last executing test programs: 2m8.517997612s ago: executing program 2 (id=7707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2m7.128736584s ago: executing program 2 (id=7757): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x10000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.973498447s ago: executing program 2 (id=7768): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2m6.900296383s ago: executing program 2 (id=7774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 2m6.837729878s ago: executing program 2 (id=7777): mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1001000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x10, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x52, 0x0, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 2m6.750863105s ago: executing program 2 (id=7781): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0) 2m6.725029307s ago: executing program 32 (id=7781): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0) 4.872065257s ago: executing program 4 (id=12038): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 4.823565551s ago: executing program 4 (id=12040): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x2, 0xd9, 0x2, 0xb2, 0x0, 0xac, 0x202, 0x275ef16aa95b851a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x200, 0x64, 0xbec, 0x3, 0xffffffffffffce6a, 0x0, 0x5, 0x0, 0x631, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) 4.70624794s ago: executing program 4 (id=12041): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000801}}], 0x1, 0x4002104) 4.299352203s ago: executing program 4 (id=12044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={0xffffffffffffffff, r1}, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 2.042087746s ago: executing program 4 (id=12091): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 2.041578626s ago: executing program 4 (id=12092): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000340), 0x800, 0x401) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000004c0)={0x0, 0x0, 0x2}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.753337379s ago: executing program 1 (id=12107): socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1.583384533s ago: executing program 1 (id=12110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.181832465s ago: executing program 1 (id=12118): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 1.140597578s ago: executing program 1 (id=12121): ioperm(0x2, 0x7ff, 0x5c0c) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 885.732329ms ago: executing program 1 (id=12130): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) syz_io_uring_setup(0x4a3d, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, 0x0, 0x0) epoll_create(0xaf2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 822.129114ms ago: executing program 3 (id=12131): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[], 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x56899130b459a9f4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0xe}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 665.542867ms ago: executing program 0 (id=12139): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 618.761791ms ago: executing program 0 (id=12141): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 534.061107ms ago: executing program 0 (id=12144): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x80, 0x1000000}, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 422.292046ms ago: executing program 0 (id=12148): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000093024a77b0440b31000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) epoll_create1(0x0) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 362.247241ms ago: executing program 5 (id=12149): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/bp20TUvtShz4uFiARCRE0qQtUAkkIi4c2hM9cMSK0xLVaVBjJFpFfAjEDSQQDwAH4BE4woF3gDNwgEoRyoGUm9Hau46J7bRpHYyS308aeWZn65nd6ax3J7MTwKFVjYiXI+JIRJyJiHK+Pc1DvN8J2X5bm+uLf2+uLybRar32ZxJJvq34riT/PJF/wXQakX6UxOMDyl27eetardFYupGnZ5srb82u3bz17PJK7erS1aXr88+dPXf+/AsX5p8f2bFurCSfPPXNxd8++7j++U9/fF/J6nsyz+s9jlGpRrV7Tna6MOrCxuxYTzwpjbEiAADsKs3v/Uvt+/9yHIntm7dyfPrjWCsHAAAAjESrVXwCAAAAB1fi2R8AAAAOuGIewNbm+mIRxjgdgf/YxkJEVDrtfycPnZxS953eiR3v945SNSJePXZpPguxT+9hAwAAABxmPyx0Fv7rH/9L45Ge/Y5HxFSxtt8IVXek+8d/0tsjLpIeGwsRL0bEnb7xv7TYpXIkTz3UHiqcSK4sN5bORMSpiJiOiaNZem6XMt594tq3w/J6x/++/PX1uaz87HN7j/R26ei//0291qw9yDGzbeODiMdKg9o/6Y759q6TeT/eWN56aVhe1v5Zexehv/3ZT62vIp4e2P+3Vy5Ndl+fdbZ9PZgtrgr9fjn59YfDyu/t/1nIyi/+FsD+y/r/1O7t314nt7te79rey/jur0s/D8u7e/sPvv5PJpfbFZzMt71TazZvzEVMJhf7t/vf1FWcj+J8Ze0//eTg3//i/i/Jf/tP9awPvRevvHf68rA8/X+8svav76n/7z3y5tSj08PKv7f+f65dmeJL3P/d3b020LjrCQAAAAAAAMBopO25fUk6042n6cxMZ57vwzGVNlbXms9cWX37er0zB7ASE2kx06vcMx90rvMaeTc9vyN9NiJOR8QX5ePt9MziaqM+7oMHAACAQ+LEkOf/zO/387IHAAAA8P9UGXcFAAAAgH3n+R8AAAAOtAdZ119EROSgRsZ9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43P4JAAD//+0cwvs=") r0 = socket(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 342.070893ms ago: executing program 3 (id=12150): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 317.494475ms ago: executing program 5 (id=12151): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 288.037027ms ago: executing program 3 (id=12152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 211.772703ms ago: executing program 3 (id=12153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) 208.117094ms ago: executing program 5 (id=12154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 157.111038ms ago: executing program 5 (id=12155): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000002e40)=ANY=[@ANYRESDEC], 0x94, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) dup2(r1, r1) 114.448411ms ago: executing program 0 (id=12156): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d479", 0xcb}, {&(0x7f0000000d80)="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", 0x386}], 0x2, 0x0, 0x0, 0x90}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 114.278991ms ago: executing program 3 (id=12157): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 56.813106ms ago: executing program 3 (id=12158): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x100ef, 0x7fa962bfffff, 0x13012, r2, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 56.502046ms ago: executing program 5 (id=12159): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 56.069226ms ago: executing program 0 (id=12160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x3, &(0x7f0000000280)={0x0, 0x989680}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 601.79µs ago: executing program 1 (id=12161): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 0s ago: executing program 5 (id=12162): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r2, 0x0, 0xbf5, 0x2000402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) kernel console output (not intermixed with test programs): idge: RTM_NEWNEIGH with invalid ether address [ 259.148139][T25013] veth7: entered promiscuous mode [ 259.336533][T25038] lo speed is unknown, defaulting to 1000 [ 259.823774][T25073] tipc: Enabling of bearer rejected, already enabled [ 259.948794][T25077] lo speed is unknown, defaulting to 1000 [ 260.099972][T25087] bridge0: port 3(macsec2) entered blocking state [ 260.106703][T25087] bridge0: port 3(macsec2) entered disabled state [ 260.121903][T25087] macsec2: entered allmulticast mode [ 260.127353][T25087] bridge0: entered allmulticast mode [ 260.143459][T25087] macsec2: left allmulticast mode [ 260.148696][T25087] bridge0: left allmulticast mode [ 260.177034][T25095] netlink: 'syz.3.9009': attribute type 10 has an invalid length. [ 260.192398][T25095] team0: Port device dummy0 added [ 260.202320][T25095] netlink: 'syz.3.9009': attribute type 10 has an invalid length. [ 260.211968][T25091] loop5: detected capacity change from 0 to 8192 [ 260.222683][T25095] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 260.244147][T25095] team0: Failed to send options change via netlink (err -105) [ 260.266265][T25095] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 260.276181][T25095] team0: Port device dummy0 removed [ 260.320732][T25102] tipc: New replicast peer: 255.255.255.83 [ 260.327022][T25102] tipc: Enabled bearer , priority 10 [ 260.968301][T25130] sd 0:0:1:0: device reset [ 261.075312][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 261.075324][ T29] audit: type=1400 audit(773.109:10341): avc: denied { sys_admin } for pid=25141 comm="syz.0.9031" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 261.162434][T25142] lo speed is unknown, defaulting to 1000 [ 261.454774][ T29] audit: type=1326 audit(773.479:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25182 comm="syz.0.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 261.477883][ T29] audit: type=1326 audit(773.479:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25182 comm="syz.0.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 261.501054][ T29] audit: type=1326 audit(773.479:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25182 comm="syz.0.9036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 261.527425][ T29] audit: type=1400 audit(773.549:10345): avc: denied { append } for pid=25187 comm="syz.5.9038" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 261.558731][T25186] bridge0: port 1(vlan2) entered blocking state [ 261.565272][T25186] bridge0: port 1(vlan2) entered disabled state [ 261.572537][T25186] vlan2: entered allmulticast mode [ 261.577787][T25186] bridge0: entered allmulticast mode [ 261.584261][T25186] vlan2: left allmulticast mode [ 261.589209][T25186] bridge0: left allmulticast mode [ 261.627930][ T29] audit: type=1400 audit(773.659:10346): avc: denied { cpu } for pid=25215 comm="syz.0.9041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 261.695230][ T29] audit: type=1400 audit(773.729:10347): avc: denied { listen } for pid=25225 comm="syz.4.9042" lport=47556 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.729291][ T29] audit: type=1400 audit(773.749:10348): avc: denied { accept } for pid=25225 comm="syz.4.9042" lport=47556 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.752197][ T29] audit: type=1400 audit(773.749:10349): avc: denied { write } for pid=25225 comm="syz.4.9042" lport=47556 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.775565][ T29] audit: type=1400 audit(773.749:10350): avc: denied { setopt } for pid=25225 comm="syz.4.9042" lport=47556 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 262.243360][T25304] loop5: detected capacity change from 0 to 2048 [ 262.270731][T25304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.527291][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.843252][T25372] loop5: detected capacity change from 0 to 1024 [ 262.860658][T25372] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 262.871599][T25372] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 262.902361][T25372] JBD2: no valid journal superblock found [ 262.908154][T25372] EXT4-fs (loop5): Could not load journal inode [ 263.264829][T25394] netlink: 'syz.3.9079': attribute type 1 has an invalid length. [ 263.289546][T25394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.369158][T25394] bond3: (slave veth21): Enslaving as an active interface with a down link [ 263.510335][T25400] lo speed is unknown, defaulting to 1000 [ 263.989200][T25443] __nla_validate_parse: 5 callbacks suppressed [ 263.989247][T25443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9099'. [ 264.022121][T25443] batadv0 (unregistering): left allmulticast mode [ 264.028679][T25443] batadv0 (unregistering): left promiscuous mode [ 264.035052][T25443] bridge0: port 1(batadv0) entered disabled state [ 264.445748][T10100] dummy0: left promiscuous mode [ 264.788401][T25460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9106'. [ 265.452022][T25504] block device autoloading is deprecated and will be removed. [ 265.499728][T25501] lo speed is unknown, defaulting to 1000 [ 265.517313][T25511] loop5: detected capacity change from 0 to 512 [ 265.536370][T25511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.595270][T25511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 265.706667][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 266.020165][T25561] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.9151'. [ 266.076625][T25557] lo speed is unknown, defaulting to 1000 [ 266.190380][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 266.190394][ T29] audit: type=1400 audit(778.219:10445): avc: denied { read } for pid=25579 comm="syz.5.9160" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.251618][ T29] audit: type=1400 audit(778.219:10446): avc: denied { open } for pid=25579 comm="syz.5.9160" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.274755][ T29] audit: type=1400 audit(778.259:10447): avc: denied { getopt } for pid=25581 comm="syz.4.9161" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 266.326428][T25584] ip6gre1: entered allmulticast mode [ 266.347182][ T29] audit: type=1326 audit(778.379:10448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25589 comm="syz.0.9164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x0 [ 266.617554][T25602] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9169'. [ 266.630105][T25602] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9169'. [ 266.644843][ T29] audit: type=1326 audit(778.669:10449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f577c755ba7 code=0x7ffc0000 [ 266.667821][ T29] audit: type=1326 audit(778.669:10450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f577c6fadd9 code=0x7ffc0000 [ 266.690911][ T29] audit: type=1326 audit(778.669:10451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.4.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 266.752561][T25607] lo speed is unknown, defaulting to 1000 [ 266.849561][ T29] audit: type=1400 audit(778.879:10452): avc: denied { getopt } for pid=25618 comm="syz.3.9178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.024201][ T29] audit: type=1400 audit(779.049:10453): avc: denied { write } for pid=25636 comm="syz.5.9186" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.066193][ T29] audit: type=1400 audit(779.089:10454): avc: denied { ioctl } for pid=25636 comm="syz.5.9186" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.113620][T25638] lo speed is unknown, defaulting to 1000 [ 267.165138][T25645] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9190'. [ 267.182289][T25645] batadv1: entered promiscuous mode [ 267.187616][T25645] batadv1: entered allmulticast mode [ 267.451616][T25681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9206'. [ 267.625160][T25722] ip6gre3: entered allmulticast mode [ 267.626566][T25723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9227'. [ 267.819314][T25748] ip6gre3: entered allmulticast mode [ 267.840096][T25751] netlink: 536 bytes leftover after parsing attributes in process `syz.4.9240'. [ 267.849452][T25751] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9240'. [ 267.946862][T25757] macvlan1: entered promiscuous mode [ 267.952844][T25757] ipvlan0: entered promiscuous mode [ 267.958637][T25757] ipvlan0: left promiscuous mode [ 267.963789][T25757] macvlan1: left promiscuous mode [ 268.786899][T25775] Set syz1 is full, maxelem 65536 reached [ 268.846931][T25800] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 268.853497][T25800] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 268.861320][T25800] vhci_hcd vhci_hcd.0: Device attached [ 268.935956][T25804] lo speed is unknown, defaulting to 1000 [ 269.109782][T25840] bridge0: entered promiscuous mode [ 269.119590][T25840] bridge0: port 1(macsec2) entered blocking state [ 269.126176][T25840] bridge0: port 1(macsec2) entered disabled state [ 269.133544][T25840] macsec2: entered allmulticast mode [ 269.138924][T25840] bridge0: entered allmulticast mode [ 269.154730][ T9] usb 12-1: SetAddress Request (2) to port 0 [ 269.160936][ T9] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 269.175533][T25840] macsec2: left allmulticast mode [ 269.180703][T25840] bridge0: left allmulticast mode [ 269.196681][T25840] bridge0: left promiscuous mode [ 269.371412][T25882] __nla_validate_parse: 1 callbacks suppressed [ 269.371428][T25882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9278'. [ 269.566750][T25923] bridge0: entered promiscuous mode [ 269.580978][T25923] bridge0: port 1(macsec2) entered blocking state [ 269.587840][T25923] bridge0: port 1(macsec2) entered disabled state [ 269.594879][T25923] macsec2: entered allmulticast mode [ 269.600378][T25923] bridge0: entered allmulticast mode [ 269.609543][T25923] macsec2: left allmulticast mode [ 269.614661][T25923] bridge0: left allmulticast mode [ 269.620615][T25923] bridge0: left promiscuous mode [ 269.782666][T25960] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9295'. [ 269.807508][T25960] batadv2: entered promiscuous mode [ 269.812795][T25960] batadv2: entered allmulticast mode [ 270.273932][T26045] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9317'. [ 270.311111][T25802] vhci_hcd: connection reset by peer [ 270.321669][T10100] vhci_hcd: stop threads [ 270.326016][T10100] vhci_hcd: release socket [ 270.330484][T10100] vhci_hcd: disconnect device [ 270.489916][T26066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9322'. [ 270.892578][T26089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9331'. [ 271.406101][T26122] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 271.435189][T26126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9347'. [ 271.465871][ T3360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3360 comm=kworker/1:2 [ 271.481448][T26132] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 271.485884][T26134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9353'. [ 271.530532][T26142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9358'. [ 271.564456][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 271.564479][ T29] audit: type=1400 audit(783.589:10654): avc: denied { setopt } for pid=26147 comm="syz.4.9361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.600210][T26150] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9362'. [ 271.601935][ T29] audit: type=1400 audit(783.629:10655): avc: denied { write } for pid=26147 comm="syz.4.9361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.626929][T26150] 0ªî{X¹¦: renamed from gretap0 [ 271.638896][T26150] 0ªî{X¹¦: entered allmulticast mode [ 271.645658][T26150] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 271.676661][T26152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9363'. [ 271.686247][T26152] netem: change failed [ 271.718282][T26156] loop5: detected capacity change from 0 to 512 [ 271.740464][T26160] bridge0: port 1(macsec1) entered blocking state [ 271.747071][T26160] bridge0: port 1(macsec1) entered disabled state [ 271.754231][T26160] macsec1: entered allmulticast mode [ 271.756944][T26162] netlink: 'syz.4.9367': attribute type 21 has an invalid length. [ 271.759592][T26160] bridge0: entered allmulticast mode [ 271.779056][T26160] macsec1: left allmulticast mode [ 271.784269][T26160] bridge0: left allmulticast mode [ 271.796381][T26156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.833345][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.850612][ T29] audit: type=1400 audit(783.879:10656): avc: denied { setopt } for pid=26171 comm="syz.4.9371" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 271.872732][T26172] pimreg: entered allmulticast mode [ 271.888091][T26174] ip6gre3: entered allmulticast mode [ 271.931223][T26184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26184 comm=syz.3.9375 [ 271.950904][ T29] audit: type=1326 audit(783.979:10657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 271.974206][ T29] audit: type=1326 audit(783.979:10658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 271.998132][ T29] audit: type=1326 audit(784.039:10659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 272.021111][ T29] audit: type=1326 audit(784.039:10660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 272.044692][ T29] audit: type=1326 audit(784.039:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 272.094204][ T29] audit: type=1326 audit(784.109:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 272.117252][ T29] audit: type=1326 audit(784.119:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 272.592492][T26244] bridge0: port 1(macsec2) entered blocking state [ 272.599137][T26244] bridge0: port 1(macsec2) entered disabled state [ 272.626829][T26244] macsec2: entered allmulticast mode [ 272.632440][T26244] bridge0: entered allmulticast mode [ 272.639508][T26244] macsec2: left allmulticast mode [ 272.644685][T26244] bridge0: left allmulticast mode [ 272.653119][T26252] netlink: 'syz.3.9407': attribute type 1 has an invalid length. [ 272.696642][T26250] lo speed is unknown, defaulting to 1000 [ 272.960375][T26272] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 272.981296][T26272] 0ªî{X¹¦: entered allmulticast mode [ 272.999585][T26272] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 273.505920][T26292] lo speed is unknown, defaulting to 1000 [ 273.752265][T26318] bridge0: port 3(macsec1) entered blocking state [ 273.758955][T26318] bridge0: port 3(macsec1) entered disabled state [ 273.767181][T26318] macsec1: entered allmulticast mode [ 273.772610][T26318] bridge0: entered allmulticast mode [ 273.780031][T26318] macsec1: left allmulticast mode [ 273.785454][T26318] bridge0: left allmulticast mode [ 273.816168][T26320] gtp0: entered promiscuous mode [ 273.958482][T26328] lo speed is unknown, defaulting to 1000 [ 274.244722][ T9] usb 12-1: device descriptor read/8, error -110 [ 274.355893][ T9] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 274.378939][ T9] usb 12-1: enqueue for inactive port 0 [ 274.390941][ T9] usb 12-1: enqueue for inactive port 0 [ 274.403658][ T9] usb 12-1: enqueue for inactive port 0 [ 274.813334][T26391] __nla_validate_parse: 5 callbacks suppressed [ 274.813345][T26391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9466'. [ 274.829252][T26391] netem: change failed [ 275.187067][T26426] bridge: RTM_NEWNEIGH with invalid ether address [ 275.193972][T26428] netlink: 'syz.0.9483': attribute type 27 has an invalid length. [ 275.205728][T26428] 0ªî{X¹¦: left allmulticast mode [ 275.218452][T26428] syz_tun: left promiscuous mode [ 275.230581][T26428] ip6gre1: left allmulticast mode [ 275.236723][T26428] gtp0: left promiscuous mode [ 275.242142][T26430] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9485'. [ 275.268589][T26428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.284176][ T3574] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.293626][ T3574] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.302983][ T3574] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.313357][ T3574] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.424885][ T9] usb usb12-port1: attempt power cycle [ 275.729983][T26475] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 276.478695][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9531'. [ 276.490209][T26533] sctp: [Deprecated]: syz.4.9531 (pid 26533) Use of int in max_burst socket option. [ 276.490209][T26533] Use struct sctp_assoc_value instead [ 276.557591][T26537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9533'. [ 276.578921][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 276.578937][ T29] audit: type=1400 audit(788.609:11044): avc: denied { firmware_load } for pid=26536 comm="syz.4.9533" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 276.614119][ T29] audit: type=1326 audit(788.609:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb41ff5ba7 code=0x7ffc0000 [ 276.637246][ T29] audit: type=1326 audit(788.609:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb41f9add9 code=0x7ffc0000 [ 276.660238][ T29] audit: type=1326 audit(788.609:11047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 276.683244][ T29] audit: type=1326 audit(788.619:11048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb41ff5ba7 code=0x7ffc0000 [ 276.706303][ T29] audit: type=1326 audit(788.619:11049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb41f9add9 code=0x7ffc0000 [ 276.729337][ T29] audit: type=1326 audit(788.619:11050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 276.752353][ T29] audit: type=1326 audit(788.619:11051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb41ff5ba7 code=0x7ffc0000 [ 276.775443][ T29] audit: type=1326 audit(788.619:11052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb41f9add9 code=0x7ffc0000 [ 276.798617][ T29] audit: type=1326 audit(788.619:11053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26472 comm="syz.1.9506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 276.863060][T26544] netlink: 'syz.1.9534': attribute type 27 has an invalid length. [ 276.871559][T26544] 0ªî{X¹¦: left allmulticast mode [ 276.880566][T26544] bond4: left promiscuous mode [ 276.885518][T26544] bond4: left allmulticast mode [ 276.897162][T26544] ip6gre3: left allmulticast mode [ 276.903256][ T3574] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.914036][ T3574] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.923315][ T3574] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.968492][ T3574] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.295507][T26565] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -2561, delta: 1 [ 277.304251][T26565] ref_ctr increment failed for inode: 0x2060 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888166eef300 [ 277.454850][ T9] usb usb12-port1: unable to enumerate USB device [ 277.456939][T26552] Set syz1 is full, maxelem 65536 reached [ 277.676168][T26575] loop5: detected capacity change from 0 to 1024 [ 277.684420][T26577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9551'. [ 277.737004][T26575] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 277.779272][T26575] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.9550: lblock 1 mapped to illegal pblock 1 (length 1) [ 277.808036][T26575] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9550: Failed to acquire dquot type 0 [ 277.855500][T26575] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.9550: Freeing blocks not in datazone - block = 0, count = 4096 [ 277.892447][T26575] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.9550: Invalid inode bitmap blk 0 in block_group 0 [ 277.906693][T10100] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 277.930254][T10100] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:30: Failed to release dquot type 0 [ 277.954134][T26575] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 277.973829][T26575] EXT4-fs (loop5): 1 orphan inode deleted [ 277.980973][T26575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.017529][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.081907][T26614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9567'. [ 278.111765][T26620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9569'. [ 278.149029][T26622] loop5: detected capacity change from 0 to 512 [ 278.169287][T26622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.200886][T26629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26629 comm=syz.3.9574 [ 278.266030][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.382966][T26656] loop5: detected capacity change from 0 to 4096 [ 278.416981][T26656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.619866][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.656928][T26704] bridge2: entered allmulticast mode [ 278.665122][T26709] IPVS: Error connecting to the multicast addr [ 278.672889][T26702] bridge2: left allmulticast mode [ 278.820287][T26716] lo speed is unknown, defaulting to 1000 [ 278.872328][T26747] netlink: 'syz.5.9612': attribute type 27 has an invalid length. [ 278.887770][T26747] bond1: left promiscuous mode [ 278.892678][T26747] bond1: left allmulticast mode [ 278.917762][T26747] vxlan0: left promiscuous mode [ 278.924226][ T3380] kernel write not supported for file [eventfd] (pid: 3380 comm: kworker/1:3) [ 278.929587][T26747] veth7: left promiscuous mode [ 278.938344][ T3574] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.958951][ T3574] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.969177][T26756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9614'. [ 278.986234][ T3574] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.018789][ T3574] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.047471][T26764] wg2: entered promiscuous mode [ 279.052496][T26764] wg2: entered allmulticast mode [ 279.109777][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9619'. [ 279.255097][T26792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9624'. [ 279.417698][T26767] Set syz1 is full, maxelem 65536 reached [ 279.477356][T26819] netlink: 'syz.3.9626': attribute type 27 has an invalid length. [ 279.573592][T26819] wireguard0: left promiscuous mode [ 279.578891][T26819] wireguard0: left allmulticast mode [ 279.587457][T26819] ip6gre2: left allmulticast mode [ 279.595905][T26819] ip6gre3: left allmulticast mode [ 279.798068][T26844] lo speed is unknown, defaulting to 1000 [ 280.104282][T26874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9632'. [ 280.265403][T26884] ------------[ cut here ]------------ [ 280.270978][T26884] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 280.291441][T26884] WARNING: CPU: 0 PID: 26884 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 280.301834][T26884] Modules linked in: [ 280.305775][T26884] CPU: 0 UID: 0 PID: 26884 Comm: syz.5.9633 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 280.318299][T26884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.335927][T26884] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 280.342271][T26884] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 280.362243][T26884] RSP: 0018:ffffc900064e3440 EFLAGS: 00010292 [ 280.368440][T26884] RAX: 8b12117880810300 RBX: ffff88817685f840 RCX: 0000000000080000 [ 280.376478][T26884] RDX: ffffc900135cf000 RSI: 000000000001b462 RDI: 000000000001b463 [ 280.384831][T26884] RBP: 0000000000000000 R08: 0001c900064e327f R09: 0000000000000000 [ 280.392799][T26884] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88817685f800 [ 280.400812][T26884] R13: ffff88811eb90000 R14: ffff88811eb90000 R15: ffff88817685f838 [ 280.408878][T26884] FS: 00007f1a703276c0(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 280.417876][T26884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.424508][T26884] CR2: 00007f552a6d3f60 CR3: 000000011b5dc000 CR4: 00000000003506f0 [ 280.432603][T26884] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.440626][T26884] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 280.448638][T26884] Call Trace: [ 280.451946][T26884] [ 280.455080][T26884] reg_set_min_max+0x1eb/0x260 [ 280.459927][T26884] check_cond_jmp_op+0x1080/0x16e0 [ 280.465169][T26884] do_check+0x332a/0x7a10 [ 280.469550][T26884] do_check_common+0xc3a/0x12a0 [ 280.474534][T26884] bpf_check+0x942b/0xd9e0 [ 280.478989][T26884] ? __rcu_read_unlock+0x4f/0x70 [ 280.483934][T26884] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 280.490128][T26884] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 280.495962][T26884] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 280.502025][T26884] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 280.508144][T26884] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 280.514216][T26884] ? css_rstat_updated+0xb7/0x240 [ 280.519376][T26884] ? __rcu_read_unlock+0x4f/0x70 [ 280.524322][T26884] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 280.530204][T26884] ? should_fail_ex+0x30/0x280 [ 280.535010][T26884] ? selinux_bpf_prog_load+0x36/0xf0 [ 280.540341][T26884] ? should_failslab+0x8c/0xb0 [ 280.545222][T26884] ? __kmalloc_cache_noprof+0x189/0x320 [ 280.550864][T26884] ? selinux_bpf_prog_load+0xbf/0xf0 [ 280.556230][T26884] ? security_bpf_prog_load+0x2c/0xa0 [ 280.561703][T26884] bpf_prog_load+0xedd/0x1070 [ 280.566750][T26884] ? security_bpf+0x2b/0x90 [ 280.571311][T26884] __sys_bpf+0x462/0x7b0 [ 280.575593][T26884] __x64_sys_bpf+0x41/0x50 [ 280.580027][T26884] x64_sys_call+0x2aea/0x2ff0 [ 280.584812][T26884] do_syscall_64+0xd2/0x200 [ 280.589352][T26884] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.595445][T26884] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 280.601165][T26884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.607097][T26884] RIP: 0033:0x7f1a718bebe9 [ 280.611503][T26884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.631244][T26884] RSP: 002b:00007f1a70327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.639999][T26884] RAX: ffffffffffffffda RBX: 00007f1a71ae5fa0 RCX: 00007f1a718bebe9 [ 280.648129][T26884] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 280.656140][T26884] RBP: 00007f1a71941e19 R08: 0000000000000000 R09: 0000000000000000 [ 280.664151][T26884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.672332][T26884] R13: 00007f1a71ae6038 R14: 00007f1a71ae5fa0 R15: 00007ffc497f0188 [ 280.680491][T26884] [ 280.683510][T26884] ---[ end trace 0000000000000000 ]--- [ 280.944987][T26920] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9646'. [ 280.958186][T26920] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9646'. [ 281.100943][T26924] loop5: detected capacity change from 0 to 512 [ 281.145140][T26924] EXT4-fs (loop5): orphan cleanup on readonly fs [ 281.151968][T26924] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.9648: bad orphan inode 13 [ 281.164496][T26924] ext4_test_bit(bit=12, block=18) = 1 [ 281.170065][T26924] is_bad_inode(inode)=0 [ 281.174309][T26924] NEXT_ORPHAN(inode)=2130706432 [ 281.179352][T26924] max_ino=32 [ 281.182806][T26924] i_nlink=1 [ 281.189317][T26924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.209535][T26905] Set syz1 is full, maxelem 65536 reached [ 281.239456][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.367350][T26939] bridge0: port 1(macsec1) entered blocking state [ 281.373842][T26939] bridge0: port 1(macsec1) entered disabled state [ 281.397780][T26939] macsec1: entered allmulticast mode [ 281.403142][T26939] bridge0: entered allmulticast mode [ 281.420092][T26939] macsec1: left allmulticast mode [ 281.425307][T26939] bridge0: left allmulticast mode [ 281.452167][T26949] wg2: entered promiscuous mode [ 281.457289][T26949] wg2: entered allmulticast mode [ 281.554217][T26962] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 281.584693][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 281.584708][ T29] audit: type=1326 audit(793.619:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.617421][ T29] audit: type=1326 audit(793.649:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.640709][ T29] audit: type=1326 audit(793.649:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.664016][ T29] audit: type=1326 audit(793.649:11190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.687306][ T29] audit: type=1326 audit(793.649:11191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.710533][ T29] audit: type=1326 audit(793.649:11192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.733522][ T29] audit: type=1326 audit(793.649:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.756617][ T29] audit: type=1326 audit(793.649:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.779705][ T29] audit: type=1326 audit(793.649:11195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.802784][ T29] audit: type=1326 audit(793.649:11196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26969 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 281.975200][T26989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26989 comm=syz.4.9670 [ 282.118622][T26964] Set syz1 is full, maxelem 65536 reached [ 282.229328][T27023] pimreg: entered allmulticast mode [ 282.848702][T27130] ref_ctr_offset mismatch. inode: 0x2a35 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000200 [ 283.317003][T27203] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 283.610917][T27217] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9726'. [ 283.783351][T27240] bridge: RTM_NEWNEIGH with invalid ether address [ 283.894186][T27254] netlink: 8 bytes leftover after parsing attributes in process `¬í'. [ 284.062327][T27271] lo speed is unknown, defaulting to 1000 [ 284.309013][T27312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9768'. [ 284.342373][T27312] netem: change failed [ 284.565116][T27338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9780'. [ 284.624690][T27342] netlink: '+}[@': attribute type 1 has an invalid length. [ 284.632056][T27342] netlink: 198116 bytes leftover after parsing attributes in process `+}[@'. [ 285.046758][T27372] wireguard1: entered promiscuous mode [ 285.052348][T27372] wireguard1: entered allmulticast mode [ 285.144761][T27382] loop5: detected capacity change from 0 to 128 [ 285.160234][T27382] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.198439][T27382] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.214671][T27389] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9800'. [ 285.320072][T27398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9804'. [ 285.329420][T27398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9804'. [ 285.338554][T27398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9804'. [ 285.389161][T27398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9804'. [ 285.398369][T27398] netlink: 'syz.3.9804': attribute type 6 has an invalid length. [ 285.413523][T27400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9805'. [ 285.422652][T27400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9805'. [ 285.431630][T27400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9805'. [ 285.444729][T27400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9805'. [ 285.453717][T27400] netlink: 'syz.1.9805': attribute type 6 has an invalid length. [ 285.569289][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9812'. [ 286.097179][T27476] netlink: zone id is out of range [ 286.724424][T27542] ªªªªªª: renamed from bond_slave_0 [ 286.911218][ T29] kauditd_printk_skb: 877 callbacks suppressed [ 286.911232][ T29] audit: type=1326 audit(798.939:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27559 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 286.964492][ T29] audit: type=1326 audit(798.939:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27559 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 286.987667][ T29] audit: type=1326 audit(798.939:12076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27559 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 287.011145][ T29] audit: type=1326 audit(798.939:12077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27559 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 287.080542][T27564] veth21: entered promiscuous mode [ 287.290855][ T29] audit: type=1326 audit(799.319:12078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27575 comm="syz.5.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 287.314156][ T29] audit: type=1326 audit(799.319:12079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27575 comm="syz.5.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 287.390455][ T29] audit: type=1326 audit(799.319:12080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27575 comm="syz.5.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 287.413520][ T29] audit: type=1326 audit(799.319:12081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27575 comm="syz.5.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 287.436528][ T29] audit: type=1326 audit(799.319:12082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27575 comm="syz.5.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 287.459693][ T29] audit: type=1326 audit(799.379:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27575 comm="syz.5.9877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 287.593147][T27586] rdma_rxe: rxe_newlink: failed to add syz_tun [ 288.273628][T27632] ip6gre1: entered allmulticast mode [ 288.339465][T27640] wireguard0: entered promiscuous mode [ 288.345047][T27640] wireguard0: entered allmulticast mode [ 288.951368][T27702] bridge_slave_0: left allmulticast mode [ 288.957161][T27702] bridge_slave_0: left promiscuous mode [ 288.963030][T27702] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.974284][T27702] bridge_slave_1: left allmulticast mode [ 288.980103][T27702] bridge_slave_1: left promiscuous mode [ 288.985932][T27702] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.002494][T27702] bond0: (slave bond_slave_0): Releasing backup interface [ 289.020128][T27702] bond0: (slave bond_slave_1): Releasing backup interface [ 289.038511][T27702] team0: Port device team_slave_0 removed [ 289.049446][T27702] team0: Port device team_slave_1 removed [ 289.058733][T27702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.066590][T27702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.196007][T27732] loop5: detected capacity change from 0 to 1024 [ 289.216647][T27732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.251411][T27732] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.9934: lblock 1 mapped to illegal pblock 1 (length 15) [ 289.273929][T27732] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 289.286504][T27732] EXT4-fs (loop5): This should not happen!! Data will be lost [ 289.286504][T27732] [ 289.313515][T27745] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.9934: lblock 1 mapped to illegal pblock 1 (length 3) [ 289.331491][T27732] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 289.348978][T27745] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.9934: lblock 1 mapped to illegal pblock 1 (length 3) [ 289.395550][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.427806][T27761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.439980][T27761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.002508][T27872] pim6reg1: entered promiscuous mode [ 290.008029][T27872] pim6reg1: entered allmulticast mode [ 290.066085][T27875] geneve0: entered allmulticast mode [ 290.071747][T27875] geneve0: entered promiscuous mode [ 290.166578][T27874] geneve0: left promiscuous mode [ 290.171966][T27874] geneve0: left allmulticast mode [ 291.257605][T27957] __nla_validate_parse: 14 callbacks suppressed [ 291.257655][T27957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9988'. [ 291.315528][T27959] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 291.510836][T27984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27984 comm=syz.5.9999 [ 291.558105][T27991] netlink: 'syz.5.10002': attribute type 10 has an invalid length. [ 291.574662][T27991] syz_tun: entered promiscuous mode [ 291.583786][T27991] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 291.916830][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 291.916877][ T29] audit: type=1326 audit(803.949:12623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fc15d5ba7 code=0x7ffc0000 [ 291.947413][ T29] audit: type=1326 audit(803.989:12624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fc157add9 code=0x7ffc0000 [ 291.970415][ T29] audit: type=1326 audit(803.989:12625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fc15d5ba7 code=0x7ffc0000 [ 291.993292][ T29] audit: type=1326 audit(803.989:12626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fc157add9 code=0x7ffc0000 [ 292.016224][ T29] audit: type=1326 audit(803.989:12627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 292.039189][ T29] audit: type=1326 audit(803.989:12628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fc15d5ba7 code=0x7ffc0000 [ 292.062369][ T29] audit: type=1326 audit(803.989:12629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fc157add9 code=0x7ffc0000 [ 292.085428][ T29] audit: type=1326 audit(803.989:12630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 292.133392][ T29] audit: type=1326 audit(804.059:12631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fc15d5ba7 code=0x7ffc0000 [ 292.156558][ T29] audit: type=1326 audit(804.059:12632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27972 comm="syz.3.9995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fc157add9 code=0x7ffc0000 [ 292.330112][T28027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10018'. [ 292.352861][T28030] sctp: [Deprecated]: syz.1.10016 (pid 28030) Use of int in maxseg socket option. [ 292.352861][T28030] Use struct sctp_assoc_value instead [ 292.711278][T28061] sctp: [Deprecated]: syz.5.10031 (pid 28061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.711278][T28061] Use struct sctp_sack_info instead [ 292.756892][T28065] bond3: (slave veth21): Releasing active interface [ 292.864257][T28081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28081 comm=syz.3.10037 [ 293.002951][T28104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10046'. [ 293.020142][T28104] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.097957][T28100] netlink: 'syz.5.10044': attribute type 10 has an invalid length. [ 293.107074][T28100] team0: Port device dummy0 added [ 293.200918][T28126] netlink: 'syz.1.10057': attribute type 10 has an invalid length. [ 293.209316][T28126] syz_tun: entered promiscuous mode [ 293.757940][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10077'. [ 293.798502][T28170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10077'. [ 293.832447][T28177] loop5: detected capacity change from 0 to 1024 [ 293.863897][T28177] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 293.928714][T28177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.962128][T28203] netlink: zone id is out of range [ 293.982033][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.105024][T28184] wg2: entered promiscuous mode [ 294.109918][T28184] wg2: entered allmulticast mode [ 294.115845][T28223] ªªªªªª: renamed from wg2 (while UP) [ 295.217250][T28319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10140'. [ 295.245808][T28319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10140'. [ 295.694912][T28348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10154'. [ 295.875362][T28358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10157'. [ 296.151773][T28387] netlink: 'syz.4.10169': attribute type 3 has an invalid length. [ 296.263289][T28384] netlink: 'syz.0.10168': attribute type 10 has an invalid length. [ 296.353102][T28401] netlink: 'syz.1.10176': attribute type 1 has an invalid length. [ 296.361215][T28401] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.10176'. [ 296.406023][T28406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10178'. [ 296.757797][T28464] netlink: 'syz.0.10204': attribute type 10 has an invalid length. [ 296.766110][T28464] netlink: 1168 bytes leftover after parsing attributes in process `syz.0.10204'. [ 297.144554][T28478] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10209'. [ 297.158862][T28478] bridge0: entered promiscuous mode [ 297.165033][T28478] bridge0: port 1(macvlan2) entered blocking state [ 297.171578][T28478] bridge0: port 1(macvlan2) entered disabled state [ 297.179797][T28478] macvlan2: entered allmulticast mode [ 297.185305][T28478] bridge0: entered allmulticast mode [ 297.193547][T28478] macvlan2: left allmulticast mode [ 297.198875][T28478] bridge0: left allmulticast mode [ 297.208860][T28478] bridge0: left promiscuous mode [ 297.268696][T28492] bond6: entered promiscuous mode [ 297.273790][T28492] bond6: entered allmulticast mode [ 297.279268][T28492] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.293640][T28492] bond6 (unregistering): Released all slaves [ 297.447469][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 297.447482][ T29] audit: type=1326 audit(809.479:12846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.477381][ T29] audit: type=1326 audit(809.479:12847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.500847][ T29] audit: type=1326 audit(809.479:12848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.524099][ T29] audit: type=1326 audit(809.479:12849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.547463][ T29] audit: type=1326 audit(809.479:12850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.570730][ T29] audit: type=1326 audit(809.479:12851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.593927][ T29] audit: type=1326 audit(809.479:12852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.617403][ T29] audit: type=1326 audit(809.519:12853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.640763][ T29] audit: type=1326 audit(809.519:12854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.668696][ T29] audit: type=1326 audit(809.539:12855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28520 comm="syz.0.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 297.928504][T28551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10241'. [ 297.993295][T28557] ªªªªª: renamed from vlan1 [ 298.044394][T28546] netlink: 'syz.4.10240': attribute type 10 has an invalid length. [ 298.080252][T28565] bridge2: entered allmulticast mode [ 298.247396][T28576] ip6gre4: entered allmulticast mode [ 298.401026][T28590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10259'. [ 298.416200][T28590] hsr_slave_1 (unregistering): left promiscuous mode [ 298.545670][T28599] ipvlan2: entered promiscuous mode [ 298.560613][T28599] bridge0: port 1(ipvlan2) entered blocking state [ 298.567186][T28599] bridge0: port 1(ipvlan2) entered disabled state [ 298.587355][T28599] ipvlan2: entered allmulticast mode [ 298.592682][T28599] bridge0: entered allmulticast mode [ 298.600378][T28599] ipvlan2: left allmulticast mode [ 298.605454][T28599] bridge0: left allmulticast mode [ 298.733637][T28616] atomic_op ffff8881042b0128 conn xmit_atomic 0000000000000000 [ 298.815377][T28624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10274'. [ 298.844971][T28624] hsr_slave_1 (unregistering): left promiscuous mode [ 298.974126][T28647] netlink: 'syz.3.10292': attribute type 27 has an invalid length. [ 299.017105][T28647] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.027118][T28647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.327666][T28653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10285'. [ 299.359143][T28653] team0: entered promiscuous mode [ 299.364394][T28653] team0: entered allmulticast mode [ 299.736210][T28708] bond2: entered promiscuous mode [ 299.741378][T28708] bond2: entered allmulticast mode [ 299.748777][T28708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.783016][T28708] bond2 (unregistering): Released all slaves [ 299.887949][T28729] loop5: detected capacity change from 0 to 128 [ 299.975187][T28751] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10331'. [ 300.081529][T28771] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10339'. [ 300.339560][T28821] tipc: Enabling of bearer rejected, already enabled [ 300.348166][T28823] netlink: 'syz.4.10361': attribute type 27 has an invalid length. [ 300.397225][T28823] wg2: left promiscuous mode [ 300.401948][T28823] wg2: left allmulticast mode [ 300.413493][T28823] wireguard0: left promiscuous mode [ 300.418844][T28823] wireguard0: left allmulticast mode [ 300.428578][T28823] ip6gre3: left allmulticast mode [ 300.435800][ T9] lo speed is unknown, defaulting to 1000 [ 300.441668][ T9] syz0: Port: 1 Link DOWN [ 300.461580][T28829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.477661][T21716] lo speed is unknown, defaulting to 1000 [ 300.483416][T21716] syz0: Port: 1 Link ACTIVE [ 300.610716][T28836] lo speed is unknown, defaulting to 1000 [ 300.743278][T28854] bond7: entered promiscuous mode [ 300.748621][T28854] bond7: entered allmulticast mode [ 300.758661][T28854] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.767362][T28854] bond7 (unregistering): Released all slaves [ 301.127347][T28890] loop5: detected capacity change from 0 to 1024 [ 301.144457][T28890] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 301.155685][T28890] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 301.168927][T28890] JBD2: no valid journal superblock found [ 301.174802][T28890] EXT4-fs (loop5): Could not load journal inode [ 301.320639][T28911] sch_fq: defrate 4294967295 ignored. [ 301.468860][T28930] __nla_validate_parse: 4 callbacks suppressed [ 301.468877][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10409'. [ 301.569265][T28938] tipc: Enabling of bearer rejected, already enabled [ 301.680347][T28952] bond2: entered promiscuous mode [ 301.685464][T28952] bond2: entered allmulticast mode [ 301.691045][T28952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.700201][T28952] bond2 (unregistering): Released all slaves [ 301.808445][T28967] netlink: 'syz.4.10423': attribute type 10 has an invalid length. [ 301.823662][T28967] bond0: (slave batadv0): Releasing active interface [ 301.991596][T28985] geneve2: entered promiscuous mode [ 301.997004][T28985] geneve2: entered allmulticast mode [ 302.003650][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.016462][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.034288][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.044127][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.329150][T29023] netlink: 'syz.4.10449': attribute type 13 has an invalid length. [ 302.343858][T29023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.362043][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10451'. [ 302.438164][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10451'. [ 302.465988][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10456'. [ 302.484703][ T3380] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 181 sec [ 302.589088][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 302.589143][ T29] audit: type=1326 audit(814.619:13000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.3.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 302.636444][ T29] audit: type=1326 audit(814.659:13001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.3.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 302.659605][ T29] audit: type=1326 audit(814.659:13002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.3.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 302.682768][ T29] audit: type=1326 audit(814.659:13003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.3.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 302.705936][ T29] audit: type=1326 audit(814.659:13004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.3.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 302.729326][ T29] audit: type=1326 audit(814.659:13005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.3.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 302.735265][T29044] netlink: 'syz.5.10459': attribute type 30 has an invalid length. [ 302.752537][ T29] audit: type=1326 audit(814.659:13006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.3.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 302.752562][ T29] audit: type=1326 audit(814.659:13007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.3.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 303.010363][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10465'. [ 303.023333][ T29] audit: type=1400 audit(815.049:13008): avc: denied { nlmsg_read } for pid=29057 comm="syz.0.10466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 303.026069][T29058] geneve3: entered promiscuous mode [ 303.049369][T29058] geneve3: entered allmulticast mode [ 303.077669][T29056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10465'. [ 303.193083][T29073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29073 comm=syz.1.10474 [ 303.225708][T29075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10482'. [ 303.337300][T29089] netlink: 'syz.1.10478': attribute type 13 has an invalid length. [ 303.366697][T29089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.173027][T29100] cgroup: Unknown subsys name 'cpuset' [ 304.180205][T29103] netlink: 'syz.0.10491': attribute type 10 has an invalid length. [ 304.287221][T29104] lo speed is unknown, defaulting to 1000 [ 304.358723][T29125] loop5: detected capacity change from 0 to 1024 [ 304.365644][T29125] EXT4-fs: Ignoring removed orlov option [ 304.373548][T29125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.418485][T29133] netlink: 'syz.0.10495': attribute type 13 has an invalid length. [ 304.430829][T29133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.491610][ T29] audit: type=1326 audit(816.519:13009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29137 comm="syz.0.10509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9eedc5ba7 code=0x7ffc0000 [ 304.541384][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.556650][T12689] Process accounting resumed [ 304.557681][T29144] sch_fq: defrate 4294967295 ignored. [ 304.612091][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10503'. [ 304.624261][T29154] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10503'. [ 305.037451][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10519'. [ 305.269547][T29216] cgroup: Unknown subsys name 'cpuset' [ 305.356924][T29220] lo speed is unknown, defaulting to 1000 [ 305.488050][T29237] netlink: 'syz.3.10543': attribute type 30 has an invalid length. [ 305.840273][T29277] loop5: detected capacity change from 0 to 512 [ 305.857683][T29277] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 305.882961][T29277] System zones: 0-2, 18-18, 34-35 [ 305.902677][T29277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.957747][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.040706][T29302] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 306.105859][T29308] bond2: entered allmulticast mode [ 306.111290][T29308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.128644][T29308] bridge0: port 1(bond2) entered blocking state [ 306.135150][T29308] bridge0: port 1(bond2) entered disabled state [ 306.143119][T29308] bond2: entered promiscuous mode [ 306.148713][T29308] bridge0: port 1(bond2) entered blocking state [ 306.155025][T29308] bridge0: port 1(bond2) entered forwarding state [ 306.165202][T10100] bridge0: port 1(bond2) entered disabled state [ 306.583400][T29372] loop5: detected capacity change from 0 to 1024 [ 306.590136][T29372] EXT4-fs: Ignoring removed orlov option [ 306.597907][T29372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.662143][T29380] __nla_validate_parse: 7 callbacks suppressed [ 306.662160][T29380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10603'. [ 306.768742][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10607'. [ 306.777794][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10607'. [ 306.811165][T29394] netlink: 'syz.1.10609': attribute type 30 has an invalid length. [ 306.857752][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.422382][T29431] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10627'. [ 307.437933][T29435] netlink: 'syz.0.10625': attribute type 30 has an invalid length. [ 307.577628][T29449] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 307.650810][T29451] lo speed is unknown, defaulting to 1000 [ 307.934945][T29471] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10642'. [ 308.016100][T29478] netlink: 'syz.4.10643': attribute type 30 has an invalid length. [ 308.038098][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 308.038111][ T29] audit: type=1326 audit(820.069:13482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 308.067711][ T29] audit: type=1326 audit(820.069:13483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 308.090923][ T29] audit: type=1326 audit(820.069:13484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 308.121414][ T29] audit: type=1326 audit(820.069:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 308.144552][ T29] audit: type=1326 audit(820.069:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29477 comm="syz.3.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc15debe9 code=0x7ffc0000 [ 308.308845][ T29] audit: type=1326 audit(820.339:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 308.332241][ T29] audit: type=1326 audit(820.339:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 308.356502][ T29] audit: type=1326 audit(820.339:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 308.379700][ T29] audit: type=1326 audit(820.339:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 308.402757][ T29] audit: type=1326 audit(820.339:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a718bebe9 code=0x7ffc0000 [ 308.569894][T29513] loop5: detected capacity change from 0 to 512 [ 308.586293][T29513] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 308.596460][T29513] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10660: invalid indirect mapped block 2683928664 (level 1) [ 308.625282][T29513] EXT4-fs (loop5): Remounting filesystem read-only [ 308.640297][T29513] EXT4-fs (loop5): 1 truncate cleaned up [ 308.654144][T29513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.713131][T22013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.855755][T29523] netlink: 'syz.0.10663': attribute type 30 has an invalid length. [ 309.060958][T29543] netlink: 'syz.0.10673': attribute type 12 has an invalid length. [ 309.213065][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10681'. [ 309.277805][T29569] netlink: 'syz.3.10685': attribute type 3 has an invalid length. [ 309.315232][T29580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10690'. [ 309.324532][T29580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10690'. [ 309.356152][T29588] -: renamed from syzkaller0 [ 309.404530][T29582] lo speed is unknown, defaulting to 1000 [ 309.478151][T29601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10697'. [ 309.567671][T29606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10699'. [ 309.848640][T29650] netlink: 'syz.4.10720': attribute type 3 has an invalid length. [ 309.944170][T22013] bond0: (slave syz_tun): Releasing backup interface [ 310.405354][T29663] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 310.612808][T29667] lo speed is unknown, defaulting to 1000 [ 310.688524][T29692] netlink: 'syz.3.10737': attribute type 1 has an invalid length. [ 310.707837][T29667] chnl_net:caif_netlink_parms(): no params data found [ 310.808198][T29667] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.815351][T29667] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.841184][T29667] bridge_slave_0: entered allmulticast mode [ 310.847978][T29667] bridge_slave_0: entered promiscuous mode [ 310.856080][T29667] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.863264][T29667] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.877427][T29667] bridge_slave_1: entered allmulticast mode [ 310.884148][T29667] bridge_slave_1: entered promiscuous mode [ 310.966523][T29667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.986445][T29667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.043118][T29667] team0: Port device team_slave_0 added [ 311.052366][T29667] team0: Port device team_slave_1 added [ 311.093427][T29667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.100594][T29667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.126928][T29667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.143727][T29667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.150955][T29667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.176969][T29667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.229992][T29667] hsr_slave_0: entered promiscuous mode [ 311.246031][T29667] hsr_slave_1: entered promiscuous mode [ 311.252146][T29667] debugfs: 'hsr0' already exists in 'hsr' [ 311.257994][T29667] Cannot create hsr debugfs directory [ 311.392266][T29667] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.459219][T29667] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.485839][T29759] netlink: 'syz.3.10763': attribute type 10 has an invalid length. [ 311.538970][T29759] team0: Port device dummy0 added [ 311.566280][T29667] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.619017][T29667] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.693356][T29765] lo speed is unknown, defaulting to 1000 [ 311.693453][T29667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.736905][T29667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.772970][T29667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 311.807563][T29667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.858994][T29667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.893605][T29801] bridge: RTM_NEWNEIGH with invalid ether address [ 311.907441][T29667] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.922374][T29810] IPVS: Error connecting to the multicast addr [ 311.943398][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.950608][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.965698][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.972799][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.117129][T29667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.190947][T29818] lo speed is unknown, defaulting to 1000 [ 312.310524][T29822] lo speed is unknown, defaulting to 1000 [ 312.411724][T29667] veth0_vlan: entered promiscuous mode [ 312.423808][T29667] veth1_vlan: entered promiscuous mode [ 312.449613][T29667] veth0_macvtap: entered promiscuous mode [ 312.465907][T29667] veth1_macvtap: entered promiscuous mode [ 312.503026][T29667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.522392][T29667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.567287][ T3449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.596630][T10100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.627161][T10100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.660177][T10100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.818078][T29885] loop5: detected capacity change from 0 to 512 [ 312.848858][T29885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.879739][T29891] ref_ctr_offset mismatch. inode: 0x25ab offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 312.988533][T29667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.041106][T29912] netlink: 'syz.4.10818': attribute type 1 has an invalid length. [ 313.049253][T29912] __nla_validate_parse: 11 callbacks suppressed [ 313.049329][T29912] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.10818'. [ 313.091145][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 313.091161][ T29] audit: type=1326 audit(825.119:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29920 comm="syz.0.10822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x0 [ 313.105703][T29923] netlink: 292 bytes leftover after parsing attributes in process `syz.4.10823'. [ 313.283874][T29934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10828'. [ 313.293605][T29934] bond2: left promiscuous mode [ 313.298730][T29934] bridge0: port 1(bond2) entered disabled state [ 313.476404][ T29] audit: type=1326 audit(825.509:13664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.500060][ T29] audit: type=1326 audit(825.509:13665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.525707][ T29] audit: type=1326 audit(825.509:13666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.549147][ T29] audit: type=1326 audit(825.509:13667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.572330][ T29] audit: type=1326 audit(825.509:13668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.595505][ T29] audit: type=1326 audit(825.509:13669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.618813][ T29] audit: type=1326 audit(825.509:13670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.642014][ T29] audit: type=1326 audit(825.509:13671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.665165][ T29] audit: type=1326 audit(825.509:13672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29940 comm="syz.4.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 313.729278][T29944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10832'. [ 313.948810][T29992] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 314.066844][T30015] netlink: 'syz.0.10865': attribute type 10 has an invalid length. [ 314.075419][T30015] ipvlan0: entered allmulticast mode [ 314.080720][T30015] veth0_vlan: entered allmulticast mode [ 314.310278][T30043] lo speed is unknown, defaulting to 1000 [ 314.410901][T30061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10885'. [ 314.420145][T30061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10885'. [ 314.454558][T30061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10885'. [ 314.463906][T30061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10885'. [ 314.512975][T30061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10885'. [ 314.522315][T30061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10885'. [ 314.573338][T30077] ip6gre4: entered allmulticast mode [ 314.773669][T30097] SELinux: failed to load policy [ 314.895800][T30122] sg_write: process 31 (syz.5.10906) changed security contexts after opening file descriptor, this is not allowed. [ 314.931795][T30111] lo speed is unknown, defaulting to 1000 [ 315.160539][T30149] netlink: 'syz.5.10921': attribute type 13 has an invalid length. [ 315.172827][ T3574] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.183423][T30149] netlink: 'syz.5.10921': attribute type 13 has an invalid length. [ 315.236889][ T3574] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.247813][ T3574] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.256763][ T3574] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.288981][T30154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.416203][T30172] 9pnet: Could not find request transport: 0xffffffffffffffff [ 315.441736][T30179] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30179 comm=syz.5.10936 [ 315.454627][T30179] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30179 comm=syz.5.10936 [ 315.876799][T30214] netlink: 'syz.3.10952': attribute type 1 has an invalid length. [ 315.884748][T30214] netlink: 'syz.3.10952': attribute type 4 has an invalid length. [ 315.897379][T30214] netlink: 'syz.3.10952': attribute type 1 has an invalid length. [ 315.905280][T30214] netlink: 'syz.3.10952': attribute type 4 has an invalid length. [ 316.209279][T30253] lo speed is unknown, defaulting to 1000 [ 316.300138][T30260] lo speed is unknown, defaulting to 1000 [ 316.463200][T30272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.484373][T30272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.963034][T30281] netlink: 'syz.4.10980': attribute type 10 has an invalid length. [ 316.987982][T30281] netlink: 'syz.4.10980': attribute type 10 has an invalid length. [ 316.999465][T30284] pim6reg1: entered promiscuous mode [ 317.005132][T30284] pim6reg1: entered allmulticast mode [ 317.018510][T30282] batadv2: left allmulticast mode [ 317.023592][T30282] batadv2: left promiscuous mode [ 317.029015][T30282] bridge0: port 2(batadv2) entered disabled state [ 318.354062][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 318.354077][ T29] audit: type=1326 audit(830.379:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.369515][T30350] __nla_validate_parse: 12 callbacks suppressed [ 318.369676][T30350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11009'. [ 318.383492][ T29] audit: type=1326 audit(830.379:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.422693][ T29] audit: type=1326 audit(830.399:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.446124][ T29] audit: type=1326 audit(830.399:13794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.469450][ T29] audit: type=1326 audit(830.399:13795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.492592][ T29] audit: type=1326 audit(830.399:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.516067][ T29] audit: type=1326 audit(830.399:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.557232][ T29] audit: type=1326 audit(830.549:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.580517][ T29] audit: type=1326 audit(830.549:13799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.603647][ T29] audit: type=1326 audit(830.589:13800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.11008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 318.630840][T30353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11010'. [ 318.671568][T30353] netlink: 'syz.1.11010': attribute type 2 has an invalid length. [ 318.853672][T30373] sctp: [Deprecated]: syz.4.11020 (pid 30373) Use of int in maxseg socket option. [ 318.853672][T30373] Use struct sctp_assoc_value instead [ 318.979801][T30385] wireguard1: entered promiscuous mode [ 318.985406][T30385] wireguard1: entered allmulticast mode [ 319.125455][T30393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11028'. [ 319.268884][T30405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11034'. [ 319.894218][T30449] lo speed is unknown, defaulting to 1000 [ 320.632208][T30491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11069'. [ 320.667289][T30491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.712338][T30491] vlan2: entered allmulticast mode [ 320.717608][T30491] bond1: entered allmulticast mode [ 320.894334][T30499] lo speed is unknown, defaulting to 1000 [ 321.056087][T30520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.073719][T30522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11082'. [ 321.123720][T30526] loop9: detected capacity change from 0 to 7 [ 321.150292][T30530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11086'. [ 321.179047][T30534] netlink: 'syz.3.11089': attribute type 10 has an invalid length. [ 321.187051][T30534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11089'. [ 321.197754][T30534] dummy0: entered promiscuous mode [ 321.214894][T30534] team0: Port device dummy0 removed [ 321.222648][T30534] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 321.396638][T30548] lo speed is unknown, defaulting to 1000 [ 321.462374][T30554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.484156][T30550] lo speed is unknown, defaulting to 1000 [ 322.056153][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11107'. [ 322.117006][T30590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.188854][T30598] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11113'. [ 322.264710][T30602] wireguard1: entered promiscuous mode [ 322.270274][T30602] wireguard1: entered allmulticast mode [ 322.856020][T30650] lo speed is unknown, defaulting to 1000 [ 322.985461][T30661] loop5: detected capacity change from 0 to 1024 [ 322.992914][T30661] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 323.006802][T30661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.039592][T29667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.079320][T30671] hsr_slave_0: left promiscuous mode [ 323.095816][T30671] hsr_slave_1: left promiscuous mode [ 323.254964][T30692] wireguard0: entered promiscuous mode [ 323.260473][T30692] wireguard0: entered allmulticast mode [ 323.642876][T30722] syzkaller0: entered promiscuous mode [ 323.648450][T30722] syzkaller0: entered allmulticast mode [ 323.784005][T30730] sd 0:0:1:0: device reset [ 323.832747][T30736] netlink: 'syz.3.11172': attribute type 15 has an invalid length. [ 323.840777][T30736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11172'. [ 323.885423][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 323.885438][ T29] audit: type=1326 audit(835.919:13985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30741 comm="syz.5.11175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952635ebe9 code=0x7ffc0000 [ 323.885578][T30744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11176'. [ 323.891948][ T29] audit: type=1326 audit(835.919:13986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30741 comm="syz.5.11175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f952635ebe9 code=0x7ffc0000 [ 323.947429][ T29] audit: type=1326 audit(835.949:13987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30741 comm="syz.5.11175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952635ebe9 code=0x7ffc0000 [ 323.970637][ T29] audit: type=1326 audit(835.949:13988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30741 comm="syz.5.11175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952635ebe9 code=0x7ffc0000 [ 324.110271][T30756] netlink: 'syz.5.11181': attribute type 2 has an invalid length. [ 324.118171][T30756] netlink: 'syz.5.11181': attribute type 1 has an invalid length. [ 324.126005][T30756] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.11181'. [ 324.148545][T30758] netlink: 'syz.5.11182': attribute type 10 has an invalid length. [ 324.156631][T30758] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11182'. [ 324.168138][T30758] dummy0: entered promiscuous mode [ 324.174064][T30758] bridge0: port 3(dummy0) entered blocking state [ 324.180639][T30758] bridge0: port 3(dummy0) entered disabled state [ 324.187359][T30758] dummy0: entered allmulticast mode [ 324.193390][T30758] bridge0: port 3(dummy0) entered blocking state [ 324.199859][T30758] bridge0: port 3(dummy0) entered forwarding state [ 324.249963][T30768] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11187'. [ 324.340584][T30787] netlink: 'syz.0.11196': attribute type 10 has an invalid length. [ 324.348682][T30787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11196'. [ 324.348797][T30790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11198'. [ 324.365592][T30787] dummy0: entered promiscuous mode [ 324.372600][T30787] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 324.464450][ T29] audit: type=1326 audit(836.489:13989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.0.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 324.488852][ T29] audit: type=1326 audit(836.489:13990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.0.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 324.512929][ T29] audit: type=1326 audit(836.529:13991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.0.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 324.536198][ T29] audit: type=1326 audit(836.529:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.0.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 324.559393][ T29] audit: type=1326 audit(836.529:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.0.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 324.584912][ T29] audit: type=1326 audit(836.549:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.0.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 324.688220][T30820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11212'. [ 324.702723][T30820] team0: entered promiscuous mode [ 324.707955][T30820] team0: entered allmulticast mode [ 325.000672][T30841] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11221'. [ 325.221601][T30869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11235'. [ 325.503402][T30905] pim6reg: entered allmulticast mode [ 325.512019][T30905] pim6reg: left allmulticast mode [ 326.092022][T30962] lo speed is unknown, defaulting to 1000 [ 326.175119][T30977] netlink: 'syz.1.11279': attribute type 10 has an invalid length. [ 326.203462][T30981] IPv4: Oversized IP packet from 127.202.26.0 [ 326.445091][T31011] rdma_rxe: rxe_newlink: failed to add syz_tun [ 326.657040][T31029] lo speed is unknown, defaulting to 1000 [ 326.756041][T31045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31045 comm=syz.3.11306 [ 328.048331][T12689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=12689 comm=kworker/0:5 [ 328.488992][T31141] loop5: detected capacity change from 0 to 164 [ 328.508470][T31141] iso9660: Unknown parameter 'ÿÿÿÿ' [ 328.551201][T31146] 9pnet: p9_errstr2errno: server reported unknown error [ 328.971744][T31172] __nla_validate_parse: 16 callbacks suppressed [ 328.971761][T31172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11362'. [ 329.042151][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 329.042196][ T29] audit: type=1400 audit(329.011:14165): avc: denied { map } for pid=31179 comm="syz.5.11365" path="socket:[83254]" dev="sockfs" ino=83254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 329.102252][T31180] loop5: detected capacity change from 0 to 2048 [ 329.136164][T31188] rdma_rxe: rxe_newlink: failed to add syz_tun [ 329.208042][T31195] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11370'. [ 329.291609][T31180] loop5: p2 p3 p7 [ 329.365602][T31204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11375'. [ 329.419731][ T29] audit: type=1326 audit(329.391:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 329.461966][ T29] audit: type=1326 audit(329.421:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 329.485197][ T29] audit: type=1326 audit(329.421:14168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 329.508442][ T29] audit: type=1326 audit(329.421:14169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 329.531804][ T29] audit: type=1326 audit(329.421:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 329.555028][ T29] audit: type=1326 audit(329.421:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 329.578151][ T29] audit: type=1326 audit(329.421:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 329.601318][ T29] audit: type=1326 audit(329.421:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 329.624985][ T29] audit: type=1326 audit(329.421:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.4.11379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 330.362473][T31246] lo speed is unknown, defaulting to 1000 [ 330.604988][T31256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11395'. [ 330.634356][T31256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11395'. [ 330.675241][T31266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11399'. [ 330.682965][T31265] loop5: detected capacity change from 0 to 1024 [ 330.703999][T31265] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 330.736868][T31265] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 330.747943][T31265] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 330.774844][T31265] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 330.789108][T31265] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #17: comm syz.5.11398: iget: bad i_size value: 4398046511204 [ 330.824935][T31265] EXT4-fs (loop5): no journal found [ 330.839178][T31247] lo speed is unknown, defaulting to 1000 [ 330.946214][T31284] lo speed is unknown, defaulting to 1000 [ 331.368040][T31329] tipc: Bearer : already 2 bearers with priority 10 [ 331.375617][T31329] tipc: Bearer : trying with adjusted priority [ 331.383250][T31329] tipc: New replicast peer: 255.255.255.83 [ 331.389247][T31329] tipc: Enabled bearer , priority 9 [ 331.483753][T31346] Process accounting resumed [ 331.497371][T31349] IPv6: Can't replace route, no match found [ 331.545355][T31359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11439'. [ 331.918809][T31392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11454'. [ 331.929493][T31395] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11456'. [ 331.940469][T31392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11454'. [ 331.956112][T31400] 9pnet: p9_errstr2errno: server reported unknown error [ 332.008719][T31406] vlan0: entered allmulticast mode [ 332.021865][T31406] dummy0: entered allmulticast mode [ 332.163552][T31438] loop5: detected capacity change from 0 to 512 [ 332.172057][T31438] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 332.180649][T31438] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.11474: invalid indirect mapped block 2683928664 (level 1) [ 332.197133][T31438] EXT4-fs (loop5): 1 truncate cleaned up [ 332.203168][T31438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.220433][T31438] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.11474: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 332.274288][T29667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.386127][T31465] IPv4: Oversized IP packet from 127.202.26.0 [ 332.522097][T31489] 9pnet: p9_errstr2errno: server reported unknown error [ 332.522646][T31488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 332.953831][T31532] ip6gre5: entered allmulticast mode [ 333.040690][T31545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31545 comm=syz.4.11521 [ 333.133451][T31558] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 333.154487][T31561] netlink: 'syz.4.11528': attribute type 1 has an invalid length. [ 333.170577][T31561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.177326][T31564] Process accounting resumed [ 333.189694][T31561] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 333.198672][T31561] bond3: (slave batadv1): making interface the new active one [ 333.207837][T31561] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 333.461935][T31607] bridge: RTM_NEWNEIGH with invalid ether address [ 333.570775][ T3387] kernel write not supported for file [eventfd] (pid: 3387 comm: kworker/1:4) [ 333.731516][T31644] 9pnet_fd: Insufficient options for proto=fd [ 333.784520][T31648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.791793][T31648] IPv6: NLM_F_CREATE should be set when creating new route [ 333.799410][T31648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.806703][T31648] IPv6: NLM_F_CREATE should be set when creating new route [ 334.143315][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 334.143329][ T29] audit: type=1326 audit(334.111:14323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 334.193545][ T29] audit: type=1326 audit(334.151:14324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 334.216684][ T29] audit: type=1326 audit(334.151:14325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb41ffec23 code=0x7ffc0000 [ 334.239946][ T29] audit: type=1326 audit(334.151:14326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb41ffec23 code=0x7ffc0000 [ 334.262957][ T29] audit: type=1326 audit(334.151:14327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 334.286235][ T29] audit: type=1326 audit(334.151:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 334.309514][ T29] audit: type=1326 audit(334.151:14329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 334.333128][ T29] audit: type=1326 audit(334.151:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 334.357048][ T29] audit: type=1326 audit(334.151:14331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 334.380158][ T29] audit: type=1326 audit(334.151:14332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31682 comm="syz.1.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7feb41ffebe9 code=0x7ffc0000 [ 334.456033][T31704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31704 comm=syz.0.11588 [ 334.763755][T31707] bridge0: port 3(dummy0) entered disabled state [ 334.770639][T31707] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.777799][T31707] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.426748][T31707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.460024][T31737] atomic_op ffff88815dde5d28 conn xmit_atomic 0000000000000000 [ 335.789453][T10099] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.798442][T10099] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.811430][T10099] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.820483][T10099] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.830605][T10099] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.839631][T10099] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.854056][T10099] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.863106][T10099] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.985440][T31785] __nla_validate_parse: 7 callbacks suppressed [ 335.985457][T31785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11620'. [ 336.177327][T31800] siw: device registration error -23 [ 336.499591][T31819] loop5: detected capacity change from 0 to 512 [ 336.550158][T31813] lo speed is unknown, defaulting to 1000 [ 336.618489][T31819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.819724][T29667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.034896][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'. [ 337.072584][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'. [ 337.097065][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'. [ 337.125269][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'. [ 337.145034][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'. [ 337.463698][T31895] all: renamed from lo (while UP) [ 337.920194][T31941] vlan2: entered allmulticast mode [ 337.933352][T31943] sch_fq: defrate 0 ignored. [ 338.058488][T31959] loop5: detected capacity change from 0 to 1024 [ 338.090420][T31959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.235018][T31976] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.11697'. [ 338.244360][T31976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11697'. [ 338.303605][T29667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.177048][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 339.177062][ T29] audit: type=1400 audit(339.151:14895): avc: denied { create } for pid=32114 comm="syz.3.11718" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 339.359618][ T29] audit: type=1326 audit(339.331:14896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.396247][ T29] audit: type=1326 audit(339.361:14897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.400912][T32147] bridge0: port 4(bond0) entered blocking state [ 339.419488][ T29] audit: type=1326 audit(339.361:14898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.425776][T32147] bridge0: port 4(bond0) entered disabled state [ 339.448806][ T29] audit: type=1326 audit(339.361:14899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.478305][ T29] audit: type=1326 audit(339.361:14900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.501473][ T29] audit: type=1326 audit(339.361:14901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.524830][ T29] audit: type=1326 audit(339.361:14902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.548633][ T29] audit: type=1326 audit(339.361:14903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.555500][T32147] bond0: entered allmulticast mode [ 339.572145][ T29] audit: type=1326 audit(339.361:14904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32142 comm="syz.0.11726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9eedcebe9 code=0x7ffc0000 [ 339.577240][T32147] bond_slave_0: entered allmulticast mode [ 339.577255][T32147] bond_slave_1: entered allmulticast mode [ 339.615907][T32155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11729'. [ 339.630105][T12691] kernel write not supported for file [eventfd] (pid: 12691 comm: kworker/0:7) [ 339.642557][T32147] bond0: entered promiscuous mode [ 339.647705][T32147] bond_slave_0: entered promiscuous mode [ 339.653586][T32147] bond_slave_1: entered promiscuous mode [ 339.660736][T32148] bond0: left allmulticast mode [ 339.665769][T32148] bond_slave_0: left allmulticast mode [ 339.671357][T32148] bond_slave_1: left allmulticast mode [ 339.676887][T32148] bond0: left promiscuous mode [ 339.681736][T32148] bond_slave_0: left promiscuous mode [ 339.687299][T32148] bond_slave_1: left promiscuous mode [ 339.693008][T32148] bridge0: port 4(bond0) entered disabled state [ 339.699767][T32158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11729'. [ 339.793928][T32170] netlink: 'syz.3.11735': attribute type 4 has an invalid length. [ 339.996371][T32174] netlink: zone id is out of range [ 340.001547][T32174] netlink: set zone limit has 4 unknown bytes [ 340.313156][T32215] can: request_module (can-proto-0) failed. [ 340.473402][T32244] bond2: left allmulticast mode [ 340.489452][T12691] lo speed is unknown, defaulting to 1000 [ 340.495381][T12691] syz0: Port: 1 Link DOWN [ 340.579400][T32254] lo speed is unknown, defaulting to 1000 [ 340.924000][T32296] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 340.948420][T32296] 1ªî{X¹¦: entered allmulticast mode [ 340.961928][T32296] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 341.705587][T32337] syz_tun: entered allmulticast mode [ 341.906689][T32330] syz_tun: left allmulticast mode [ 342.079430][T32357] lo speed is unknown, defaulting to 1000 [ 342.660084][T32394] lo speed is unknown, defaulting to 1000 [ 342.952606][T32437] loop5: detected capacity change from 0 to 2048 [ 342.969678][T32437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.991817][T32437] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11852: bg 0: block 234: padding at end of block bitmap is not set [ 343.010116][T32437] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117 [ 343.022712][T32437] EXT4-fs (loop5): This should not happen!! Data will be lost [ 343.022712][T32437] [ 343.060671][T29667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.087355][T32451] lo speed is unknown, defaulting to 1000 [ 343.387176][T32477] __nla_validate_parse: 5 callbacks suppressed [ 343.387192][T32477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11866'. [ 343.673373][T32512] netlink: 'syz.1.11882': attribute type 12 has an invalid length. [ 343.721975][T32516] netlink: 'syz.0.11884': attribute type 10 has an invalid length. [ 343.730740][T32516] dummy0: left promiscuous mode [ 343.976448][T32532] bond0: entered promiscuous mode [ 343.981822][T32532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.984976][T32533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=32533 comm=syz.0.11890 [ 344.058763][T32543] netlink: 2 bytes leftover after parsing attributes in process `syz.5.11896'. [ 344.303742][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 344.303755][ T29] audit: type=1400 audit(344.271:15329): avc: denied { create } for pid=32556 comm="syz.5.11902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 344.332558][T32557] loop5: detected capacity change from 0 to 128 [ 344.339581][ T29] audit: type=1400 audit(344.281:15330): avc: denied { write } for pid=32556 comm="syz.5.11902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 344.359846][ T29] audit: type=1400 audit(344.281:15331): avc: denied { nlmsg_read } for pid=32556 comm="syz.5.11902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 344.383754][T32557] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.398776][T32557] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.412804][T32557] SELinux: security policydb version 17 (MLS) not backwards compatible [ 344.412851][ T29] audit: type=1400 audit(344.381:15332): avc: denied { load_policy } for pid=32556 comm="syz.5.11902" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 344.423469][T32557] SELinux: failed to load policy [ 344.496733][T32564] lo speed is unknown, defaulting to 1000 [ 344.691503][ T29] audit: type=1326 audit(344.661:15333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32583 comm="syz.4.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 344.715933][ T29] audit: type=1326 audit(344.661:15334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32583 comm="syz.4.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 344.740789][ T29] audit: type=1326 audit(344.721:15335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32583 comm="syz.4.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 344.774894][ T29] audit: type=1326 audit(344.721:15336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32583 comm="syz.4.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 344.798224][ T29] audit: type=1326 audit(344.721:15337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32583 comm="syz.4.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 344.854283][ T29] audit: type=1326 audit(344.811:15338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.4.11916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 345.036648][T32610] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11925'. [ 345.051676][T32607] netlink: 'syz.4.11924': attribute type 3 has an invalid length. [ 345.059778][T32607] netlink: 'syz.4.11924': attribute type 3 has an invalid length. [ 345.070158][T32610] 1ªî{X¹¦: left allmulticast mode [ 345.082875][T32610] syz_tun: left promiscuous mode [ 345.090677][T32610] ªªªªªª: left promiscuous mode [ 345.095607][T32610] ªªªªªª: left allmulticast mode [ 345.104682][T32615] netlink: 240 bytes leftover after parsing attributes in process `syz.0.11931'. [ 345.114128][T32610] bond0: left promiscuous mode [ 345.123973][T32610] ip6gre4: left allmulticast mode [ 345.131547][T32610] team0: left promiscuous mode [ 345.136559][T32610] team0: left allmulticast mode [ 345.276016][T32643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11933'. [ 346.021703][T32739] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11941'. [ 346.091376][T32739] dummy0: left promiscuous mode [ 346.101796][T32739] ip6gre4: left allmulticast mode [ 346.109271][T32739] ip6gre5: left allmulticast mode [ 346.447117][ T329] loop5: detected capacity change from 0 to 512 [ 346.490805][ T329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.634948][ T349] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.11968'. [ 346.884691][T21717] page_pool_release_retry() stalled pool shutdown: id 190, 3329 inflight 60 sec [ 347.127335][T29667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.356856][ T387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11984'. [ 347.527102][ T403] netlink: 'syz.5.11992': attribute type 3 has an invalid length. [ 347.544798][ T403] netlink: 'syz.5.11992': attribute type 3 has an invalid length. [ 347.727539][ T425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.743244][ T3387] lo speed is unknown, defaulting to 1000 [ 347.749319][ T3387] syz0: Port: 1 Link ACTIVE [ 347.796900][ T431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=431 comm=syz.0.12006 [ 347.882516][ T451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12015'. [ 347.896956][ T451] ip6gre6: entered allmulticast mode [ 347.903424][ T446] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12013'. [ 347.946880][ T3387] lo speed is unknown, defaulting to 1000 [ 347.952677][ T3387] syz0: Port: 1 Link DOWN [ 347.957690][ T461] netlink: 'syz.4.12019': attribute type 13 has an invalid length. [ 347.974452][ T461] gretap0: refused to change device tx_queue_len [ 347.988844][ T461] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 348.004639][ T3360] lo speed is unknown, defaulting to 1000 [ 348.010416][ T3360] syz0: Port: 1 Link ACTIVE [ 348.042421][ T463] lo speed is unknown, defaulting to 1000 [ 349.117653][ T504] lo speed is unknown, defaulting to 1000 [ 349.336121][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 349.336135][ T29] audit: type=1326 audit(349.311:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.4.12040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 349.411764][ T516] loop5: detected capacity change from 0 to 128 [ 349.460174][ T29] audit: type=1326 audit(349.341:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.4.12040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 349.483123][ T29] audit: type=1326 audit(349.341:15663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.4.12040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 349.506174][ T29] audit: type=1326 audit(349.341:15664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.4.12040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 349.529149][ T29] audit: type=1326 audit(349.341:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.4.12040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 349.552159][ T29] audit: type=1326 audit(349.341:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.4.12040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 349.575321][ T29] audit: type=1326 audit(349.341:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.4.12040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 349.635846][ T524] tipc: Started in network mode [ 349.640805][ T524] tipc: Node identity , cluster identity 4711 [ 349.647080][ T524] tipc: Failed to obtain node identity [ 349.652561][ T524] tipc: Enabling of bearer rejected, failed to enable media [ 349.661454][ T29] audit: type=1400 audit(349.611:15668): avc: denied { relabelfrom } for pid=523 comm="syz.5.12042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 349.680865][ T29] audit: type=1400 audit(349.611:15669): avc: denied { relabelto } for pid=523 comm="syz.5.12042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 349.894114][ T533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=533 comm=syz.0.12046 [ 350.034106][ T539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12048'. [ 350.043392][ T539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12048'. [ 350.086181][ T541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=541 comm=syz.1.12050 [ 350.124281][ T29] audit: type=1326 audit(350.081:15670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=528 comm="syz.4.12044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c75ebe9 code=0x7ffc0000 [ 350.274066][ T547] smc: net device bond0 applied user defined pnetid SYZ0 [ 350.324437][ T547] smc: net device bond0 erased user defined pnetid SYZ0 [ 350.517431][ T562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.827481][ T623] ip6gre7: entered allmulticast mode [ 352.191411][ T666] netlink: 'syz.1.12097': attribute type 13 has an invalid length. [ 352.224410][ T666] 1ªî{X¹¦: refused to change device tx_queue_len [ 352.232856][ T666] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 352.341331][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12104'. [ 352.361076][ T679] ip6gre8: entered allmulticast mode [ 352.637783][ T700] netlink: 'syz.3.12112': attribute type 13 has an invalid length. [ 352.658731][ T700] gretap0: refused to change device tx_queue_len [ 352.669157][ T700] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 352.896628][ T712] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12116'. [ 353.204690][ T739] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 353.510380][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12140'. [ 353.520154][ T769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12140'. [ 353.749328][ T787] loop5: detected capacity change from 0 to 512 [ 353.766176][ T787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.830794][T29667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.890690][ T796] veth29: entered promiscuous mode [ 353.895965][ T797] ÿÿÿÿÿÿ: renamed from vlan1 [ 353.907245][ T790] lo speed is unknown, defaulting to 1000 [ 353.958894][ T801] bridge: RTM_NEWNEIGH with invalid ether address [ 354.041600][ T806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=806 comm=syz.3.12157 [ 354.096131][ T812] netlink: 'syz.5.12159': attribute type 4 has an invalid length. [ 354.220583][ T823] ================================================================== [ 354.228703][ T823] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 354.235966][ T823] [ 354.238276][ T823] read-write to 0xffff8881677b6a10 of 4 bytes by task 819 on cpu 1: [ 354.246238][ T823] io_issue_sqe+0x19c/0x970 [ 354.250730][ T823] io_wq_submit_work+0x3f7/0x5f0 [ 354.255697][ T823] io_worker_handle_work+0x44e/0x9b0 [ 354.261131][ T823] io_wq_worker+0x22e/0x870 [ 354.265698][ T823] ret_from_fork+0xda/0x150 [ 354.270185][ T823] ret_from_fork_asm+0x1a/0x30 [ 354.274934][ T823] [ 354.277246][ T823] read to 0xffff8881677b6a10 of 4 bytes by task 823 on cpu 0: [ 354.284761][ T823] io_flush_timeouts+0x56/0x1d0 [ 354.289597][ T823] __io_commit_cqring_flush+0xeb/0x100 [ 354.295065][ T823] io_issue_sqe+0x7cb/0x970 [ 354.299715][ T823] io_wq_submit_work+0x3f7/0x5f0 [ 354.304640][ T823] io_worker_handle_work+0x44e/0x9b0 [ 354.309897][ T823] io_wq_worker+0x22e/0x870 [ 354.314374][ T823] ret_from_fork+0xda/0x150 [ 354.318868][ T823] ret_from_fork_asm+0x1a/0x30 [ 354.323621][ T823] [ 354.325922][ T823] value changed: 0x00000459 -> 0x0000045a [ 354.331625][ T823] [ 354.333920][ T823] Reported by Kernel Concurrency Sanitizer on: [ 354.340077][ T823] CPU: 0 UID: 0 PID: 823 Comm: iou-wrk-814 Tainted: G W 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 354.354301][ T823] Tainted: [W]=WARN [ 354.358094][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.368137][ T823] ================================================================== [ 362.804816][T21717] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 241 sec