: detected capacity change from 0 to 128 [ 241.032385][T19348] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.124048][T14549] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.152826][T19355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6381'. [ 241.254867][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6382'. [ 241.853293][T19405] loop3: detected capacity change from 0 to 512 [ 241.864489][T19405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.880040][T19405] EXT4-fs (loop3): 1 truncate cleaned up [ 241.886167][T19405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.907204][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6406'. [ 241.975572][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.078699][T19426] loop3: detected capacity change from 0 to 2048 [ 242.097646][T19426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.162522][T19426] lo speed is unknown, defaulting to 1000 [ 242.211956][T19426] hsr0 speed is unknown, defaulting to 1000 [ 242.328654][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.469003][T19460] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6425'. [ 242.492448][T19465] loop7: detected capacity change from 0 to 512 [ 242.511097][T19465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.551372][T19465] EXT4-fs: Ignoring removed orlov option [ 242.567445][T19465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.579836][T19465] EXT4-fs (loop7): can't enable nombcache during remount [ 242.609782][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.985809][T19506] xt_hashlimit: max too large, truncated to 1048576 [ 243.188345][T19531] $H: renamed from bond0 [ 243.199734][T19531] $H: entered promiscuous mode [ 243.204923][T19531] @: entered promiscuous mode [ 243.210012][T19531] bond_slave_1: entered promiscuous mode [ 243.459869][T19572] loop7: detected capacity change from 0 to 512 [ 243.467249][T19572] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 243.479272][T19572] EXT4-fs (loop7): 1 truncate cleaned up [ 243.485907][T19572] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.523463][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.427546][T19608] __nla_validate_parse: 2 callbacks suppressed [ 244.427572][T19608] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6485'. [ 244.639410][T19622] -1: renamed from syzkaller0 [ 244.744400][T19634] loop3: detected capacity change from 0 to 1024 [ 244.754797][T19634] netlink: 'syz.3.6496': attribute type 1 has an invalid length. [ 244.788907][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 244.788992][ T29] audit: type=1326 audit(759.743:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 244.818339][ T29] audit: type=1326 audit(759.743:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 244.854006][T19645] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.892017][ T29] audit: type=1326 audit(759.797:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 244.915272][ T29] audit: type=1326 audit(759.797:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 244.938428][ T29] audit: type=1326 audit(759.797:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 244.942800][T19656] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6506'. [ 244.961493][ T29] audit: type=1326 audit(759.808:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 244.993696][ T29] audit: type=1326 audit(759.808:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 245.016793][ T29] audit: type=1326 audit(759.808:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 245.039960][ T29] audit: type=1326 audit(759.808:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 245.063115][ T29] audit: type=1326 audit(759.808:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.6.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d633e9a9 code=0x7ffc0000 [ 245.134599][T19645] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.171429][T19645] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.218359][T19645] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.271051][T19645] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.295307][T19645] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.464427][T19645] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.476850][T19645] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.556742][T19685] openvswitch: netlink: Message has 6 unknown bytes. [ 245.811781][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6526'. [ 246.080855][T19723] netlink: 'syz.4.6534': attribute type 1 has an invalid length. [ 246.116323][T19723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.226383][T19732] pim6reg: entered allmulticast mode [ 246.242602][T19732] pim6reg: left allmulticast mode [ 246.282035][T19740] loop3: detected capacity change from 0 to 512 [ 246.339422][T19740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.376476][T19740] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6540: corrupted inode contents [ 246.396579][T19740] EXT4-fs (loop3): Remounting filesystem read-only [ 246.403697][T19740] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 246.461027][T19757] netlink: 'syz.7.6548': attribute type 7 has an invalid length. [ 246.468902][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6548'. [ 246.481431][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.715980][T19779] lo speed is unknown, defaulting to 1000 [ 246.722858][T19779] hsr0 speed is unknown, defaulting to 1000 [ 247.149063][T19820] Cannot find del_set index 0 as target [ 247.224924][T19827] sctp: [Deprecated]: syz.7.6580 (pid 19827) Use of int in max_burst socket option deprecated. [ 247.224924][T19827] Use struct sctp_assoc_value instead [ 247.290166][T19836] loop7: detected capacity change from 0 to 128 [ 247.470623][T19856] lo speed is unknown, defaulting to 1000 [ 247.483010][T19849] loop7: detected capacity change from 0 to 8192 [ 247.495689][T19856] hsr0 speed is unknown, defaulting to 1000 [ 247.510055][T19860] futex_wake_op: syz.3.6594 tries to shift op by -1; fix this program [ 247.734565][T19878] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 247.842492][T19883] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.950340][T19883] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.041919][T19883] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.098900][T19883] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.178319][T19883] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.202451][T19883] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.226871][T19883] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.246633][T19883] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.350431][T19909] pimreg: entered allmulticast mode [ 248.378905][T19909] pimreg: left allmulticast mode [ 248.444850][T19920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6619'. [ 248.569279][T19938] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.592896][T19945] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6628'. [ 248.603588][T19945] gretap0: entered promiscuous mode [ 248.609815][T19944] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6627'. [ 248.620813][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6622'. [ 248.624030][T19945] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6628'. [ 248.652355][T19945] 0{X: renamed from gretap0 [ 248.685602][T19945] 0{X: left promiscuous mode [ 248.690710][T19945] 0{X: entered allmulticast mode [ 248.706854][T19945] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 248.724321][T19938] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.769010][T19938] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.817630][T19938] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.894587][T19938] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.919759][T19938] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.948946][T19938] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.985078][T19938] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.585890][T20024] netlink: 'syz.3.6663': attribute type 1 has an invalid length. [ 249.799470][T20050] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6675'. [ 250.003076][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 250.003094][ T29] audit: type=1326 audit(765.333:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.1.6683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 250.111456][ T29] audit: type=1326 audit(765.333:10158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.1.6683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 250.134639][ T29] audit: type=1326 audit(765.333:10159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.1.6683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 250.157844][ T29] audit: type=1326 audit(765.333:10160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.1.6683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 250.181483][ T29] audit: type=1326 audit(765.354:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.1.6683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 250.506503][ T29] audit: type=1326 audit(765.859:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20096 comm="syz.7.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 250.529837][ T29] audit: type=1326 audit(765.859:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20096 comm="syz.7.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 250.553877][ T29] audit: type=1326 audit(765.859:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20096 comm="syz.7.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 250.577559][ T29] audit: type=1326 audit(765.859:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20096 comm="syz.7.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 250.600809][ T29] audit: type=1326 audit(765.859:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20096 comm="syz.7.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 250.982184][T20129] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.025911][T20129] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.058873][T20142] loop7: detected capacity change from 0 to 512 [ 251.065746][T20144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6717'. [ 251.092151][T20142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.106960][T20129] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.149470][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.164641][T20154] loop9: detected capacity change from 0 to 7 [ 251.171197][T20154] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.179304][T20154] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.187757][T20154] loop9: unable to read partition table [ 251.198947][T20154] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 251.198947][T20154] ) failed (rc=-5) [ 251.214055][T20129] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.225256][T20154] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.244086][T20158] netlink: '+}[@': attribute type 1 has an invalid length. [ 251.251560][T20158] netlink: 198116 bytes leftover after parsing attributes in process `+}[@'. [ 251.256137][T20160] futex_wake_op: syz.7.6723 tries to shift op by -1; fix this program [ 251.300032][T20129] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.324341][T20129] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.348248][T20129] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.368317][T20129] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.533183][T20192] netlink: 'syz.6.6737': attribute type 1 has an invalid length. [ 251.549224][T20192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.567739][T20192] vlan1: entered allmulticast mode [ 251.573097][T20192] bond0: entered allmulticast mode [ 251.664700][T20211] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 251.848090][T20233] netlink: 'syz.4.6757': attribute type 13 has an invalid length. [ 252.202196][T20233] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.210702][T20233] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.219220][T20233] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.227658][T20233] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.520431][T20273] syzkaller1: entered promiscuous mode [ 252.526064][T20273] syzkaller1: entered allmulticast mode [ 252.568942][T20277] uprobe: syz.6.6775:20277 failed to unregister, leaking uprobe [ 252.628623][T20276] uprobe: syz.6.6775:20276 failed to unregister, leaking uprobe [ 252.649486][T20286] -1: renamed from syzkaller0 [ 252.802525][T20302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6786'. [ 252.805258][T20300] lo speed is unknown, defaulting to 1000 [ 252.818987][T20300] hsr0 speed is unknown, defaulting to 1000 [ 252.892366][T20312] xt_hashlimit: max too large, truncated to 1048576 [ 253.058752][T20324] -1: renamed from syzkaller0 [ 253.485816][T20380] netlink: 'syz.6.6820': attribute type 13 has an invalid length. [ 253.569431][T20390] netlink: 'syz.7.6824': attribute type 1 has an invalid length. [ 253.577321][T20390] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6824'. [ 253.587003][T20386] netlink: 'syz.1.6822': attribute type 1 has an invalid length. [ 253.608978][T20393] netlink: 'syz.6.6825': attribute type 1 has an invalid length. [ 253.623706][T20393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.679678][T20405] loop7: detected capacity change from 0 to 1024 [ 253.686476][T20405] EXT4-fs: Ignoring removed nobh option [ 253.692288][T20405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.718299][T20405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.775223][T20418] netlink: 'syz.1.6834': attribute type 13 has an invalid length. [ 253.785861][T20418] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.794415][T20418] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.802842][T20418] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.811325][T20418] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.822568][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.899844][T20425] netlink: 'syz.6.6838': attribute type 1 has an invalid length. [ 254.014654][T20441] futex_wake_op: syz.6.6843 tries to shift op by -1; fix this program [ 254.208180][T20461] hub 2-0:1.0: USB hub found [ 254.218667][T20461] hub 2-0:1.0: 8 ports detected [ 254.761548][T20495] netlink: 'syz.7.6868': attribute type 13 has an invalid length. [ 254.899471][T20495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.919043][T20495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.985287][T20495] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.993879][T20495] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.002468][T20495] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.010976][T20495] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.366448][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 255.366464][ T29] audit: type=1326 audit(771.073:10234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.395648][ T29] audit: type=1326 audit(771.073:10235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.418652][ T29] audit: type=1326 audit(771.073:10236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.441974][ T29] audit: type=1326 audit(771.084:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.465123][ T29] audit: type=1326 audit(771.084:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.488283][ T29] audit: type=1326 audit(771.084:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.511362][ T29] audit: type=1326 audit(771.084:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.534396][ T29] audit: type=1326 audit(771.084:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.557546][ T29] audit: type=1326 audit(771.084:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.580722][ T29] audit: type=1326 audit(771.084:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.4.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 255.769751][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6884'. [ 255.880608][T20539] bridge0: port 1(batadv1) entered blocking state [ 255.887133][T20539] bridge0: port 1(batadv1) entered disabled state [ 255.894090][T20539] batadv1: entered allmulticast mode [ 255.900191][T20539] batadv1: entered promiscuous mode [ 256.063835][T20555] netlink: 'syz.3.6895': attribute type 13 has an invalid length. [ 256.084700][T20555] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.093125][T20555] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.101633][T20555] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.110049][T20555] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.287845][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6911'. [ 256.325955][T20593] netlink: 'syz.4.6915': attribute type 13 has an invalid length. [ 256.346490][ T4656] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 256.355845][ T4656] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 256.405575][T20598] lo speed is unknown, defaulting to 1000 [ 256.412500][T20598] hsr0 speed is unknown, defaulting to 1000 [ 257.249427][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6924'. [ 257.320923][T20630] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6930'. [ 257.330603][T20630] gretap0: entered promiscuous mode [ 257.339085][T20630] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6930'. [ 257.348634][T20630] 0{X: renamed from gretap0 [ 257.356062][T20630] 0{X: left promiscuous mode [ 257.361256][T20630] 0{X: entered allmulticast mode [ 257.375031][T20630] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 257.486356][T20650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6938'. [ 257.718084][T20683] netlink: 'syz.4.6952': attribute type 1 has an invalid length. [ 257.754533][T20683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.808063][T20683] bond1: (slave veth17): Enslaving as an active interface with a down link [ 257.824963][T20693] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6956'. [ 257.837219][T20683] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 257.846262][T20683] bond1: (slave batadv2): making interface the new active one [ 257.855000][T20683] batadv2: entered promiscuous mode [ 257.860391][T20683] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 257.918240][T20698] lo speed is unknown, defaulting to 1000 [ 257.924480][T20698] hsr0 speed is unknown, defaulting to 1000 [ 258.068997][T20713] loop7: detected capacity change from 0 to 1024 [ 258.086975][T20713] EXT4-fs: Ignoring removed bh option [ 258.092477][T20713] EXT4-fs: Ignoring removed orlov option [ 258.098246][T20713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.156509][T20713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.212804][T20690] Set syz1 is full, maxelem 65536 reached [ 258.221502][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.268698][T20727] loop7: detected capacity change from 0 to 512 [ 258.285712][T20727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.316636][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.601633][T20755] loop7: detected capacity change from 0 to 164 [ 258.608886][T20755] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 258.827657][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6987'. [ 258.848198][T20771] netlink: 'syz.6.6989': attribute type 1 has an invalid length. [ 259.025131][T20789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.126855][T20796] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 259.227575][T20808] netlink: 'syz.3.7004': attribute type 1 has an invalid length. [ 259.247928][T20808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.271922][T20808] bond0: (slave veth15): Enslaving as an active interface with a down link [ 259.291790][T20808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.300921][T20808] bond0: (slave batadv0): making interface the new active one [ 259.309861][T20808] batadv0: entered promiscuous mode [ 259.315266][T20808] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 259.391642][T20820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20820 comm=syz.7.7011 [ 259.404280][T20820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20820 comm=syz.7.7011 [ 259.563615][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7018'. [ 259.573694][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7018'. [ 259.768763][T20847] loop9: detected capacity change from 0 to 7 [ 259.775515][T20847] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.783457][T20847] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.791535][T20847] loop9: unable to read partition table [ 259.799417][T20847] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 259.799417][T20847] ) failed (rc=-5) [ 260.041417][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 260.041436][ T29] audit: type=1326 audit(776.105:10435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56e3c15967 code=0x7ffc0000 [ 260.070795][ T29] audit: type=1326 audit(776.105:10436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56e3bbab89 code=0x7ffc0000 [ 260.093764][ T29] audit: type=1326 audit(776.105:10437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 260.116562][ T29] audit: type=1326 audit(776.116:10438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56e3c15967 code=0x7ffc0000 [ 260.139469][ T29] audit: type=1326 audit(776.116:10439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56e3bbab89 code=0x7ffc0000 [ 260.162428][ T29] audit: type=1326 audit(776.116:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 260.185458][ T29] audit: type=1326 audit(776.126:10441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56e3c15967 code=0x7ffc0000 [ 260.209006][ T29] audit: type=1326 audit(776.126:10442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56e3bbab89 code=0x7ffc0000 [ 260.232014][ T29] audit: type=1326 audit(776.126:10443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 260.254827][ T29] audit: type=1326 audit(776.137:10444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56e3c15967 code=0x7ffc0000 [ 260.797342][T20894] syzkaller0: entered promiscuous mode [ 260.802929][T20894] syzkaller0: entered allmulticast mode [ 261.674110][T20923] tipc: Bearer : already 2 bearers with priority 10 [ 261.681536][T20923] tipc: Bearer : trying with adjusted priority [ 261.708646][T20923] tipc: Enabled bearer , priority 9 [ 261.733752][T20927] Cannot find del_set index 4 as target [ 261.783373][T20931] __nla_validate_parse: 2 callbacks suppressed [ 261.783393][T20931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7059'. [ 262.595999][T20967] Cannot find del_set index 4 as target [ 262.611141][T20969] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7073'. [ 262.639029][T10066] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 262.655495][T10066] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.845081][T20986] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7092'. [ 263.007372][T21001] loop7: detected capacity change from 0 to 128 [ 263.038226][T21001] Cannot find del_set index 4 as target [ 263.681612][T21034] Cannot find del_set index 4 as target [ 263.992731][T21076] syzkaller1: entered promiscuous mode [ 263.998386][T21076] syzkaller1: entered allmulticast mode [ 264.713633][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 264.713648][ T29] audit: type=1326 audit(781.115:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 264.762331][ T29] audit: type=1326 audit(781.158:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 264.785516][ T29] audit: type=1326 audit(781.158:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 264.808796][ T29] audit: type=1326 audit(781.158:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 264.831899][ T29] audit: type=1326 audit(781.158:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 264.855027][ T29] audit: type=1326 audit(781.158:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f56e3c1e9e3 code=0x7ffc0000 [ 264.877977][ T29] audit: type=1326 audit(781.158:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f56e3c1e9e3 code=0x7ffc0000 [ 264.901066][ T29] audit: type=1326 audit(781.158:10748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 264.924155][ T29] audit: type=1326 audit(781.158:10749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 264.947416][ T29] audit: type=1326 audit(781.158:10750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.3.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 265.189743][T21125] Set syz1 is full, maxelem 65536 reached [ 265.367169][T21133] 9pnet_fd: p9_fd_create_tcp (21133): problem connecting socket to 127.0.0.1 [ 266.390876][T21209] netlink: 'syz.6.7176': attribute type 12 has an invalid length. [ 266.722754][T21235] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7187'. [ 266.972320][T21252] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 266.992969][T21254] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 267.256640][T21270] veth0_vlan: entered allmulticast mode [ 267.278041][T21270] veth0_vlan: left promiscuous mode [ 267.284081][T21270] veth0_vlan: entered promiscuous mode [ 267.307866][T21276] tipc: Bearer : already 2 bearers with priority 10 [ 267.315460][T21276] tipc: Bearer : trying with adjusted priority [ 267.322625][T21276] tipc: Enabling of bearer rejected, failed to enable media [ 267.433499][T21295] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7212'. [ 267.485898][T21300] serio: Serial port ttyS3 [ 267.486104][T21301] vlan0: entered allmulticast mode [ 267.495586][T21301] bridge_slave_0: entered allmulticast mode [ 267.568535][T21306] vhci_hcd: invalid port number 236 [ 267.649300][T21319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21319 comm=syz.7.7224 [ 267.793743][T21326] loop7: detected capacity change from 0 to 8192 [ 268.176335][T21366] gtp0: entered promiscuous mode [ 268.216192][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7249'. [ 268.243949][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7249'. [ 268.294678][ T4656] batadv2: left promiscuous mode [ 268.368563][T21391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.126757][T21432] lo speed is unknown, defaulting to 1000 [ 269.133027][T21432] hsr0 speed is unknown, defaulting to 1000 [ 269.169387][T21437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=21437 comm=syz.3.7277 [ 269.213042][T21443] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7291'. [ 269.244065][T21448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7282'. [ 269.253627][T21448] netlink: 556 bytes leftover after parsing attributes in process `syz.7.7282'. [ 269.523483][T21484] 9pnet: p9_errstr2errno: server reported unknown error [ 269.636228][ T4283] batadv0: left promiscuous mode [ 269.675580][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.683156][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.690768][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.698501][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.706228][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.713707][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.721475][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.729002][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.736513][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.744000][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.751479][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.759118][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.769275][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.776812][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.784369][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.791920][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.799471][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.806991][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.814444][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.821884][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.829338][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.836851][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.844352][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.851795][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.859374][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.866828][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.874360][T10081] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 269.882571][T10081] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 269.931635][T21515] bond7: entered promiscuous mode [ 269.936828][T21515] bond7: entered allmulticast mode [ 269.944915][T21515] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.954093][T21515] bond7 (unregistering): Released all slaves [ 270.142874][T21539] lo speed is unknown, defaulting to 1000 [ 270.149702][T21539] hsr0 speed is unknown, defaulting to 1000 [ 270.220941][T21551] netlink: 'syz.6.7330': attribute type 5 has an invalid length. [ 270.234612][T21551] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.242966][T21551] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.251177][T21551] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.259493][T21551] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.274445][T21551] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.282919][T21551] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.291337][T21551] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.299746][T21551] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.312467][T21555] : (slave bond_slave_0): Releasing backup interface [ 270.320283][T21555] : (slave bond_slave_1): Releasing backup interface [ 270.332954][T21555] team0: Port device team_slave_0 removed [ 270.339431][T21555] team0: Port device team_slave_1 removed [ 270.346294][T21555] team0: Port device geneve1 removed [ 270.352739][T21555] bond2: (slave gretap1): Releasing active interface [ 270.361066][T21555] bond4: (slave batadv0): Releasing active interface [ 270.369456][T21555] bond6: (slave veth11): Releasing active interface [ 270.462184][T21575] SELinux: syz.7.7343 (21575) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 270.589791][T21594] netlink: 'syz.6.7348': attribute type 1 has an invalid length. [ 270.707561][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 270.707579][ T29] audit: type=1326 audit(787.542:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21606 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 270.737211][ T29] audit: type=1326 audit(787.542:10856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21606 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 270.769688][ T29] audit: type=1326 audit(787.606:10857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21606 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 270.792788][ T29] audit: type=1326 audit(787.606:10858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21606 comm="syz.1.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 270.880958][T21618] netlink: 'syz.6.7359': attribute type 1 has an invalid length. [ 270.930804][ T29] audit: type=1326 audit(787.789:10859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.1.7361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 270.954057][ T29] audit: type=1326 audit(787.789:10860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.1.7361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 270.976981][ T29] audit: type=1326 audit(787.789:10861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.1.7361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 271.000018][ T29] audit: type=1326 audit(787.789:10862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.1.7361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 271.038329][T21626] SELinux: failed to load policy [ 271.068998][ T29] audit: type=1326 audit(787.885:10863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.1.7361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 271.092064][ T29] audit: type=1326 audit(787.885:10864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.1.7361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 271.331024][T21658] 9pnet: p9_errstr2errno: server reported unknown error [ 271.418892][T21664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7377'. [ 271.439894][T21664] hsr_slave_1 (unregistering): left promiscuous mode [ 271.497432][T21668] bond2: entered promiscuous mode [ 271.502631][T21668] bond2: entered allmulticast mode [ 271.508329][T21668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.534251][T21668] bond2 (unregistering): Released all slaves [ 271.694947][T21693] netlink: 'syz.1.7389': attribute type 5 has an invalid length. [ 272.688651][T21796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7433'. [ 273.121407][T21847] netlink: 'syz.7.7454': attribute type 1 has an invalid length. [ 273.182532][T21849] loop7: detected capacity change from 0 to 1764 [ 273.511180][T21888] netlink: 268 bytes leftover after parsing attributes in process `syz.6.7473'. [ 273.605191][T21903] IPVS: Error connecting to the multicast addr [ 273.889145][T21944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7499'. [ 273.937035][T21947] lo speed is unknown, defaulting to 1000 [ 273.944702][T21947] hsr0 speed is unknown, defaulting to 1000 [ 274.242307][T21984] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000006 [ 274.819978][T22025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 274.838444][T22027] IPVS: Error connecting to the multicast addr [ 275.355738][T22086] netlink: 268 bytes leftover after parsing attributes in process `syz.1.7562'. [ 275.411681][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 275.411702][ T29] audit: type=1326 audit(792.595:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.7.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 275.441481][ T29] audit: type=1326 audit(792.595:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.7.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 275.472699][ T29] audit: type=1326 audit(792.649:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.7.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 275.496436][ T29] audit: type=1326 audit(792.649:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.7.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 275.519566][ T29] audit: type=1326 audit(792.649:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.7.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 275.545395][ T29] audit: type=1326 audit(792.735:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.7.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 275.568837][ T29] audit: type=1326 audit(792.735:11047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.7.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 275.591983][ T29] audit: type=1326 audit(792.735:11048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.7.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 275.698556][T22112] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7573'. [ 276.169528][T22163] loop7: detected capacity change from 0 to 1024 [ 276.334187][T22163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.439310][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.659854][T22198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7606'. [ 276.797354][T22212] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7613'. [ 276.806741][T22212] netlink: 'syz.6.7613': attribute type 7 has an invalid length. [ 276.814639][T22212] netlink: 'syz.6.7613': attribute type 8 has an invalid length. [ 276.822405][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7613'. [ 276.917064][T22225] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7618'. [ 276.926253][T22225] 0X: renamed from caif0 [ 276.933419][T22225] 0X: entered allmulticast mode [ 276.938830][T22225] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 277.279701][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7629'. [ 277.386981][ T29] audit: type=1326 audit(794.709:11049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22259 comm="syz.4.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 277.449163][T22262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7633'. [ 277.455409][ T29] audit: type=1326 audit(794.741:11050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22259 comm="syz.4.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fa19b23e9a9 code=0x7ffc0000 [ 277.601314][T22280] SELinux: failed to load policy [ 277.710433][T22296] 8021q: adding VLAN 0 to HW filter on device $H [ 277.720452][T22296] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.739264][T22296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.927074][T22322] ipvlan3: entered promiscuous mode [ 277.934823][T22322] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 277.943207][T22322] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.028154][T22334] netlink: 51 bytes leftover after parsing attributes in process `syz.3.7666'. [ 278.141377][T22343] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.239871][T22351] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7673'. [ 278.510942][T22366] netlink: 'syz.1.7679': attribute type 13 has an invalid length. [ 278.540151][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7680'. [ 278.549796][T22368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7680'. [ 278.602243][T22372] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.938312][T22404] loop7: detected capacity change from 0 to 2048 [ 278.970982][T22404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.010267][T22404] lo speed is unknown, defaulting to 1000 [ 279.016960][T22404] hsr0 speed is unknown, defaulting to 1000 [ 279.063156][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.246608][T22430] SELinux: ebitmap: truncated map [ 279.253639][T22430] SELinux: failed to load policy [ 279.368364][T22449] team2: entered promiscuous mode [ 279.381509][T22449] team2: entered allmulticast mode [ 279.626113][T22442] lo speed is unknown, defaulting to 1000 [ 279.641739][T22442] hsr0 speed is unknown, defaulting to 1000 [ 280.195326][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 280.195375][ T29] audit: type=1326 audit(797.724:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 280.225044][ T29] audit: type=1326 audit(797.724:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 280.283200][ T29] audit: type=1326 audit(797.788:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 280.306205][ T29] audit: type=1326 audit(797.788:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 280.329462][ T29] audit: type=1326 audit(797.788:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 280.352755][ T29] audit: type=1326 audit(797.788:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 280.376135][ T29] audit: type=1326 audit(797.788:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 280.399242][ T29] audit: type=1326 audit(797.820:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 280.422320][ T29] audit: type=1326 audit(797.820:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe636ffe9e3 code=0x7ffc0000 [ 280.447043][ T29] audit: type=1326 audit(797.831:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22480 comm="syz.1.7727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe636ffd45f code=0x7ffc0000 [ 280.762063][T22503] lo speed is unknown, defaulting to 1000 [ 280.768360][T22503] hsr0 speed is unknown, defaulting to 1000 [ 280.997664][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.005263][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.012885][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 281.020337][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.027798][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.083910][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.091476][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.099062][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.106616][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.114069][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.121495][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.129059][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.136605][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.144150][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.151655][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.159250][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.166833][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.174259][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.181816][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.189286][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.196809][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.204312][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.211749][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.219187][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.226655][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.234085][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.241574][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.249084][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.256557][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.264085][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.271575][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.279137][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.286609][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.294071][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.301592][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.309039][T10066] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 281.320992][T10066] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 281.376338][T22529] netlink: 'syz.6.7747': attribute type 13 has an invalid length. [ 281.490615][T22536] lo speed is unknown, defaulting to 1000 [ 281.521034][T22536] hsr0 speed is unknown, defaulting to 1000 [ 281.746320][T22552] __nla_validate_parse: 4 callbacks suppressed [ 281.746341][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7755'. [ 281.784387][T22552] team1: entered promiscuous mode [ 281.790581][T22552] team1: entered allmulticast mode [ 281.972608][T22578] loop7: detected capacity change from 0 to 128 [ 281.982859][T22578] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 282.020955][T14549] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.496044][T22618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22618 comm=syz.1.7792 [ 283.552963][T22625] xt_hashlimit: size too large, truncated to 1048576 [ 283.801409][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.809122][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.816603][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x2 [ 283.824113][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.831535][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.902250][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.909744][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.917198][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.924725][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.932235][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.939734][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.947247][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.954713][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.962319][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.969889][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.977439][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.985070][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.992567][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.000176][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.007730][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.015211][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.022675][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.030204][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.037668][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.045097][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.052609][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.060178][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.067702][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.075285][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.082904][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.090385][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.097884][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.105344][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.113076][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.120642][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.128124][T10081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.137592][T10081] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 284.212057][T22674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7803'. [ 284.366194][T10081] kernel write not supported for file /1374/attr/exec (pid: 10081 comm: kworker/1:9) [ 284.410790][T22698] xt_hashlimit: size too large, truncated to 1048576 [ 284.858342][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 284.858356][ T29] audit: type=1326 audit(802.724:11854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.895190][ T29] audit: type=1326 audit(802.766:11855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.918327][ T29] audit: type=1326 audit(802.766:11856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.941304][ T29] audit: type=1326 audit(802.766:11857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.964275][ T29] audit: type=1326 audit(802.766:11858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.987191][ T29] audit: type=1326 audit(802.766:11859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.987244][ T29] audit: type=1326 audit(802.766:11860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.987269][ T29] audit: type=1326 audit(802.766:11861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.987298][ T29] audit: type=1326 audit(802.766:11862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 284.987330][ T29] audit: type=1326 audit(802.766:11863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22704 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa19b1dab89 code=0x7ffc0000 [ 285.263508][T22748] 9pnet_fd: Insufficient options for proto=fd [ 285.362957][T22757] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7838'. [ 285.389459][T22757] 1X: renamed from 60X [ 285.420486][T22757] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 285.717548][T22802] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7856'. [ 285.745240][T22802] 0X: renamed from caif0 [ 285.757174][T22802] 0X: entered allmulticast mode [ 285.762761][T22802] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 285.840585][T22811] lo speed is unknown, defaulting to 1000 [ 285.847152][T22811] hsr0 speed is unknown, defaulting to 1000 [ 285.992916][T22820] netlink: 'syz.1.7863': attribute type 1 has an invalid length. [ 286.013935][T22822] loop7: detected capacity change from 0 to 1024 [ 286.024877][T22820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.055084][T22822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.086175][T22822] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 47 with max blocks 1 with error 28 [ 286.098626][T22822] EXT4-fs (loop7): This should not happen!! Data will be lost [ 286.098626][T22822] [ 286.108370][T22822] EXT4-fs (loop7): Total free blocks count 0 [ 286.114392][T22822] EXT4-fs (loop7): Free/Dirty block details [ 286.120390][T22822] EXT4-fs (loop7): free_blocks=0 [ 286.125366][T22822] EXT4-fs (loop7): dirty_blocks=0 [ 286.130538][T22822] EXT4-fs (loop7): Block reservation details [ 286.136617][T22822] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 286.155155][T22820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.164719][T22820] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 286.185713][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.187403][T22820] bond7: (slave vti0): Error -95 calling set_mac_address [ 286.245155][T22833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7866'. [ 286.263971][T22833] batadv1: left allmulticast mode [ 286.269094][T22833] batadv1: left promiscuous mode [ 286.274379][T22833] bridge0: port 1(batadv1) entered disabled state [ 286.322452][T22837] loop7: detected capacity change from 0 to 256 [ 286.336127][T22837] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.401084][T22843] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7869'. [ 286.417573][T22843] 0X: renamed from caif0 [ 286.428288][T22843] 0X: entered allmulticast mode [ 286.433609][T22843] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 286.491408][T22851] 9pnet_fd: Insufficient options for proto=fd [ 286.655711][T22869] xt_hashlimit: size too large, truncated to 1048576 [ 286.874645][T22885] netlink: 'syz.7.7887': attribute type 7 has an invalid length. [ 286.882549][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7887'. [ 287.406482][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7906'. [ 287.416189][T22936] lo speed is unknown, defaulting to 1000 [ 287.428255][T22936] hsr0 speed is unknown, defaulting to 1000 [ 287.653513][T22965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7918'. [ 287.662601][T22965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7918'. [ 287.981893][T22998] bridge: RTM_NEWNEIGH with invalid ether address [ 288.991075][T23079] lo speed is unknown, defaulting to 1000 [ 288.998100][T23079] hsr0 speed is unknown, defaulting to 1000 [ 289.088762][T23087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7971'. [ 289.118930][T23087] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.144184][T23087] macvlan2: entered promiscuous mode [ 289.149758][T23087] macvlan2: entered allmulticast mode [ 289.160054][T23087] bond5: (slave macvlan2): Opening slave failed [ 289.208420][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7973'. [ 289.315193][T23114] sch_fq: defrate 2048 ignored. [ 289.571415][T23147] netlink: 'syz.1.7996': attribute type 83 has an invalid length. [ 289.647357][ T29] kauditd_printk_skb: 6301 callbacks suppressed [ 289.647376][ T29] audit: type=1326 audit(807.863:18165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.6.8001" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28d633e9a9 code=0x0 [ 289.721080][ T29] audit: type=1326 audit(807.949:18166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 289.782148][T23170] bridge: RTM_NEWNEIGH with invalid ether address [ 289.786105][ T29] audit: type=1326 audit(807.949:18167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 289.811688][ T29] audit: type=1326 audit(807.949:18168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 289.834724][ T29] audit: type=1326 audit(807.949:18169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 289.857756][ T29] audit: type=1326 audit(807.949:18170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 289.880852][ T29] audit: type=1326 audit(807.970:18171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f56e3c1e9a9 code=0x7ffc0000 [ 289.903869][ T29] audit: type=1326 audit(807.970:18172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f56e3c1e9e3 code=0x7ffc0000 [ 289.926771][ T29] audit: type=1326 audit(807.970:18173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f56e3c1d45f code=0x7ffc0000 [ 289.949643][ T29] audit: type=1326 audit(807.970:18174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23171 comm="syz.3.8003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f56e3c1ea37 code=0x7ffc0000 [ 290.065514][T23198] team0 (unregistering): Port device team_slave_0 removed [ 290.073463][T23198] team0 (unregistering): Port device team_slave_1 removed [ 290.249456][T23221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8026'. [ 290.343176][T23231] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 290.463231][T23246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8027'. [ 290.589949][T23270] loop7: detected capacity change from 0 to 128 [ 290.602424][T23268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8035'. [ 290.620481][T23270] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.695861][T14549] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.751275][T23286] wg2: left promiscuous mode [ 290.756005][T23286] wg2: left allmulticast mode [ 290.764042][T23286] wg2: entered promiscuous mode [ 290.769009][T23286] wg2: entered allmulticast mode [ 290.826226][T23296] netlink: 'syz.3.8047': attribute type 3 has an invalid length. [ 291.211277][T23304] loop7: detected capacity change from 0 to 1024 [ 291.219646][T23304] EXT4-fs: Ignoring removed nobh option [ 291.225494][T23304] EXT4-fs: Ignoring removed bh option [ 291.231359][T23304] EXT4-fs (loop7): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 291.253362][T23304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.275598][T23309] macsec0: entered promiscuous mode [ 291.281198][T23309] bridge0: entered promiscuous mode [ 291.287551][T23309] bridge0: port 1(macsec0) entered blocking state [ 291.294097][T23309] bridge0: port 1(macsec0) entered disabled state [ 291.300947][T23309] macsec0: entered allmulticast mode [ 291.306314][T23309] bridge0: entered allmulticast mode [ 291.312467][T23309] macsec0: left allmulticast mode [ 291.317689][T23309] bridge0: left allmulticast mode [ 291.323617][T23309] bridge0: left promiscuous mode [ 291.382807][T23317] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 291.584060][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8069'. [ 291.594120][T23345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8068'. [ 291.602142][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8069'. [ 291.603397][T23345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8068'. [ 291.649588][T23353] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8071'. [ 291.680362][T23356] Cannot find del_set index 2 as target [ 291.826368][T23381] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8080'. [ 291.841382][T23381] 0X: renamed from 61X [ 291.852335][T23381] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 291.995579][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.081052][T23419] netlink: 'syz.3.8097': attribute type 13 has an invalid length. [ 292.099674][T23419] 0XD: refused to change device tx_queue_len [ 292.106207][T23419] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 292.122131][T23417] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8098'. [ 292.848812][T23487] netlink: 'syz.1.8127': attribute type 1 has an invalid length. [ 292.865742][T23487] 8021q: adding VLAN 0 to HW filter on device bond8 [ 292.889058][T23487] bond8: (slave gretap0): making interface the new active one [ 292.898514][T23487] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 292.918561][T23487] bond8 (unregistering): (slave gretap0): Releasing active interface [ 292.931544][T23487] bond8 (unregistering): Released all slaves [ 293.058236][T23496] tipc: Bearer : already 2 bearers with priority 10 [ 293.065721][T23496] tipc: Bearer : trying with adjusted priority [ 293.085533][T23496] tipc: New replicast peer: 255.255.255.83 [ 293.091525][T23496] tipc: Enabled bearer , priority 9 [ 293.104107][T23500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8133'. [ 293.113815][T23500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8133'. [ 293.250996][T23514] loop7: detected capacity change from 0 to 1024 [ 293.278994][T23514] EXT4-fs: Ignoring removed orlov option [ 293.306818][T23514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.425817][T23526] ip6erspan0: entered promiscuous mode [ 293.464212][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.547355][T23535] lo speed is unknown, defaulting to 1000 [ 293.556849][T23535] hsr0 speed is unknown, defaulting to 1000 [ 294.321093][T23606] netlink: 'syz.1.8174': attribute type 10 has an invalid length. [ 294.344898][T23606] dummy0: left promiscuous mode [ 294.372819][T23608] netlink: 'syz.1.8174': attribute type 10 has an invalid length. [ 294.384110][T23606] team0: Port device dummy0 added [ 294.393541][T23610] netlink: 'syz.7.8175': attribute type 10 has an invalid length. [ 294.402609][T23608] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 294.415308][T23608] team0: Failed to send options change via netlink (err -105) [ 294.423674][T23608] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 294.435005][T23608] team0: Port device dummy0 removed [ 294.443382][T23608] : (slave dummy0): Enslaving as an active interface with an up link [ 294.590419][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 294.590439][ T29] audit: type=1326 audit(813.152:18279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.619879][ T29] audit: type=1326 audit(813.152:18280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.643056][ T29] audit: type=1326 audit(813.152:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.666203][ T29] audit: type=1326 audit(813.152:18282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.689234][ T29] audit: type=1326 audit(813.152:18283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.712385][ T29] audit: type=1326 audit(813.152:18284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.735488][ T29] audit: type=1326 audit(813.152:18285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.758607][ T29] audit: type=1326 audit(813.152:18286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.781654][ T29] audit: type=1326 audit(813.152:18287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 294.804738][ T29] audit: type=1326 audit(813.152:18288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.1.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 295.350589][T23722] netlink: 'syz.4.8192': attribute type 298 has an invalid length. [ 295.389403][T23729] netlink: 'syz.4.8194': attribute type 1 has an invalid length. [ 295.439746][T23729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.464324][T23729] bond2: (slave gretap0): making interface the new active one [ 295.472656][T23729] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 295.502030][T23729] bond2 (unregistering): (slave gretap0): Releasing active interface [ 295.518247][T23729] bond2 (unregistering): Released all slaves [ 295.637854][T23761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23761 comm=syz.6.8201 [ 296.149532][T23816] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8225'. [ 296.260601][T23823] loop7: detected capacity change from 0 to 512 [ 296.277382][T23823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.402749][T23823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.429070][T23823] netlink: 'syz.7.8217': attribute type 27 has an invalid length. [ 296.438234][T23823] 0X: left allmulticast mode [ 296.443529][T23823] vxcan1: left allmulticast mode [ 296.451923][T23823] wg2: left promiscuous mode [ 296.456669][T23823] wg2: left allmulticast mode [ 296.520918][T23834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.532961][T23834] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 296.589123][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.608789][T23848] 0{X: left allmulticast mode [ 296.615170][T23848] batadv0: left promiscuous mode [ 296.620349][T23848] batadv0: left allmulticast mode [ 296.625788][T23848] wg2: left promiscuous mode [ 296.630432][T23848] wg2: left allmulticast mode [ 296.636873][T23848] veth0_vlan: left allmulticast mode [ 296.643388][T23848] macvtap1: left promiscuous mode [ 296.648482][T23848] macvtap1: left allmulticast mode [ 296.656689][T23848] team1: left promiscuous mode [ 296.661864][T23848] team1: left allmulticast mode [ 296.671129][T23848] gtp0: left promiscuous mode [ 296.685862][T23848] team2: left promiscuous mode [ 296.690729][T23848] team2: left allmulticast mode [ 296.729290][T23857] openvswitch: netlink: Message has 6 unknown bytes. [ 297.473577][T23915] netlink: 'syz.7.8257': attribute type 13 has an invalid length. [ 297.487794][T23915] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 297.700231][T23943] lo speed is unknown, defaulting to 1000 [ 297.706662][T23943] hsr0 speed is unknown, defaulting to 1000 [ 297.756124][T23949] netlink: 'syz.3.8271': attribute type 13 has an invalid length. [ 297.772733][T23949] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 297.819600][T23956] sch_fq: defrate 2048 ignored. [ 297.904574][T23969] netlink: 'syz.6.8280': attribute type 39 has an invalid length. [ 297.985855][T23982] netlink: 'syz.4.8286': attribute type 13 has an invalid length. [ 297.990316][T23981] lo speed is unknown, defaulting to 1000 [ 298.005552][T23982] 8021q: adding VLAN 0 to HW filter on device  [ 298.015318][T23982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.033637][T23981] hsr0 speed is unknown, defaulting to 1000 [ 298.130824][T23996] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 298.412610][T24018] vhci_hcd: invalid port number 96 [ 298.417910][T24018] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 298.564687][T24033] 0{X: left allmulticast mode [ 298.575627][T24033] 0X: left allmulticast mode [ 298.581105][T24033] wg2: left promiscuous mode [ 298.585727][T24033] wg2: left allmulticast mode [ 298.592073][T24033] vxlan0: left promiscuous mode [ 298.597300][T24033] ip6tnl1: left promiscuous mode [ 298.602334][T24033] macvtap1: left promiscuous mode [ 298.607495][T24033] macvtap1: left allmulticast mode [ 298.613063][T24033] bond0: left promiscuous mode [ 298.617898][T24033] bond0: left allmulticast mode [ 298.624625][T24033] wireguard0: left promiscuous mode [ 298.629862][T24033] wireguard0: left allmulticast mode [ 298.635730][T24033] ip6gre1: left allmulticast mode [ 298.646576][T24033] team1: left promiscuous mode [ 298.651463][T24033] team1: left allmulticast mode [ 299.320961][T24079] serio: Serial port ptm0 [ 299.322146][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 299.322165][ T29] audit: type=1326 audit(818.248:18653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.354804][ T29] audit: type=1326 audit(818.248:18654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.403374][T24086] sch_fq: defrate 2048 ignored. [ 299.425090][ T29] audit: type=1326 audit(818.259:18655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.448192][ T29] audit: type=1326 audit(818.259:18656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.471401][ T29] audit: type=1326 audit(818.259:18657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.494656][ T29] audit: type=1326 audit(818.259:18658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.517892][ T29] audit: type=1326 audit(818.259:18659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.541009][ T29] audit: type=1326 audit(818.259:18660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.564016][ T29] audit: type=1326 audit(818.259:18661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.587048][ T29] audit: type=1326 audit(818.259:18662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.1.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe636ffe9a9 code=0x7ffc0000 [ 299.718121][T24097] netlink: 'syz.7.8329': attribute type 39 has an invalid length. [ 299.831294][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8334'. [ 299.887482][T24114] lo speed is unknown, defaulting to 1000 [ 299.896686][T24114] hsr0 speed is unknown, defaulting to 1000 [ 300.365042][T24138] loop7: detected capacity change from 0 to 8192 [ 300.542078][T24159] random: crng reseeded on system resumption [ 300.656882][T24165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.684325][T24165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.698401][T24170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.339143][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8367'. [ 301.380166][T24194] ip6gre2: entered allmulticast mode [ 301.880787][T24213] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8376'. [ 301.944223][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8380'. [ 301.956497][T24224] ip6gre2: entered allmulticast mode [ 302.170535][T24236] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8385'. [ 302.748985][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8414'. [ 302.761017][T24305] ip6gre3: entered allmulticast mode [ 303.072614][T24340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8431'. [ 303.084463][T24340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8431'. [ 303.417473][T24374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8445'. [ 303.694562][T24402] rdma_op ffff8881289c2180 conn xmit_rdma 0000000000000000 [ 303.718982][T24407] netlink: 228 bytes leftover after parsing attributes in process `syz.7.8468'. [ 303.977979][T24433] IPVS: Unknown mcast interface: vcan0 [ 303.987624][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 303.987641][ T29] audit: type=1326 audit(823.259:19078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f078f735967 code=0x7ffc0000 [ 304.017202][ T29] audit: type=1326 audit(823.259:19079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f078f6dab89 code=0x7ffc0000 [ 304.040605][ T29] audit: type=1326 audit(823.259:19080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 304.064481][ T29] audit: type=1326 audit(823.312:19081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f078f735967 code=0x7ffc0000 [ 304.087600][ T29] audit: type=1326 audit(823.312:19082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f078f6dab89 code=0x7ffc0000 [ 304.110672][ T29] audit: type=1326 audit(823.312:19083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 304.133795][ T29] audit: type=1326 audit(823.312:19084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f078f735967 code=0x7ffc0000 [ 304.156787][ T29] audit: type=1326 audit(823.312:19085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f078f6dab89 code=0x7ffc0000 [ 304.179829][ T29] audit: type=1326 audit(823.312:19086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 304.203014][ T29] audit: type=1326 audit(823.312:19087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.7.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f078f735967 code=0x7ffc0000 [ 304.575359][T24455] lo speed is unknown, defaulting to 1000 [ 304.582496][T24455] hsr0 speed is unknown, defaulting to 1000 [ 304.691097][T24459] netlink: 'syz.1.8482': attribute type 4 has an invalid length. [ 304.755911][T24460] netlink: 'syz.3.8480': attribute type 2 has an invalid length. [ 305.095156][T24478] __nla_validate_parse: 1 callbacks suppressed [ 305.095172][T24478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8489'. [ 305.265428][T24493] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8495'. [ 305.665478][T24509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=24509 comm=syz.3.8502 [ 305.684040][T24509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.698814][T24509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.799650][T24571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8532'. [ 307.477688][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8548'. [ 307.534037][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8548'. [ 307.853268][T24641] ip6gre2: left allmulticast mode [ 307.854850][T24642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8555'. [ 307.876152][T24641] ip6gre3: left allmulticast mode [ 307.923756][T24650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8559'. [ 308.051503][T24665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.058797][T24665] IPv6: NLM_F_CREATE should be set when creating new route [ 308.106489][T24671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8571'. [ 308.183053][T24678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8575'. [ 308.225940][T24681] lo speed is unknown, defaulting to 1000 [ 308.234918][T24681] hsr0 speed is unknown, defaulting to 1000 [ 308.846330][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 308.846425][ T29] audit: type=1326 audit(828.462:19516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 308.879630][ T29] audit: type=1326 audit(828.505:19517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 308.902825][ T29] audit: type=1326 audit(828.505:19518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 308.926026][ T29] audit: type=1326 audit(828.505:19519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 308.949911][ T29] audit: type=1326 audit(828.559:19520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 308.973104][ T29] audit: type=1326 audit(828.559:19521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 308.996308][ T29] audit: type=1326 audit(828.559:19522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 309.019548][ T29] audit: type=1326 audit(828.559:19523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 309.042584][ T29] audit: type=1326 audit(828.559:19524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 309.065592][ T29] audit: type=1326 audit(828.559:19525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24731 comm="syz.7.8597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078f73e9a9 code=0x7ffc0000 [ 309.121669][T24744] loop7: detected capacity change from 0 to 2048 [ 309.148421][T24744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.262620][T24764] netlink: 'syz.3.8609': attribute type 1 has an invalid length. [ 309.300398][T24772] lo: entered allmulticast mode [ 309.307957][T24771] lo: left allmulticast mode [ 309.345183][T10083] kernel write not supported for file /3550/attr/exec (pid: 10083 comm: kworker/1:10) [ 309.373667][T24764] bond6: (slave bridge0): Enslaving as a backup interface with an up link [ 309.391269][T14549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.461114][T24786] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8617'. [ 309.490105][T24791] loop7: detected capacity change from 0 to 128 [ 309.497888][T24787] lo speed is unknown, defaulting to 1000 [ 309.507259][T24787] hsr0 speed is unknown, defaulting to 1000 [ 309.901051][T24835] __nla_validate_parse: 1 callbacks suppressed [ 309.901070][T24835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8639'. [ 310.060351][T24853] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8647'. [ 310.632121][T24909] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8669'. [ 311.837415][T25042] hub 9-0:1.0: USB hub found [ 311.844611][T25042] hub 9-0:1.0: 8 ports detected [ 311.923761][T25058] lo speed is unknown, defaulting to 1000 [ 311.938379][T25058] hsr0 speed is unknown, defaulting to 1000 [ 312.200741][T25104] wg2: left promiscuous mode [ 312.205546][T25104] wg2: left allmulticast mode [ 312.211908][T25104] wg2: entered promiscuous mode [ 312.216887][T25104] wg2: entered allmulticast mode [ 312.713928][T25166] bridge0: entered allmulticast mode [ 312.719739][T25164] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8724'. [ 312.786336][T25164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8724'. [ 312.890648][T25176] lo speed is unknown, defaulting to 1000 [ 312.922477][T25176] hsr0 speed is unknown, defaulting to 1000 [ 313.057230][T25187] lo speed is unknown, defaulting to 1000 [ 313.073991][T25187] hsr0 speed is unknown, defaulting to 1000 [ 313.445439][T25227] netlink: 'syz.7.8744': attribute type 4 has an invalid length. [ 313.518239][T25238] loop7: detected capacity change from 0 to 164 [ 313.538383][T25238] iso9660: Unknown parameter 'HNy$Ɲd %D >ZZf[{bDq' [ 313.772220][T25269] lo speed is unknown, defaulting to 1000 [ 313.783209][T25269] hsr0 speed is unknown, defaulting to 1000 [ 314.530245][T25350] hub 9-0:1.0: USB hub found [ 314.541425][T25350] hub 9-0:1.0: 8 ports detected [ 315.006802][T25411] hub 9-0:1.0: USB hub found [ 315.011760][T25411] hub 9-0:1.0: 8 ports detected [ 315.062461][T25418] netlink: 'syz.7.8774': attribute type 1 has an invalid length. [ 315.078650][T25418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.090939][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8774'. [ 315.110461][T25418] bond3 (unregistering): Released all slaves [ 315.321576][T25444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8796'. [ 315.441391][T25448] loop7: detected capacity change from 0 to 8192 [ 315.461271][T25448] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.629071][T25459] ================================================================== [ 315.637217][T25459] BUG: KCSAN: data-race in do_select / pollwake [ 315.643511][T25459] [ 315.645852][T25459] write to 0xffffc90006d1b9e0 of 4 bytes by interrupt on cpu 0: [ 315.653494][T25459] pollwake+0xb6/0x100 [ 315.657605][T25459] __wake_up+0x66/0xb0 [ 315.661699][T25459] bpf_ringbuf_notify+0x22/0x30 [ 315.666576][T25459] irq_work_run+0xdf/0x2d0 [ 315.671018][T25459] __sysvec_irq_work+0x22/0x170 [ 315.675880][T25459] sysvec_irq_work+0x66/0x80 [ 315.680487][T25459] asm_sysvec_irq_work+0x1a/0x20 [ 315.685444][T25459] native_apic_msr_write+0x3d/0x60 [ 315.690596][T25459] x2apic_send_IPI_self+0x10/0x20 [ 315.695648][T25459] arch_irq_work_raise+0x46/0x50 [ 315.700611][T25459] __irq_work_queue_local+0x10f/0x2c0 [ 315.706002][T25459] irq_work_queue+0x70/0x100 [ 315.710616][T25459] bpf_ringbuf_submit+0xce/0xf0 [ 315.715490][T25459] bpf_prog_a526332ed0a73e3c+0x4b/0x4f [ 315.720980][T25459] bpf_trace_run2+0x107/0x1c0 [ 315.725681][T25459] __bpf_trace_sys_enter+0x10/0x30 [ 315.730812][T25459] trace_sys_enter+0x86/0x110 [ 315.735515][T25459] syscall_trace_enter+0x13e/0x1e0 [ 315.740662][T25459] do_syscall_64+0xac/0x200 [ 315.745190][T25459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.751204][T25459] [ 315.753543][T25459] read to 0xffffc90006d1b9e0 of 4 bytes by task 25459 on cpu 1: [ 315.761187][T25459] do_select+0xe48/0xf50 [ 315.765458][T25459] core_sys_select+0x3d7/0x6e0 [ 315.770248][T25459] __se_sys_pselect6+0x216/0x280 [ 315.775221][T25459] __x64_sys_pselect6+0x78/0x90 [ 315.780096][T25459] x64_sys_call+0x1caa/0x2fb0 [ 315.784798][T25459] do_syscall_64+0xd2/0x200 [ 315.789320][T25459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.795256][T25459] [ 315.797603][T25459] value changed: 0x00000000 -> 0x00000001 [ 315.803325][T25459] [ 315.805650][T25459] Reported by Kernel Concurrency Sanitizer on: [ 315.811825][T25459] CPU: 1 UID: 0 PID: 25459 Comm: syz.4.8793 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 315.824363][T25459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.834429][T25459] ==================================================================